GET preferencenail.com/sfp.js
200 OK 85 kB URL
preferencenail.com/sfp.js
IP / ASN
185.196.197.72
#39572 DataWeb Global Group B.V.
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
First Seen 2025-07-08
Last Seen 2025-08-02
Times Seen 1998
Size 85 kB (85386 bytes)
MD5 46a6fef91632b94d14252fe324c1585f
SHA1 387cebbd261b8fe947fe9805875300f2ceeb5cfd
SHA256 36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5
Certificate Info
Issuer Let's Encrypt
Subject preferencenail.com
Fingerprint F9:52:70:4B:81:A8:F8:39:E6:E7:96:8F:EA:FE:17:FD:96:C5:32:E3
Validity Tue, 01 Jul 2025 15:11:38 GMT - Mon, 29 Sep 2025 15:11:37 GMT
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sfp.js HTTP/1.1
Host: preferencenail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://embedcanaistv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 20 Jul 2025 22:18:06 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 28254
Connection: keep-alive
Content-Encoding: gzip
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Host: preferencenail.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: a098040ab56aabc7761b5eb69ecd4604
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET skinnycrawlinglax.com/impr.gif?sid=H4sIAAAAAAAC_1RTTYhcxRau7gm8B28R3uOh4CL0woVCuudW3d8yi5gYJwRjJiaRoC5C_faUc_vWterevpOBQDAoWfZSN3Ln9CSDJgQDLtwI0uNCCAi2C5lFZuNSd0LW0pOB0bM453z1VRXfKb76dKveRyHUbO-9t-2myXO2HA-C3ivXTSFt43uXrvVwMAhO9a6bIolO9TYW6UwhnTXyVM-NX8NhNAhe7Z1XYt0ukwAHAQ5wb8U4pe3G8gELpnxI8YAGg4gMcBzBhvsn9nUHPOuAHO-j_4GR8-O_6Q_AiBkUo6_PKb9e2fLkm6M6Z5V1MJY77xbrhW0KGB212nVAFzuHu8H6OUKfdcEWO4ejgB1vL0YBbuao-8JT4MXOoUzg43vPlfIcVAFc_gea8QxUvguGzUDYO2DkzwhASLi0CsXo_iXrGnbzOcsW7Bwde_YnmGaOjj39PxSjR2dzs9G7avO6MrbwsKFbMBszMMMZlPUuVJtdMM0uiOpjMPIntPzsIhSj7VWfWzBy72UmmQipIv1EUN2PEor7PAySvqAs4iIgQnF28ERGz4D5LtS-A7XpQK27UJddGMm9XsZExHCgaKbTmCgVJ0xiSoVWmgaMSqjFQvsEqnICIp-AcLehdLdh3UzA1d-DX9v7JkopzkjIJWZaUIxTHKssjghLUs1omqkgCkMaJ1ymMRdxgFWqw0gQhiknKQ21xjghjBIR4AyHMk4DoVSgQypiLRc3USo1jwkJozjEPKI6oUJoGtMsxCzRWRrRJJIxo0EYJzIRkRZBihMsw0wxQkmWxjQjmMZJFnGdBZKClx3wFYKxbKFRCBqPoGEIGoOgqRA04_aezD3x7X2Z-5rjw0oOa7gzdLYub_CprYZb7J6thqpAwNwEnGy3TfmRvwOiWppuai-ndpEYrx6t9EmUBX3n-ji6gaeMy3ar3Ef_XRik8_kggnW110slJxHnSkgpiCIqDlRKBMUy0JJKHoI3LRjfBeY7sGnm6PUfe1CaOfr3-RXgbBd8vgvCLAGrXwTWTFOSAVsDGsBm8ViNuJKCFcz4ajwQdgTStlBWx6C62dnK99FLB2ZdTX8FJZ6cfvz7Jye-fecPEK6F0rXwofkBwTC_O71iG7R9xTYePV4tKzMym2xh5KsVq9TSV2-pm4118sI5P_nyjFgQi_bhNeWri6yQphh69OCskVK5FeuEQt9d8NcVv1z7tbO1K-ry4uU3Vi6MSqe8N7aYATNz9K9b90GYOTr-4IuDT3qSvA_GzcDVLYzqJ-gwQJS3wZdH2FsELj_CvETQ1O3UEX60mBsEuTrCjLfg_4b5UT91bHGamXbL34Wh6wCr7kAxamHsWhjnLbB8Ar5emlale3L6l_AggOedKc8d2ua5W_BmrxdTRRVmOBRJTCMZxwFmKeWpVpQSEYZQ-fnarfUTfwUAAP__iWRBXoYFAAA=
200 OK 0 B URL
skinnycrawlinglax.com/impr.gif?sid=H4sIAAAAAAAC_1RTTYhcxRau7gm8B28R3uOh4CL0woVCuudW3d8yi5gYJwRjJiaRoC5C_faUc_vWterevpOBQDAoWfZSN3Ln9CSDJgQDLtwI0uNCCAi2C5lFZuNSd0LW0pOB0bM453z1VRXfKb76dKveRyHUbO-9t-2myXO2HA-C3ivXTSFt43uXrvVwMAhO9a6bIolO9TYW6UwhnTXyVM-NX8NhNAhe7Z1XYt0ukwAHAQ5wb8U4pe3G8gELpnxI8YAGg4gMcBzBhvsn9nUHPOuAHO-j_4GR8-O_6Q_AiBkUo6_PKb9e2fLkm6M6Z5V1MJY77xbrhW0KGB212nVAFzuHu8H6OUKfdcEWO4ejgB1vL0YBbuao-8JT4MXOoUzg43vPlfIcVAFc_gea8QxUvguGzUDYO2DkzwhASLi0CsXo_iXrGnbzOcsW7Bwde_YnmGaOjj39PxSjR2dzs9G7avO6MrbwsKFbMBszMMMZlPUuVJtdMM0uiOpjMPIntPzsIhSj7VWfWzBy72UmmQipIv1EUN2PEor7PAySvqAs4iIgQnF28ERGz4D5LtS-A7XpQK27UJddGMm9XsZExHCgaKbTmCgVJ0xiSoVWmgaMSqjFQvsEqnICIp-AcLehdLdh3UzA1d-DX9v7JkopzkjIJWZaUIxTHKssjghLUs1omqkgCkMaJ1ymMRdxgFWqw0gQhiknKQ21xjghjBIR4AyHMk4DoVSgQypiLRc3USo1jwkJozjEPKI6oUJoGtMsxCzRWRrRJJIxo0EYJzIRkRZBihMsw0wxQkmWxjQjmMZJFnGdBZKClx3wFYKxbKFRCBqPoGEIGoOgqRA04_aezD3x7X2Z-5rjw0oOa7gzdLYub_CprYZb7J6thqpAwNwEnGy3TfmRvwOiWppuai-ndpEYrx6t9EmUBX3n-ji6gaeMy3ar3Ef_XRik8_kggnW110slJxHnSkgpiCIqDlRKBMUy0JJKHoI3LRjfBeY7sGnm6PUfe1CaOfr3-RXgbBd8vgvCLAGrXwTWTFOSAVsDGsBm8ViNuJKCFcz4ajwQdgTStlBWx6C62dnK99FLB2ZdTX8FJZ6cfvz7Jye-fecPEK6F0rXwofkBwTC_O71iG7R9xTYePV4tKzMym2xh5KsVq9TSV2-pm4118sI5P_nyjFgQi_bhNeWri6yQphh69OCskVK5FeuEQt9d8NcVv1z7tbO1K-ry4uU3Vi6MSqe8N7aYATNz9K9b90GYOTr-4IuDT3qSvA_GzcDVLYzqJ-gwQJS3wZdH2FsELj_CvETQ1O3UEX60mBsEuTrCjLfg_4b5UT91bHGamXbL34Wh6wCr7kAxamHsWhjnLbB8Ar5emlale3L6l_AggOedKc8d2ua5W_BmrxdTRRVmOBRJTCMZxwFmKeWpVpQSEYZQ-fnarfUTfwUAAP__iWRBXoYFAAA=
IP / ASN
192.243.59.13
#39572 DataWeb Global Group B.V.
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605935
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject skinnycrawlinglax.com
Fingerprint 4A:6A:48:C8:5B:C5:2B:2E:9C:03:AF:BF:4C:E6:10:23:E2:7B:EA:97
Validity Sat, 28 Jun 2025 22:21:33 GMT - Fri, 26 Sep 2025 22:21:32 GMT
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC_1RTTYhcxRau7gm8B28R3uOh4CL0woVCuudW3d8yi5gYJwRjJiaRoC5C_faUc_vWterevpOBQDAoWfZSN3Ln9CSDJgQDLtwI0uNCCAi2C5lFZuNSd0LW0pOB0bM453z1VRXfKb76dKveRyHUbO-9t-2myXO2HA-C3ivXTSFt43uXrvVwMAhO9a6bIolO9TYW6UwhnTXyVM-NX8NhNAhe7Z1XYt0ukwAHAQ5wb8U4pe3G8gELpnxI8YAGg4gMcBzBhvsn9nUHPOuAHO-j_4GR8-O_6Q_AiBkUo6_PKb9e2fLkm6M6Z5V1MJY77xbrhW0KGB212nVAFzuHu8H6OUKfdcEWO4ejgB1vL0YBbuao-8JT4MXOoUzg43vPlfIcVAFc_gea8QxUvguGzUDYO2DkzwhASLi0CsXo_iXrGnbzOcsW7Bwde_YnmGaOjj39PxSjR2dzs9G7avO6MrbwsKFbMBszMMMZlPUuVJtdMM0uiOpjMPIntPzsIhSj7VWfWzBy72UmmQipIv1EUN2PEor7PAySvqAs4iIgQnF28ERGz4D5LtS-A7XpQK27UJddGMm9XsZExHCgaKbTmCgVJ0xiSoVWmgaMSqjFQvsEqnICIp-AcLehdLdh3UzA1d-DX9v7JkopzkjIJWZaUIxTHKssjghLUs1omqkgCkMaJ1ymMRdxgFWqw0gQhiknKQ21xjghjBIR4AyHMk4DoVSgQypiLRc3USo1jwkJozjEPKI6oUJoGtMsxCzRWRrRJJIxo0EYJzIRkRZBihMsw0wxQkmWxjQjmMZJFnGdBZKClx3wFYKxbKFRCBqPoGEIGoOgqRA04_aezD3x7X2Z-5rjw0oOa7gzdLYub_CprYZb7J6thqpAwNwEnGy3TfmRvwOiWppuai-ndpEYrx6t9EmUBX3n-ji6gaeMy3ar3Ef_XRik8_kggnW110slJxHnSkgpiCIqDlRKBMUy0JJKHoI3LRjfBeY7sGnm6PUfe1CaOfr3-RXgbBd8vgvCLAGrXwTWTFOSAVsDGsBm8ViNuJKCFcz4ajwQdgTStlBWx6C62dnK99FLB2ZdTX8FJZ6cfvz7Jye-fecPEK6F0rXwofkBwTC_O71iG7R9xTYePV4tKzMym2xh5KsVq9TSV2-pm4118sI5P_nyjFgQi_bhNeWri6yQphh69OCskVK5FeuEQt9d8NcVv1z7tbO1K-ry4uU3Vi6MSqe8N7aYATNz9K9b90GYOTr-4IuDT3qSvA_GzcDVLYzqJ-gwQJS3wZdH2FsELj_CvETQ1O3UEX60mBsEuTrCjLfg_4b5UT91bHGamXbL34Wh6wCr7kAxamHsWhjnLbB8Ar5emlale3L6l_AggOedKc8d2ua5W_BmrxdTRRVmOBRJTCMZxwFmKeWpVpQSEYZQ-fnarfUTfwUAAP__iWRBXoYFAAA= HTTP/1.1
Host: skinnycrawlinglax.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.eyG6dMcLiHYPLxpca40KgVa3pYsKeZw0n03s_8f2seY; uid_id2=adac39e2-6c9f-4691-b306-c9a4bc02ceba:2:1; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1; u_pl26816052=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 20 Jul 2025 22:18:07 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
Access-Control-Allow-Origin: *
Vary: Origin
Access-Control-Allow-Credentials: true
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: iprc_l+d36098339844263b645873a2da0fdfd6=5191639; expires=Mon, 21 Jul 2025 22:18:07 GMT; path=/; secure; SameSite=None
iprc_l:5191639=1; expires=Mon, 21 Jul 2025 22:18:07 GMT; path=/; secure; SameSite=None
Host: skinnycrawlinglax.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 060dc130f3af9b32216b5b89682b097a
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET praystakeinstinct.com/pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-sb1.com%2Fsb%2Finterstitial%2Futility%2Frobot%2F3%2Fcss%2Fstyle.css&l=5407&fd=561
200 OK 0 B URL
praystakeinstinct.com/pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-sb1.com%2Fsb%2Finterstitial%2Futility%2Frobot%2F3%2Fcss%2Fstyle.css&l=5407&fd=561
IP / ASN
172.240.127.234
#7979 SERVERS-COM
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605935
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject praystakeinstinct.com
Fingerprint 08:B9:39:D3:1C:E2:4B:34:21:BC:02:6F:17:3E:89:73:97:AC:E1:C9
Validity Sat, 28 Jun 2025 22:08:16 GMT - Fri, 26 Sep 2025 22:08:15 GMT
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-sb1.com%2Fsb%2Finterstitial%2Futility%2Frobot%2F3%2Fcss%2Fstyle.css&l=5407&fd=561 HTTP/1.1
Host: praystakeinstinct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://embedcanaistv.com/
Cookie: uid_id2=adac39e2-6c9f-4691-b306-c9a4bc02ceba:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26944747=1; slecd5b9eac72f1fb51d58f84dd0b805f3b0=[6047961]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 20 Jul 2025 22:18:09 GMT
Content-Length: 0
Connection: keep-alive
x-envoy-upstream-service-time: 0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2
200 OK 40 kB URL
fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2
IP / ASN
142.250.178.99
#15169 GOOGLE
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 40128, version 1.0
First Seen 2025-01-08
Last Seen 2025-08-02
Times Seen 97598
Size 40 kB (40128 bytes)
MD5 9a01b69183a9604ab3a439e388b30501
SHA1 8ed1d59003d0dbe6360481017b44665153665fbe
SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
Certificate Info
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA
Validity Mon, 23 Jun 2025 08:41:27 GMT - Mon, 15 Sep 2025 08:41:26 GMT
GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://embedcanaistv.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 40128
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 18 Jul 2025 08:13:08 GMT
expires: Sat, 18 Jul 2026 08:13:08 GMT
cache-control: public, max-age=31536000
age: 223501
last-modified: Thu, 29 May 2025 23:30:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET embmaxtv.online/premiereclubes/tracks-v1a1/2025/07/20/22/17/25-06000.ts
200 OK 1.6 MB URL
embmaxtv.online/premiereclubes/tracks-v1a1/2025/07/20/22/17/25-06000.ts
IP / ASN
104.26.9.140
#13335 CLOUDFLARENET
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type data
First Seen 2025-07-20
Last Seen 2025-07-20
Times Seen 1
Size 1.6 MB (1606272 bytes)
MD5 d4fe64e36f17623ae6531880965be927
SHA1 02ebd8d76ad974a5454e6e21d33932560551ffab
SHA256 50b37ee02d7141cef3e52668029b1925414d041b5a315512611ad0e71dd6aece
Certificate Info
Issuer Google Trust Services
Subject embmaxtv.online
Fingerprint 2A:3F:B9:3C:50:1B:4F:78:91:90:B5:16:EE:EF:40:17:A2:83:0E:47
Validity Mon, 26 May 2025 20:54:07 GMT - Sun, 24 Aug 2025 21:53:59 GMT
GET /premiereclubes/tracks-v1a1/2025/07/20/22/17/25-06000.ts HTTP/1.1
Host: embmaxtv.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://embedcanaistv.com
DNT: 1
Connection: keep-alive
Referer: https://embedcanaistv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Jul 2025 22:17:56 GMT
content-type: video/MP2T
content-length: 1606272
access-control-allow-headers: x-vsaas-session, x-no-redirect, origin, authorization, accept, range, content-type, x-add-effective, session, x-originator, x-sid
access-control-allow-methods: GET, PUT, DELETE, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server, range, X-Run-Time, X-Sid, Content-Length, Location
server: cloudflare
x-just-generated: false
x-memory: yes
x-route-time: 77
x-run-time: 23
x-sid: 687d6b14-6908-4711-abf4-47c0d37cb318
cache-control: max-age=86400
cf-cache-status: MISS
last-modified: Sun, 20 Jul 2025 22:17:56 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=bD3qmcuP3yXalQd8%2BrK8TUHKGezM1IBAVpSshXrIlfBPpuILJuAMolQnJNA5rn80%2B%2Ffyg3mP9WkPDZSf1Z7tH6mDAtJgjYqXHYZJRA%3D%3D"}]}
cf-ray: 9625d4e02d2e56c3-OSL
X-Firefox-Spdy: h2
GET wss://tracker.novage.com.ua/
101 Switching Protocols 0 B URL
wss://tracker.novage.com.ua/
IP / ASN
143.47.230.237
#31898 ORACLE-BMC-31898
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605935
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject tracker.novage.com.ua
Fingerprint 73:A8:AE:B9:8D:7D:32:54:76:00:B6:0F:AB:6C:F2:A4:AE:F8:D7:B1
Validity Wed, 04 Jun 2025 22:37:08 GMT - Tue, 02 Sep 2025 22:37:07 GMT
GET / HTTP/1.1
Host: tracker.novage.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://embedcanaistv.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: qCK/rQnlK4oGuCTEFUEXrA==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
connection: Upgrade
upgrade: websocket
sec-websocket-accept: kBGPdGpgM4NOIkI2Ggioofn0ooA=
GET praystakeinstinct.com/sbar.json?key=d5b9eac72f1fb51d58f84dd0b805f3b0&uuid=adac39e2-6c9f-4691-b306-c9a4bc02ceba%3A2%3A1
200 OK 6.1 kB URL
praystakeinstinct.com/sbar.json?key=d5b9eac72f1fb51d58f84dd0b805f3b0&uuid=adac39e2-6c9f-4691-b306-c9a4bc02ceba%3A2%3A1
IP / ASN
172.240.127.234
#7979 SERVERS-COM
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type JSON text data
First Seen 2025-07-20
Last Seen 2025-07-20
Times Seen 1
Size 6.1 kB (6098 bytes)
MD5 4a09081a6a84bc09a3f71a38e8f81fe1
SHA1 57ca8787cd37b83496155fed659f940a84230da0
SHA256 bdd27af45b6532f3ec17e256c9e5ff0023a4e59b71b3331c109bb41107dc57f4
Certificate Info
Issuer Let's Encrypt
Subject praystakeinstinct.com
Fingerprint 08:B9:39:D3:1C:E2:4B:34:21:BC:02:6F:17:3E:89:73:97:AC:E1:C9
Validity Sat, 28 Jun 2025 22:08:16 GMT - Fri, 26 Sep 2025 22:08:15 GMT
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sbar.json?key=d5b9eac72f1fb51d58f84dd0b805f3b0&uuid=adac39e2-6c9f-4691-b306-c9a4bc02ceba%3A2%3A1 HTTP/1.1
Host: praystakeinstinct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://embedcanaistv.com
DNT: 1
Connection: keep-alive
Referer: https://embedcanaistv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 20 Jul 2025 22:18:07 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
access-control-allow-origin: https://embedcanaistv.com
access-control-allow-credentials: true
set-cookie: uid_id2=adac39e2-6c9f-4691-b306-c9a4bc02ceba:2:1; expires=Sun, 27 Jul 2025 22:18:07 GMT; path=/; secure; SameSite=None
pdhtkv=true; expires=Mon, 21 Jul 2025 22:18:07 GMT; path=/; secure; SameSite=None
uncs=1; expires=Mon, 21 Jul 2025 22:18:07 GMT; path=/; secure; SameSite=None
pdhtkv29=true; expires=Mon, 21 Jul 2025 22:18:07 GMT; path=/; secure; SameSite=None
uncs29=1; expires=Mon, 21 Jul 2025 22:18:07 GMT; path=/; secure; SameSite=None
u_pl26944747=1; expires=Mon, 21 Jul 2025 22:18:07 GMT; path=/; secure; SameSite=None
slecd5b9eac72f1fb51d58f84dd0b805f3b0=[6047961]; expires=Sun, 20 Jul 2025 22:18:12 GMT; path=/; secure; SameSite=None
x-envoy-upstream-service-time: 217
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 9fb60cd42478eef3b08eea11960330e2
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
GET cdn.creative-sb1.com/sb/interstitial/utility/robot/3/css/style.css
200 OK 5.4 kB URL
cdn.creative-sb1.com/sb/interstitial/utility/robot/3/css/style.css
IP / ASN
104.21.64.1
#13335 CLOUDFLARENET
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type ASCII text
First Seen 2025-07-05
Last Seen 2025-07-26
Times Seen 120
Size 5.4 kB (5407 bytes)
MD5 df57eed868349d658c08b8d20b623f8e
SHA1 956cc8f1814f094d9d5e4730b68a22410c664dde
SHA256 a1095d988ac42d4cc085fb1670b0c8a88edbcbc98bf6e071dc2d8faea55d7cc8
Certificate Info
Issuer Google Trust Services
Subject creative-sb1.com
Fingerprint CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B
Validity Tue, 01 Jul 2025 14:01:22 GMT - Mon, 29 Sep 2025 14:59:36 GMT
GET /sb/interstitial/utility/robot/3/css/style.css HTTP/1.1
Host: cdn.creative-sb1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://embedcanaistv.com
DNT: 1
Connection: keep-alive
Referer: https://embedcanaistv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Jul 2025 22:18:09 GMT
content-type: text/css
server: cloudflare
last-modified: Thu, 12 Dec 2024 14:36:20 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
etag: W/"675af4e4-151f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
cf-cache-status: MISS
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=89jl08ZAiGF2IUY0e9y6p%2FgbhIV0bw0kJNoEn5nP9tdsfxhVI2xP9Ny5GNCuE%2Bnh2lyxn01%2F88YamdmrueoQErEYo3jZkW1LIh6PvrpLBzyqqw%3D%3D"}]}
cf-ray: 9625d52c4cf87127-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET embedcanaistv.com/premiereclubes/
200 OK 7.0 kB URL
embedcanaistv.com/premiereclubes/
IP / ASN
104.21.112.1
#13335 CLOUDFLARENET
Resource Info
File type HTML document, Unicode text, UTF-8 text
First Seen 2025-07-20
Last Seen 2025-07-20
Times Seen 1
Size 7.0 kB (7035 bytes)
MD5 493e67c3c559a2350e013e2b7cd9d705
SHA1 783a88386a0b71c9d7e7de14b816a60d1d3bf101
SHA256 9739222e020a24e8f0a679b71e6ac230c17106090dde3e17048a741643667835
Certificate Info
Issuer Google Trust Services
Subject embedcanaistv.com
Fingerprint B0:FB:CD:0A:AC:90:35:4B:B5:0E:5C:88:49:74:B5:89:A8:4D:9B:8A
Validity Sun, 08 Jun 2025 02:33:23 GMT - Sat, 06 Sep 2025 03:30:48 GMT
GET /premiereclubes/ HTTP/1.1
Host: embedcanaistv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Jul 2025 22:17:54 GMT
content-type: text/html
last-modified: Sun, 20 Jul 2025 21:13:16 GMT
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=L5GTrDSTHSqJ5z0VqioGhiwVKz9T8vFQsOvlAjdlWpLQbqnBTFYijI7z76EUymthvvVNg3Ohiu%2BmqE5shLyetkDfajqikspqTrXZcK2Y1g%3D%3D"}]}
vary: Accept-Encoding
server: cloudflare
x-turbo-charged-by: LiteSpeed
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 9625d4d48b060b06-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET embmaxtv.online/premiereclubes/tracks-v1a1/mono.ts.m3u8
200 OK 303 B URL
embmaxtv.online/premiereclubes/tracks-v1a1/mono.ts.m3u8
IP / ASN
104.26.9.140
#13335 CLOUDFLARENET
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type M3U playlist, ASCII text
First Seen 2025-07-20
Last Seen 2025-07-20
Times Seen 1
Size 303 B (303 bytes)
MD5 784874be074b43202c1b8fb3d7114f54
SHA1 221b4cdeb4e71f3f10ffa7e5da139ba7e1c5948c
SHA256 25bbd2e1b770c58561ab4d87d4bcb653af5f40824f0400562b502a83c987c839
Certificate Info
Issuer Google Trust Services
Subject embmaxtv.online
Fingerprint 2A:3F:B9:3C:50:1B:4F:78:91:90:B5:16:EE:EF:40:17:A2:83:0E:47
Validity Mon, 26 May 2025 20:54:07 GMT - Sun, 24 Aug 2025 21:53:59 GMT
GET /premiereclubes/tracks-v1a1/mono.ts.m3u8 HTTP/1.1
Host: embmaxtv.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://embedcanaistv.com
DNT: 1
Connection: keep-alive
Referer: https://embedcanaistv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Jul 2025 22:17:56 GMT
content-type: application/vnd.apple.mpegurl
content-length: 161
access-control-allow-headers: x-vsaas-session, x-no-redirect, origin, authorization, accept, range, content-type, x-add-effective, session, x-originator, x-sid
access-control-allow-methods: GET, PUT, DELETE, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server, range, X-Run-Time, X-Sid, Content-Length, Location
cache-control: max-age=86400
content-encoding: gzip
pragma: no-cache
server: cloudflare
x-cached: yes
x-route-time: 83
x-run-time: 20
x-sid: 687d6b14-6908-4711-abf4-47c0d37cb318
cf-cache-status: EXPIRED
last-modified: Sun, 20 Jul 2025 22:17:56 GMT
vary: accept-encoding
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=p8%2BB6r%2BX2%2F0hZOb3iDzEn%2BQpQ5dhNCy4E9Io0THOydtqWiZ67nvoY4b8xbYkOHZF754zstuLBrquU32SU0%2F2gI%2BVlnSkfKR1iEv9Sg%3D%3D"}]}
cf-ray: 9625d4dedb9956c3-OSL
X-Firefox-Spdy: h2
GET skinnycrawlinglax.com/d5/b9/ea/d5b9eac72f1fb51d58f84dd0b805f3b0.js
200 OK 67 kB URL
skinnycrawlinglax.com/d5/b9/ea/d5b9eac72f1fb51d58f84dd0b805f3b0.js
IP / ASN
192.243.59.13
#39572 DataWeb Global Group B.V.
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
First Seen 2025-07-20
Last Seen 2025-07-20
Times Seen 1
Size 67 kB (66957 bytes)
MD5 cfdc8b6f68b5e128b70d3d937384574c
SHA1 52421cc19b7d8f4d395df5bb31bb65b30eb82174
SHA256 f86eff41366e13730c1f5da1dabd87faed30ed3bc69e0ebe2a96b530c72240c5
Certificate Info
Issuer Let's Encrypt
Subject skinnycrawlinglax.com
Fingerprint 4A:6A:48:C8:5B:C5:2B:2E:9C:03:AF:BF:4C:E6:10:23:E2:7B:EA:97
Validity Sat, 28 Jun 2025 22:21:33 GMT - Fri, 26 Sep 2025 22:21:32 GMT
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /d5/b9/ea/d5b9eac72f1fb51d58f84dd0b805f3b0.js HTTP/1.1
Host: skinnycrawlinglax.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://embedcanaistv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 20 Jul 2025 22:18:06 GMT
Content-Type: application/javascript
Content-Length: 23949
Connection: keep-alive
Content-Encoding: gzip
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Host: skinnycrawlinglax.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: a048e54194d5576422197ae4c36ca144
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET praystakeinstinct.com/ren.gif?sid=H4sIAAAAAAAC_1SSy2sk1RfHb_Vk8ePnQnygKIi1mIWC6VT1K11mMU8zDmYm48zIIOriviq5pure8t6qrkxACA7IbIQWBI1uKt9OJj4Gcf4AUTouhIBguwoyceHSjSjMwpV00hA8i3POvZ_D5Zzvue9vFgekiYLuv37JrKkkoTPteuA_d0NpYUrnX77uh0E9mPNvKN1pzfmrY3dGC2uUmPNt78Ww2aoHz_sXJF8xM40gDIIwCP15ZWVsVmcOKVR2NwrrUVBvNephu4VV-9-zKzw46kH0DsijUGL08O_xG1B8CJ1-c166ldxkL7yUFgnNjUVP7LymV7QpNdLjNLYeYr0zqYZxI0I-qcHonckoML2t8ShgakRqT9wH0zuTNsF620edsgRSg4mHUPaGkMkQig7BzS0o8TMBuMDlRej0zmVjS3rziNIxHZGpB39DlSMydf9x6PTrs4la9a-ZpMiV0Q6rcQW1OoRaGiIrdpGv1aDKXfD8PSjxE5l5sACdbi26xECJ_ZNUUN6MZGO6w6N4utWJwmnWDDrTPKItxoMGl4weSqTiIairoXAeCuWhiGsoshpSse93KW_RMJBRN55tN6Rsd6gIo4jHMo4CGgkUfNx7H3nWB0_64HYdmV3HiurDFt_DLVdwogaXj4j36jp6okIpCUpHUFKCUhGUOUHZq7ZF4hquuiMSV7BwEhuT2KwGJl_apNsmX5KagNo-rKi2VPaOuwWenxisxU4MzNhRllcDykS1mR2QR8bSep-d_AMrct8XbRZJymcbcRizdija3bjbEiJg3aAdN1kApyooVwN1HtbUiJz-0UemRuR_F-bB6C5csguuToAWz4CWFehyhTV9T6ZMCk41VS7v1blJIUyFLJ9CftPbTA7I04cbfvPlfUi-d_rJpzY2NjY-BbcVMlvhbfUDwVJye3DVlGTrqikdubeY5SpVa3S8_Ws5zeXUl6_Im6Wx4uJ51__iDB-DcXr3unT5AtVC6SVHvjqrhJB23lguybcX3Q3JrhRu-WxhdZEtXDk3fzHNrHROGT0EVSNCDn4FVyPy2MJfhz-71b4GZYewRYW02CMTA8_W4bK90__XH3-w-NscnCGwyTFnmYeyqAa2wY4vEzUilz76HIncO1UtFG-d-2celFVw8lgEJve--_OofmDp-AWqqk13G0vWA81vQacVerZCL6lAkz5ccWKQZ3bv1C_NQwNLvAFLrLfFEpt8eCSzU_t-txUz3piVnahBeRjFXUGbNAxl0JplHdntInej5XdXnv03AAD___H32fXEBAAA
200 OK 0 B URL
praystakeinstinct.com/ren.gif?sid=H4sIAAAAAAAC_1SSy2sk1RfHb_Vk8ePnQnygKIi1mIWC6VT1K11mMU8zDmYm48zIIOriviq5pure8t6qrkxACA7IbIQWBI1uKt9OJj4Gcf4AUTouhIBguwoyceHSjSjMwpV00hA8i3POvZ_D5Zzvue9vFgekiYLuv37JrKkkoTPteuA_d0NpYUrnX77uh0E9mPNvKN1pzfmrY3dGC2uUmPNt78Ww2aoHz_sXJF8xM40gDIIwCP15ZWVsVmcOKVR2NwrrUVBvNephu4VV-9-zKzw46kH0DsijUGL08O_xG1B8CJ1-c166ldxkL7yUFgnNjUVP7LymV7QpNdLjNLYeYr0zqYZxI0I-qcHonckoML2t8ShgakRqT9wH0zuTNsF620edsgRSg4mHUPaGkMkQig7BzS0o8TMBuMDlRej0zmVjS3rziNIxHZGpB39DlSMydf9x6PTrs4la9a-ZpMiV0Q6rcQW1OoRaGiIrdpGv1aDKXfD8PSjxE5l5sACdbi26xECJ_ZNUUN6MZGO6w6N4utWJwmnWDDrTPKItxoMGl4weSqTiIairoXAeCuWhiGsoshpSse93KW_RMJBRN55tN6Rsd6gIo4jHMo4CGgkUfNx7H3nWB0_64HYdmV3HiurDFt_DLVdwogaXj4j36jp6okIpCUpHUFKCUhGUOUHZq7ZF4hquuiMSV7BwEhuT2KwGJl_apNsmX5KagNo-rKi2VPaOuwWenxisxU4MzNhRllcDykS1mR2QR8bSep-d_AMrct8XbRZJymcbcRizdija3bjbEiJg3aAdN1kApyooVwN1HtbUiJz-0UemRuR_F-bB6C5csguuToAWz4CWFehyhTV9T6ZMCk41VS7v1blJIUyFLJ9CftPbTA7I04cbfvPlfUi-d_rJpzY2NjY-BbcVMlvhbfUDwVJye3DVlGTrqikdubeY5SpVa3S8_Ws5zeXUl6_Im6Wx4uJ51__iDB-DcXr3unT5AtVC6SVHvjqrhJB23lguybcX3Q3JrhRu-WxhdZEtXDk3fzHNrHROGT0EVSNCDn4FVyPy2MJfhz-71b4GZYewRYW02CMTA8_W4bK90__XH3-w-NscnCGwyTFnmYeyqAa2wY4vEzUilz76HIncO1UtFG-d-2celFVw8lgEJve--_OofmDp-AWqqk13G0vWA81vQacVerZCL6lAkz5ccWKQZ3bv1C_NQwNLvAFLrLfFEpt8eCSzU_t-txUz3piVnahBeRjFXUGbNAxl0JplHdntInej5XdXnv03AAD___H32fXEBAAA
IP / ASN
172.240.127.234
#7979 SERVERS-COM
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605935
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject praystakeinstinct.com
Fingerprint 08:B9:39:D3:1C:E2:4B:34:21:BC:02:6F:17:3E:89:73:97:AC:E1:C9
Validity Sat, 28 Jun 2025 22:08:16 GMT - Fri, 26 Sep 2025 22:08:15 GMT
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC_1SSy2sk1RfHb_Vk8ePnQnygKIi1mIWC6VT1K11mMU8zDmYm48zIIOriviq5pure8t6qrkxACA7IbIQWBI1uKt9OJj4Gcf4AUTouhIBguwoyceHSjSjMwpV00hA8i3POvZ_D5Zzvue9vFgekiYLuv37JrKkkoTPteuA_d0NpYUrnX77uh0E9mPNvKN1pzfmrY3dGC2uUmPNt78Ww2aoHz_sXJF8xM40gDIIwCP15ZWVsVmcOKVR2NwrrUVBvNephu4VV-9-zKzw46kH0DsijUGL08O_xG1B8CJ1-c166ldxkL7yUFgnNjUVP7LymV7QpNdLjNLYeYr0zqYZxI0I-qcHonckoML2t8ShgakRqT9wH0zuTNsF620edsgRSg4mHUPaGkMkQig7BzS0o8TMBuMDlRej0zmVjS3rziNIxHZGpB39DlSMydf9x6PTrs4la9a-ZpMiV0Q6rcQW1OoRaGiIrdpGv1aDKXfD8PSjxE5l5sACdbi26xECJ_ZNUUN6MZGO6w6N4utWJwmnWDDrTPKItxoMGl4weSqTiIairoXAeCuWhiGsoshpSse93KW_RMJBRN55tN6Rsd6gIo4jHMo4CGgkUfNx7H3nWB0_64HYdmV3HiurDFt_DLVdwogaXj4j36jp6okIpCUpHUFKCUhGUOUHZq7ZF4hquuiMSV7BwEhuT2KwGJl_apNsmX5KagNo-rKi2VPaOuwWenxisxU4MzNhRllcDykS1mR2QR8bSep-d_AMrct8XbRZJymcbcRizdija3bjbEiJg3aAdN1kApyooVwN1HtbUiJz-0UemRuR_F-bB6C5csguuToAWz4CWFehyhTV9T6ZMCk41VS7v1blJIUyFLJ9CftPbTA7I04cbfvPlfUi-d_rJpzY2NjY-BbcVMlvhbfUDwVJye3DVlGTrqikdubeY5SpVa3S8_Ws5zeXUl6_Im6Wx4uJ51__iDB-DcXr3unT5AtVC6SVHvjqrhJB23lguybcX3Q3JrhRu-WxhdZEtXDk3fzHNrHROGT0EVSNCDn4FVyPy2MJfhz-71b4GZYewRYW02CMTA8_W4bK90__XH3-w-NscnCGwyTFnmYeyqAa2wY4vEzUilz76HIncO1UtFG-d-2celFVw8lgEJve--_OofmDp-AWqqk13G0vWA81vQacVerZCL6lAkz5ccWKQZ3bv1C_NQwNLvAFLrLfFEpt8eCSzU_t-txUz3piVnahBeRjFXUGbNAxl0JplHdntInej5XdXnv03AAD___H32fXEBAAA HTTP/1.1
Host: praystakeinstinct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://embedcanaistv.com/
Cookie: uid_id2=adac39e2-6c9f-4691-b306-c9a4bc02ceba:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26944747=1; slecd5b9eac72f1fb51d58f84dd0b805f3b0=[6047961]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 20 Jul 2025 22:18:08 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
access-control-allow-origin: *
vary: Origin
access-control-allow-credentials: true
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 1
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: b802203ca3529167681024b69e02c538
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET praystakeinstinct.com/pixel/sbs?c=1
200 OK 0 B URL
praystakeinstinct.com/pixel/sbs?c=1
IP / ASN
172.240.127.234
#7979 SERVERS-COM
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605935
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject praystakeinstinct.com
Fingerprint 08:B9:39:D3:1C:E2:4B:34:21:BC:02:6F:17:3E:89:73:97:AC:E1:C9
Validity Sat, 28 Jun 2025 22:08:16 GMT - Fri, 26 Sep 2025 22:08:15 GMT
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: praystakeinstinct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://embedcanaistv.com/
Cookie: uid_id2=adac39e2-6c9f-4691-b306-c9a4bc02ceba:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26944747=1; slecd5b9eac72f1fb51d58f84dd0b805f3b0=[6047961]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 20 Jul 2025 22:18:09 GMT
Content-Length: 0
Connection: keep-alive
x-envoy-upstream-service-time: 0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
200 OK 17 kB URL
fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
IP / ASN
142.250.178.74
#15169 GOOGLE
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type ASCII text, with very long lines (1572)
First Seen 2025-06-02
Last Seen 2025-08-02
Times Seen 2300
Size 17 kB (16755 bytes)
MD5 e9d2e14beb088f37fae98294940a9dcd
SHA1 1dafc3c55550249c8c2d782d5616c7b445c8e005
SHA256 f2e491cc46d3fcba81f729065d622bd722751d4a2e7f80b479aa64a92c17b5c7
Certificate Info
Issuer Google Trust Services
Subject upload.video.google.com
Fingerprint DC:40:BF:B1:59:C9:CC:B5:4A:38:2D:D0:16:8D:06:A5:1D:B4:08:8B
Validity Mon, 23 Jun 2025 08:41:28 GMT - Mon, 15 Sep 2025 08:41:27 GMT
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 20 Jul 2025 22:18:08 GMT
date: Sun, 20 Jul 2025 22:18:08 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET cdn.creative-sb1.com/sb/interstitial/utility/robot/3/js/script.js
200 OK 8.3 kB URL
cdn.creative-sb1.com/sb/interstitial/utility/robot/3/js/script.js
IP / ASN
104.21.64.1
#13335 CLOUDFLARENET
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type Unicode text, UTF-8 text
First Seen 2025-07-05
Last Seen 2025-07-26
Times Seen 118
Size 8.3 kB (8335 bytes)
MD5 5095f58af63fd8065c2a2d9b2a876619
SHA1 c8b45443a779404214368ee7554c12561d245693
SHA256 d675bd49116ef0ee66784ef278bc42e86d664aa5f8e62ddc3b9b503dbf6d53e6
Certificate Info
Issuer Google Trust Services
Subject creative-sb1.com
Fingerprint CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B
Validity Tue, 01 Jul 2025 14:01:22 GMT - Mon, 29 Sep 2025 14:59:36 GMT
GET /sb/interstitial/utility/robot/3/js/script.js HTTP/1.1
Host: cdn.creative-sb1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://embedcanaistv.com
DNT: 1
Connection: keep-alive
Referer: https://embedcanaistv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Jul 2025 22:18:09 GMT
content-type: application/javascript
server: cloudflare
last-modified: Tue, 08 Apr 2025 15:04:49 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=e%2FiIDJSb2OJFi2WWuxfFw5FMcKMTmPJ5v%2Fp44gPUuRPO1DuL%2Bmsj1zCC%2BDDmFqkOBVvTQZSDtA%2FpaXXklbDLDgAwaSjC50ibD47B6RPItcB7Hg%3D%3D"}]}
cf-cache-status: MISS
etag: W/"67f53b11-208f"
content-encoding: br
cf-ray: 9625d52d7eb17127-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET waust.at/s.js
200 OK 7.7 kB IP / ASN
104.26.4.7
#13335 CLOUDFLARENET
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type JavaScript source, ASCII text, with very long lines (7700), with no line terminators
First Seen 2025-04-12
Last Seen 2025-08-01
Times Seen 288
Size 7.7 kB (7700 bytes)
MD5 e0fb0c08bd6a38c317cfe13488cb473e
SHA1 84338c9c04b399fc6d54d1e07d12f2bee6fd3fb8
SHA256 bfc69c4a8677df7bcbcf4262cdf722483ff9dae6a9887dda101fe6646eee7d0e
Certificate Info
Issuer Google Trust Services
Subject waust.at
Fingerprint 83:0A:BB:EA:89:E1:09:05:05:D3:44:92:81:62:75:4B:35:61:DA:4D
Validity Sat, 21 Jun 2025 14:12:03 GMT - Fri, 19 Sep 2025 15:11:40 GMT
GET /s.js HTTP/1.1
Host: waust.at
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://embedcanaistv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Jul 2025 22:17:55 GMT
content-type: application/x-javascript
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
last-modified: Thu, 12 Jun 2025 10:32:07 GMT
etag: W/"684aaca7-1e14"
expires: Mon, 21 Jul 2025 22:11:21 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 394
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Z%2FG3HK1lGLpMJ2IrGQNSFetMTYCG2E8hMq%2FoDkrGD7eZqa%2F1kDdS%2Bs%2FwVs3UHApdpuROxGQ79GLdb3QJ4DrNZk1Zln8p"}]}
cf-ray: 9625d4d8b8e7b4f9-OSL
X-Firefox-Spdy: h2
GET cdn.jsdelivr.net/npm/p2p-media-loader-hlsjs@latest/build/p2p-media-loader-hlsjs.min.js
200 OK 27 kB URL
cdn.jsdelivr.net/npm/p2p-media-loader-hlsjs@latest/build/p2p-media-loader-hlsjs.min.js
IP / ASN
104.16.175.226
#13335 CLOUDFLARENET
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type JavaScript source, ASCII text, with very long lines (26814)
First Seen 2023-03-07
Last Seen 2025-07-30
Times Seen 489
Size 27 kB (26815 bytes)
MD5 835f1f7feab838f171c6334abc3d14da
SHA1 68b97b433d37600647338e57f4344e5e1faf6246
SHA256 189334d0a898e2aa16794cdd1ea47a0e7c1750578173b25033049fafdf55f2a4
Certificate Info
Issuer Sectigo Limited
Subject *.jsdelivr.net
Fingerprint A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F
Validity Fri, 25 Apr 2025 00:00:00 GMT - Mon, 04 May 2026 23:59:59 GMT
GET /npm/p2p-media-loader-hlsjs@latest/build/p2p-media-loader-hlsjs.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://embedcanaistv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Jul 2025 22:17:55 GMT
content-type: application/javascript; charset=utf-8
content-length: 7381
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 0.6.2
x-jsd-version-type: version
etag: W/"68bf-aLl7Qz03YAZHM45X9DROXh+vYkY"
content-encoding: br
x-served-by: cache-fra-eddf8230045-FRA, cache-lga21945-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 31939
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e1AqFjUTwwbGiC%2B5nK55JtPXVwx2FN0ESAhXTJqxoqRF8eLint0BX%2BgquT1y675JXVjKoefashrBgA08E6iL8I%2FY6gq7bOcXAyBPcz04awoHD4CZCKhflO040oqlN63hhgE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9625d4d84d0356c5-OSL
X-Firefox-Spdy: h2
GET embmaxtv.online/premiereclubes/tracks-v1a1/2025/07/20/22/17/19-06000.ts
200 OK 1.4 MB URL
embmaxtv.online/premiereclubes/tracks-v1a1/2025/07/20/22/17/19-06000.ts
IP / ASN
104.26.9.140
#13335 CLOUDFLARENET
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type data
First Seen 2025-07-20
Last Seen 2025-07-20
Times Seen 1
Size 1.4 MB (1350592 bytes)
MD5 ceb28228c82ba56ad191a1e8adc741f5
SHA1 2d1582e37fa8ea50dfb0ce06873cfe627aaf5ba2
SHA256 5bf720badbfa387f35c5b74ccdad84b7d32835803a727b2921e0a7d09382a67a
Certificate Info
Issuer Google Trust Services
Subject embmaxtv.online
Fingerprint 2A:3F:B9:3C:50:1B:4F:78:91:90:B5:16:EE:EF:40:17:A2:83:0E:47
Validity Mon, 26 May 2025 20:54:07 GMT - Sun, 24 Aug 2025 21:53:59 GMT
GET /premiereclubes/tracks-v1a1/2025/07/20/22/17/19-06000.ts HTTP/1.1
Host: embmaxtv.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://embedcanaistv.com
DNT: 1
Connection: keep-alive
Referer: https://embedcanaistv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Jul 2025 22:17:56 GMT
content-type: video/MP2T
content-length: 1350592
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-headers: x-vsaas-session, x-no-redirect, origin, authorization, accept, range, content-type, x-add-effective, session, x-originator, x-sid
access-control-allow-methods: GET, PUT, DELETE, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server, range, X-Run-Time, X-Sid, Content-Length, Location
x-just-generated: false
x-memory: yes
x-route-time: 62
x-run-time: 26
x-sid: 687d6b14-6908-4711-abf4-47c0d37cb318
cache-control: max-age=86400
cf-cache-status: MISS
last-modified: Sun, 20 Jul 2025 22:17:56 GMT
accept-ranges: bytes
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=vta5%2BlwnsAZrB%2Fa5S4QH5K0OrxwziFrVP2GdIVLZIEwlzITGKqLoUQcdR%2FUkT7hEOLKsOHgUjolqb7b2xqDDAh%2B6lPYOZl%2FMm%2BMpqg%3D%3D"}]}
cf-ray: 9625d4e02d2456c3-OSL
X-Firefox-Spdy: h2
GET skinnycrawlinglax.com/5b/06/c6/5b06c681240b05977e5c7dc08bfa65b3.js
200 OK 104 kB URL
skinnycrawlinglax.com/5b/06/c6/5b06c681240b05977e5c7dc08bfa65b3.js
IP / ASN
192.243.59.13
#39572 DataWeb Global Group B.V.
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
First Seen 2025-07-20
Last Seen 2025-07-20
Times Seen 1
Size 104 kB (104197 bytes)
MD5 e3e2f0d5afdf10fbf4da931f0ab43ff3
SHA1 9be9442c66d0292ff908590d0f1037e19eb7cfbd
SHA256 b0411f9fd7e19eaa3ad9719ed74a33d9208156f8c237e4e27b3ce1a702b96120
Certificate Info
Issuer Let's Encrypt
Subject skinnycrawlinglax.com
Fingerprint 4A:6A:48:C8:5B:C5:2B:2E:9C:03:AF:BF:4C:E6:10:23:E2:7B:EA:97
Validity Sat, 28 Jun 2025 22:21:33 GMT - Fri, 26 Sep 2025 22:21:32 GMT
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /5b/06/c6/5b06c681240b05977e5c7dc08bfa65b3.js HTTP/1.1
Host: skinnycrawlinglax.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://embedcanaistv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 20 Jul 2025 22:18:06 GMT
Content-Type: application/javascript
Content-Length: 32876
Connection: keep-alive
Content-Encoding: gzip
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Host: skinnycrawlinglax.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: bcc097d2104e4ed859d764cd9aa5e991
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET weirdopt.com/ad/advertisers.js
200 OK 0 B URL
weirdopt.com/ad/advertisers.js
IP / ASN
185.196.197.71
#39572 DataWeb Global Group B.V.
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605935
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject weirdopt.com
Fingerprint 1A:27:71:C0:8E:44:D4:6B:F5:AA:49:F0:F1:AF:E5:5F:30:23:A4:D4
Validity Tue, 01 Jul 2025 15:18:37 GMT - Mon, 29 Sep 2025 15:18:36 GMT
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ad/advertisers.js HTTP/1.1
Host: weirdopt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://embedcanaistv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 20 Jul 2025 22:18:06 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 141a3a76b21ed115df11590908208b89
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET cdn.show-creative1.com/sb/interstitial/utility/robot/3/index.html
200 OK 1.3 kB URL
cdn.show-creative1.com/sb/interstitial/utility/robot/3/index.html
IP / ASN
172.67.208.42
#13335 CLOUDFLARENET
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type HTML document, ASCII text
First Seen 2025-07-05
Last Seen 2025-07-26
Times Seen 123
Size 1.3 kB (1332 bytes)
MD5 2f0d1bea6beedbf0b97c9eb03597562e
SHA1 5428af5ccdfaa6f1d0509bb8842afd0fdf17c4bb
SHA256 b84c3c03e8e4a088a05e8afb94fcfff7edd33120360fd0b601d3b33216d8c811
Certificate Info
Issuer Google Trust Services
Subject show-creative1.com
Fingerprint 71:AE:E3:FA:6F:22:A3:9D:C5:0D:04:F8:E3:9F:A3:3C:E7:02:E6:9F
Validity Wed, 11 Jun 2025 18:52:57 GMT - Tue, 09 Sep 2025 19:50:24 GMT
GET /sb/interstitial/utility/robot/3/index.html HTTP/1.1
Host: cdn.show-creative1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://embedcanaistv.com
DNT: 1
Connection: keep-alive
Referer: https://embedcanaistv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Jul 2025 22:18:08 GMT
content-type: text/html
server: cloudflare
last-modified: Thu, 12 Dec 2024 14:36:17 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-expose-headers: Date
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=OYv3OckDKX0vlDDmdFWp2YcK7WFbZaX0s%2F3THqogTXEmnnn%2FMzEwRpgHSzj9pDkOGIuGcy4Uw94KMtQYISEwKygkNDsJtyKnFnb%2FEVsCWxUnvywg"}]}
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 9625d5286fa25685-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET professionaltrafficmonitor.com/stats
200 OK 40 B URL
professionaltrafficmonitor.com/stats
IP / ASN
35.157.202.115
#16509 AMAZON-02
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type ASCII text, with no line terminators
First Seen 2025-07-20
Last Seen 2025-07-20
Times Seen 1
Size 40 B (40 bytes)
MD5 741858baf6c8fb2160fc426d93e74e70
SHA1 d96aadc8499890e50dfbfb5f0756ff1a418ea419
SHA256 1fea3103708fba19552358ddae316d98e46102a86adaab42ba397abdcadbe995
Certificate Info
Issuer Amazon
Subject protrafficinspector.com
Fingerprint 5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6
Validity Tue, 01 Jul 2025 00:00:00 GMT - Thu, 30 Jul 2026 23:59:59 GMT
GET /stats HTTP/1.1
Host: professionaltrafficmonitor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://embedcanaistv.com
DNT: 1
Connection: keep-alive
Referer: https://embedcanaistv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Jul 2025 22:18:06 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://embedcanaistv.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=adac39e2-6c9f-4691-b306-c9a4bc02ceba:2:1; expires=Wed, 18 Jul 2035 22:18:06 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
GET skinnycrawlinglax.com/watch.65393690165.js?abt=F-2480-rr-14_1&aioi=t&dev=e&key=7db24bbecddc2e2e50e72c91d0fd9db3&kw=%5B%22premiere%22%2C%22clubes%22%5D&pst=1753049946&rb=&refer=https%3A%2F%2Fembedcanaistv.com%2Fpremiereclubes%2F&res=14.3095&rmtc=t&shu=4791823bd1afc911715e8542a67fa978e0433956bd75bc501e7f34c2a19b2793ff1162a92c01813d570cee0f39c5fd854299dfb52234531b49f69ccf959831a6f874964d5a90356d6c4fc07161d38ea292875982195684bf80d9&sub3=group_b&tz=0&uuid=adac39e2-6c9f-4691-b306-c9a4bc02ceba%3A2%3A1
200 OK 5.0 kB URL
skinnycrawlinglax.com/watch.65393690165.js?abt=F-2480-rr-14_1&aioi=t&dev=e&key=7db24bbecddc2e2e50e72c91d0fd9db3&kw=%5B%22premiere%22%2C%22clubes%22%5D&pst=1753049946&rb=&refer=https%3A%2F%2Fembedcanaistv.com%2Fpremiereclubes%2F&res=14.3095&rmtc=t&shu=4791823bd1afc911715e8542a67fa978e0433956bd75bc501e7f34c2a19b2793ff1162a92c01813d570cee0f39c5fd854299dfb52234531b49f69ccf959831a6f874964d5a90356d6c4fc07161d38ea292875982195684bf80d9&sub3=group_b&tz=0&uuid=adac39e2-6c9f-4691-b306-c9a4bc02ceba%3A2%3A1
IP / ASN
192.243.59.13
#39572 DataWeb Global Group B.V.
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type JavaScript source, ASCII text, with very long lines (4173)
First Seen 2025-07-20
Last Seen 2025-07-20
Times Seen 1
Size 5.0 kB (5049 bytes)
MD5 ad931eaf431655ddd13f397b2844923f
SHA1 2525390003855bfba19a81a9fe4071119d6a2704
SHA256 195c35de0960ab63bce1d72c8ae873a5e718e6b4d7b301a0f9fda6b07b9730f5
Certificate Info
Issuer Let's Encrypt
Subject skinnycrawlinglax.com
Fingerprint 4A:6A:48:C8:5B:C5:2B:2E:9C:03:AF:BF:4C:E6:10:23:E2:7B:EA:97
Validity Sat, 28 Jun 2025 22:21:33 GMT - Fri, 26 Sep 2025 22:21:32 GMT
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.65393690165.js?abt=F-2480-rr-14_1&aioi=t&dev=e&key=7db24bbecddc2e2e50e72c91d0fd9db3&kw=%5B%22premiere%22%2C%22clubes%22%5D&pst=1753049946&rb=&refer=https%3A%2F%2Fembedcanaistv.com%2Fpremiereclubes%2F&res=14.3095&rmtc=t&shu=4791823bd1afc911715e8542a67fa978e0433956bd75bc501e7f34c2a19b2793ff1162a92c01813d570cee0f39c5fd854299dfb52234531b49f69ccf959831a6f874964d5a90356d6c4fc07161d38ea292875982195684bf80d9&sub3=group_b&tz=0&uuid=adac39e2-6c9f-4691-b306-c9a4bc02ceba%3A2%3A1 HTTP/1.1
Host: skinnycrawlinglax.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://embedcanaistv.com
Referer: https://embedcanaistv.com/
DNT: 1
Connection: keep-alive
Cookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoyNjgxNjA1MiwiayI6IjdkYjI0YmJlY2RkYzJlMmU1MGU3MmM5MWQwZmQ5ZGIzIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo0MjQ1NTM2LCJwaWQiOjU0MjUzNCwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjozLCJhaWQiOjIzLCJwdCI6NCwicGsiOiJ1ZXJpeDlrayIsImNwa3MiOnsiMjgiOiI1YjA2YzY4MTI0MGIwNTk3N2U1YzdkYzA4YmZhNjViMyIsIjI5IjoiZDViOWVhYzcyZjFmYjUxZDU4Zjg0ZGQwYjgwNWYzYjAifSwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjI2NjU2MTExNSwiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjM4OTE0LCJvbiI6IldpbmRvd3MiLCJvdiI6IjEwLjAiLCJiaWQiOjEzNjkyNSwiYm4iOiJGaXJlZm94IiwiYnYiOiIxMzQuMCIsInd2IjpmYWxzZSwiZSI6dHJ1ZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImEiOmZhbHNlLCJjciI6eyJuIjoiQmxpeCBTb2x1dGlvbnMifSwieGYiOiIiLCJpeGYiOmZhbHNlLCJpZ3hmIjpmYWxzZSwidXAiOnRydWUsInIiOiJodHRwczovL2VtYmVkY2FuYWlzdHYuY29tL3ByZW1pZXJlY2x1YmVzLyIsImFyIjpbXX19.eyG6dMcLiHYPLxpca40KgVa3pYsKeZw0n03s_8f2seY
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 20 Jul 2025 22:18:06 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Access-Control-Allow-Origin: https://embedcanaistv.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=adac39e2-6c9f-4691-b306-c9a4bc02ceba:2:1; expires=Sun, 27 Jul 2025 22:18:06 GMT; path=/; secure; SameSite=None
pdhtkv=true; expires=Mon, 21 Jul 2025 22:18:06 GMT; path=/; secure; SameSite=None
uncs=1; expires=Mon, 21 Jul 2025 22:18:06 GMT; path=/; secure; SameSite=None
pdhtkv23=true; expires=Mon, 21 Jul 2025 22:18:06 GMT; path=/; secure; SameSite=None
uncs23=1; expires=Mon, 21 Jul 2025 22:18:06 GMT; path=/; secure; SameSite=None
u_pl26816052=1; expires=Mon, 21 Jul 2025 22:18:06 GMT; path=/; secure; SameSite=None
Host: skinnycrawlinglax.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: a886cac5c1522e1a30eaf45af966335c
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
GET cdn.jsdelivr.net/npm/@clappr/player@0.4.7/dist/clappr.min.js
200 OK 481 kB URL
cdn.jsdelivr.net/npm/@clappr/player@0.4.7/dist/clappr.min.js
IP / ASN
104.16.175.226
#13335 CLOUDFLARENET
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
First Seen 2023-03-07
Last Seen 2025-07-27
Times Seen 373
Size 481 kB (480925 bytes)
MD5 7295e1ad4aea951682aa1f585d3497e4
SHA1 83f6d91203ffd1709b3f1571ed12ea517a71c735
SHA256 ce00e20b1de71ae06025269109fb0cb9482ba6af1dbc262ba4eda319aaef9229
Certificate Info
Issuer Sectigo Limited
Subject *.jsdelivr.net
Fingerprint A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F
Validity Fri, 25 Apr 2025 00:00:00 GMT - Mon, 04 May 2026 23:59:59 GMT
GET /npm/@clappr/player@0.4.7/dist/clappr.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://embedcanaistv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Jul 2025 22:17:55 GMT
content-type: application/javascript; charset=utf-8
content-length: 118869
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 0.4.7
x-jsd-version-type: version
etag: W/"7569d-g/bZEgP/0XCbPxVx7RLqUXpxxzU"
content-encoding: br
x-served-by: cache-fra-eddf8230102-FRA, cache-lga21955-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 132154
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7O4uzRPn%2BnDP4hNFt%2FqAYfEUueYnj67Hoytut0Q0hfsOWx6%2BfLNNdSyDdDutQFWNMg18HFs1KoixolXMTZgv8OsvUD2SvVSOB3luN7a8q%2FaXc7nzuwrAZPi2SoiptDgJxrk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9625d4d81cd956c5-OSL
X-Firefox-Spdy: h2
GET embmaxtv.online/premiereclubes/index.m3u8
200 OK 186 B URL
embmaxtv.online/premiereclubes/index.m3u8
IP / ASN
104.26.9.140
#13335 CLOUDFLARENET
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type M3U playlist, ASCII text
First Seen 2025-07-20
Last Seen 2025-07-20
Times Seen 1
Size 186 B (186 bytes)
MD5 4c32eae4753329c77befc665e94b031c
SHA1 7c42f458c6d8ca0a58fcc0a9c3ed756b9d043745
SHA256 719c5dab9f9bb673f1e6b978d4ea6ea245b4135bac929e54c59bd66ac97224d9
Certificate Info
Issuer Google Trust Services
Subject embmaxtv.online
Fingerprint 2A:3F:B9:3C:50:1B:4F:78:91:90:B5:16:EE:EF:40:17:A2:83:0E:47
Validity Mon, 26 May 2025 20:54:07 GMT - Sun, 24 Aug 2025 21:53:59 GMT
GET /premiereclubes/index.m3u8 HTTP/1.1
Host: embmaxtv.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://embedcanaistv.com
DNT: 1
Connection: keep-alive
Referer: https://embedcanaistv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Jul 2025 22:17:56 GMT
content-type: application/vnd.apple.mpegurl
content-length: 177
access-control-allow-headers: x-vsaas-session, x-no-redirect, origin, authorization, accept, range, content-type, x-add-effective, session, x-originator, x-sid
access-control-allow-methods: GET, PUT, DELETE, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server, range, X-Run-Time, X-Sid, Content-Length, Location
cache-control: max-age=86400
content-encoding: gzip
pragma: no-cache
server: cloudflare
x-media-info-time: 8
x-prepare-time: 28
x-route-time: 226
x-run-time: 36
x-sid: 687d6b14-6908-4711-abf4-47c0d37cb318
cf-cache-status: EXPIRED
last-modified: Sun, 20 Jul 2025 22:17:56 GMT
vary: accept-encoding
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=hckkZE2um401Qkj38NfVyGwpg%2Fyf0eU%2BwdawHLjzxKfd%2Fw%2BTq0MfGq3%2FjaMipwtJaYgKnAlhkuCFCy%2BwS%2BnczEQvEA5jkupVDAhfjQ%3D%3D"}]}
cf-ray: 9625d4dd69cb56c3-OSL
X-Firefox-Spdy: h2
GET t.dtscout.com/i/?l=https%3A%2F%2Fembedcanaistv.com%2Fpremiereclubes%2F&j=
200 OK 2.1 kB URL
t.dtscout.com/i/?l=https%3A%2F%2Fembedcanaistv.com%2Fpremiereclubes%2F&j=
IP / ASN
104.26.10.2
#13335 CLOUDFLARENET
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type ASCII text, with very long lines (2077)
First Seen 2025-07-17
Last Seen 2025-08-01
Times Seen 22
Size 2.1 kB (2079 bytes)
MD5 8a6057f2ea8e83d6c73391847ce9a1a7
SHA1 0e71c86379caa9025f25635d23573dd39d183480
SHA256 33b6fa813f2198168dd3f4d3676f527dd5e56f604e1e424191574f2a0aec8748
Certificate Info
Issuer Google Trust Services
Subject dtscout.com
Fingerprint 84:74:81:B9:DA:1E:0B:90:B3:A6:4C:78:8F:C5:C8:AA:3A:19:C6:C9
Validity Thu, 03 Jul 2025 06:07:16 GMT - Wed, 01 Oct 2025 07:06:51 GMT
GET /i/?l=https%3A%2F%2Fembedcanaistv.com%2Fpremiereclubes%2F&j= HTTP/1.1
Host: t.dtscout.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://embedcanaistv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Jul 2025 22:17:56 GMT
content-type: application/javascript
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
x-s: mtl1
x-t: 0.408
expires: Sun, 20 Jul 2025 22:17:55 GMT
cache-control: no-cache
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ltRwwAgmAkLC1e1Xo%2BPWnMKwa8X6EcUyG%2F4aWiufU%2Ffl5dUIHlY8G0q%2Bkfgc0OWWgvApBZ63hTGwy15baz3AaCXXlPssxH60txQ%3D"}]}
content-encoding: br
set-cookie: m=1; SameSite=None; Secure; Path=/; Domain=dtscout.com; Max-Age=5000; Expires=Sun, 20 Jul 2025 23:41:16 GMT
df=1753049876; SameSite=None; Secure; Path=/; Domain=dtscout.com; Max-Age=8640000; Expires=Tue, 28 Oct 2025 22:17:56 GMT
cf-ray: 9625d4dd9db956c6-OSL
X-Firefox-Spdy: h2
GET t.dtscout.com/pv/?_a=v&_h=embedcanaistv.com&_ss=6dy6n0x5m2&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=m&_cbid=3bg3&_cb=_dtspv.c
200 OK 52 B URL
t.dtscout.com/pv/?_a=v&_h=embedcanaistv.com&_ss=6dy6n0x5m2&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=m&_cbid=3bg3&_cb=_dtspv.c
IP / ASN
104.26.10.2
#13335 CLOUDFLARENET
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type ASCII text, with no line terminators
First Seen 2025-07-20
Last Seen 2025-07-20
Times Seen 1
Size 52 B (52 bytes)
MD5 ed2d13ffb71eaad34d715ef7b6916804
SHA1 0e8bce1ba625adb72b0dd4667d91ac0f8b1bb3f5
SHA256 cb6f624244f93cbcaa7d2b517ce9a184ca84394ff16067ec8881a914ed93e744
Certificate Info
Issuer Google Trust Services
Subject dtscout.com
Fingerprint 84:74:81:B9:DA:1E:0B:90:B3:A6:4C:78:8F:C5:C8:AA:3A:19:C6:C9
Validity Thu, 03 Jul 2025 06:07:16 GMT - Wed, 01 Oct 2025 07:06:51 GMT
GET /pv/?_a=v&_h=embedcanaistv.com&_ss=6dy6n0x5m2&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=m&_cbid=3bg3&_cb=_dtspv.c HTTP/1.1
Host: t.dtscout.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://embedcanaistv.com/
Cookie: m=1; df=1753049876
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Jul 2025 22:17:56 GMT
content-type: application/javascript
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
x-t: 0.532
x-c: 0
expires: Sun, 20 Jul 2025 22:17:55 GMT
cache-control: no-cache
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Rbn7SdbLAGleZOvtwtK6p8N%2F2akWdVwxQmatbOT%2FUDR33mp01GCQpALZaio7h%2F07aAjLyJrr0IMwDzqfuHYh79Yn%2B7HW7e9JLvQ%3D"}]}
content-encoding: br
cf-ray: 9625d4df5f7156c6-OSL
X-Firefox-Spdy: h2
GET wss://tracker.openwebtorrent.com/
101 Switching Protocols 0 B URL
wss://tracker.openwebtorrent.com/
IP / ASN
172.67.174.171
#13335 CLOUDFLARENET
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605935
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject openwebtorrent.com
Fingerprint CF:0D:EC:60:F2:EA:0D:8E:DE:78:55:BC:D2:4C:A3:56:A4:4B:7A:F4
Validity Sat, 14 Jun 2025 01:08:03 GMT - Fri, 12 Sep 2025 02:06:43 GMT
GET / HTTP/1.1
Host: tracker.openwebtorrent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://embedcanaistv.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: fAUoxk8kh0RPCVkuyIw1MQ==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Sun, 20 Jul 2025 22:17:56 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: lZQMnZu+rvOPTQ2so7ffFpHQ7uc=
Sec-WebSocket-Extensions: permessage-deflate; client_no_context_takeover; server_no_context_takeover
uWebSockets: 20
cf-cache-status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wmtcQY9wAS5nllbj9ZwmTgvou3ttt5qQxNPkSMh98nldhtGW3a8reAIBX8E%2B4UU6wrWiSKWfgqlH4JWAa0Hq1N5g6rPnB1dVrPKfbUqbMV7JAWSPcw5%2BsZzMmz1CbL%2B4GTqIJbrfQm6znQTy9A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 9625d4e0ec415696-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=504&min_rtt=471&rtt_var=151&sent=5&recv=8&lost=0&retrans=0&sent_bytes=3130&recv_bytes=1179&delivery_rate=7362711&cwnd=252&unsent_bytes=0&cid=bba5bcb47ccd3f6b&ts=124&x=0"
GET praystakeinstinct.com/pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-sb1.com%2Fsb%2Finterstitial%2Futility%2Frobot%2F3%2Fjs%2Fscript.js&l=6640&fd=488
200 OK 0 B URL
praystakeinstinct.com/pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-sb1.com%2Fsb%2Finterstitial%2Futility%2Frobot%2F3%2Fjs%2Fscript.js&l=6640&fd=488
IP / ASN
172.240.127.234
#7979 SERVERS-COM
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605935
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject praystakeinstinct.com
Fingerprint 08:B9:39:D3:1C:E2:4B:34:21:BC:02:6F:17:3E:89:73:97:AC:E1:C9
Validity Sat, 28 Jun 2025 22:08:16 GMT - Fri, 26 Sep 2025 22:08:15 GMT
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-sb1.com%2Fsb%2Finterstitial%2Futility%2Frobot%2F3%2Fjs%2Fscript.js&l=6640&fd=488 HTTP/1.1
Host: praystakeinstinct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://embedcanaistv.com/
Cookie: uid_id2=adac39e2-6c9f-4691-b306-c9a4bc02ceba:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26944747=1; slecd5b9eac72f1fb51d58f84dd0b805f3b0=[6047961]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 20 Jul 2025 22:18:09 GMT
Content-Length: 0
Connection: keep-alive
x-envoy-upstream-service-time: 0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET embmaxtv.online/premiereclubes/tracks-v1a1/2025/07/20/22/17/31-06000.ts
200 OK 3.0 MB URL
embmaxtv.online/premiereclubes/tracks-v1a1/2025/07/20/22/17/31-06000.ts
IP / ASN
104.26.9.140
#13335 CLOUDFLARENET
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type data
First Seen 2025-07-20
Last Seen 2025-07-20
Times Seen 1
Size 3.0 MB (3004992 bytes)
MD5 c0f55f0d7c138dffed39bb4441911712
SHA1 1dc6a954e6a21aaae7a37f7ba6ee657031e0641c
SHA256 76d4aca36d68411583185145671f4a53c5cf50400e194e16b5785e8a2141d101
Certificate Info
Issuer Google Trust Services
Subject embmaxtv.online
Fingerprint 2A:3F:B9:3C:50:1B:4F:78:91:90:B5:16:EE:EF:40:17:A2:83:0E:47
Validity Mon, 26 May 2025 20:54:07 GMT - Sun, 24 Aug 2025 21:53:59 GMT
GET /premiereclubes/tracks-v1a1/2025/07/20/22/17/31-06000.ts HTTP/1.1
Host: embmaxtv.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://embedcanaistv.com
DNT: 1
Connection: keep-alive
Referer: https://embedcanaistv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Jul 2025 22:17:59 GMT
content-type: video/MP2T
content-length: 3004992
access-control-allow-headers: x-vsaas-session, x-no-redirect, origin, authorization, accept, range, content-type, x-add-effective, session, x-originator, x-sid
access-control-allow-methods: GET, PUT, DELETE, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server, range, X-Run-Time, X-Sid, Content-Length, Location
server: cloudflare
x-just-generated: false
x-memory: yes
x-route-time: 88
x-run-time: 24
x-sid: 687d6b14-6908-4711-abf4-47c0d37cb318
cache-control: max-age=86400
cf-cache-status: MISS
last-modified: Sun, 20 Jul 2025 22:17:59 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=a7esvMOtNhprlr9e8jcIkb3TOyk7kmRaB7tsVGTEm%2BaW37sqcgpbfaRg5c67bunpQZDkDXXxHuW%2F65baSKTDHt93vVTQhm%2FTrfzTng%3D%3D"}]}
cf-ray: 9625d4f2ccbb56c3-OSL
X-Firefox-Spdy: h2
GET midgetbreakfast.com/7db24bbecddc2e2e50e72c91d0fd9db3/invoke.js
200 OK 27 kB URL
midgetbreakfast.com/7db24bbecddc2e2e50e72c91d0fd9db3/invoke.js
IP / ASN
192.243.59.13
#39572 DataWeb Global Group B.V.
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type JavaScript source, ASCII text, with very long lines (27192), with no line terminators
First Seen 2025-07-20
Last Seen 2025-07-20
Times Seen 1
Size 27 kB (27192 bytes)
MD5 af98303466d308372e71d6888d9a9820
SHA1 53c17cca593ef1d329738bbc20019433987f6c57
SHA256 84ca6b5a6ab0668abb5e1d079d35a41270a3c21f3b927412b4e52aa80ff3bc82
Certificate Info
Issuer Let's Encrypt
Subject midgetbreakfast.com
Fingerprint 92:8A:BA:98:83:FF:87:44:EF:C5:CC:95:72:DB:20:BD:E3:61:08:F8
Validity Fri, 20 Jun 2025 21:50:51 GMT - Thu, 18 Sep 2025 21:50:50 GMT
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /7db24bbecddc2e2e50e72c91d0fd9db3/invoke.js HTTP/1.1
Host: midgetbreakfast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://embedcanaistv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 20 Jul 2025 22:18:06 GMT
Content-Type: application/javascript
Content-Length: 11476
Connection: keep-alive
Content-Encoding: gzip
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: 4b4e7ab587d59b22ad7bcd2439afc363_F-2480-rr-14=1; expires=Sun, 20 Jul 2025 22:18:06 GMT; secure; SameSite=None
Host: midgetbreakfast.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 59524cbe3298cda81c887796cea240e1
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET cdn.storageimagedisplay.com/cti/bd/65/12/bd6512d08c58e732c59bfd4abb075c19/1711621546.mp4
200 OK 49 kB URL
cdn.storageimagedisplay.com/cti/bd/65/12/bd6512d08c58e732c59bfd4abb075c19/1711621546.mp4
IP / ASN
45.133.44.1
#39572 DataWeb Global Group B.V.
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type ISO Media, MP4 v2 [ISO 14496-14]
First Seen 2024-06-14
Last Seen 2025-07-26
Times Seen 15
Size 49 kB (49134 bytes)
MD5 18e6c40463b52e002be7ce0ad32dcdd1
SHA1 56949c32c98cf5c069c959e4683c54407c356975
SHA256 9a06e8f489724d74e895d76fb9c49b7ced54a721f546b4428d292f9a68908632
Certificate Info
Issuer Let's Encrypt
Subject cdn.storageimagedisplay.com
Fingerprint 06:D8:07:0F:AB:BF:D8:7F:C5:38:82:AC:A7:8A:20:4D:83:6C:EA:C9
Validity Thu, 10 Jul 2025 02:33:11 GMT - Wed, 08 Oct 2025 02:33:10 GMT
GET /cti/bd/65/12/bd6512d08c58e732c59bfd4abb075c19/1711621546.mp4 HTTP/1.1
Host: cdn.storageimagedisplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Jul 2025 22:18:07 GMT
content-type: video/mp4
content-length: 528058
server: nginx/1.21.6
last-modified: Thu, 28 Mar 2024 10:25:54 GMT
etag: "660545b2-80eba"
expires: Tue, 22 Jul 2025 22:18:07 GMT
cache-control: max-age=172800
x-cdn-host-id: ah0543
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET embedcanaistv.com/wp-content/uploads/2024/11/cropped-cropped-iconn-32x32.png
200 OK 837 B URL
embedcanaistv.com/wp-content/uploads/2024/11/cropped-cropped-iconn-32x32.png
IP / ASN
104.21.112.1
#13335 CLOUDFLARENET
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced
First Seen 2025-07-03
Last Seen 2025-07-20
Times Seen 3
Size 837 B (837 bytes)
MD5 83092faacb44ffba64e548009c9aeee8
SHA1 a34f5949a6198b10011bb1b5a54ad51460f9f1fd
SHA256 f3f3b75cd567374d37398d3a72f698806ea952292297a19f1f6aedfb82b5b8f9
Certificate Info
Issuer Google Trust Services
Subject embedcanaistv.com
Fingerprint B0:FB:CD:0A:AC:90:35:4B:B5:0E:5C:88:49:74:B5:89:A8:4D:9B:8A
Validity Sun, 08 Jun 2025 02:33:23 GMT - Sat, 06 Sep 2025 03:30:48 GMT
GET /wp-content/uploads/2024/11/cropped-cropped-iconn-32x32.png HTTP/1.1
Host: embedcanaistv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://embedcanaistv.com/premiereclubes/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Jul 2025 22:17:57 GMT
content-type: image/png
content-length: 837
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MkNLk84ugVFYZoTOC6FkMTRNNX4qOvC40oHLLsRDo%2F4aEilvIbbuo2nlglvB8TtM%2FPfbQfHP5wK53HGe2yX1yZfuEonJVkxiYA6%2FAaQ4CZiy2DwhCPqrIK8JKQLp95b%2B17wHWw%3D%3D"}],"group":"cf-nel","max_age":604800}
cache-control: public, max-age=31536000
expires: Sun, 27 Jul 2025 22:17:57 GMT
etag: "345-677f2014-1fe9f9;;;"
last-modified: Thu, 09 Jan 2025 01:02:12 GMT
accept-ranges: bytes
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
cf-ray: 9625d4e4daab568d-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9072&min_rtt=552&rtt_var=9799&sent=103&recv=127&lost=0&retrans=0&sent_bytes=10926&recv_bytes=7670&delivery_rate=210447&ss_exit_cwnd=14923&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=71e9c11fd7fad6ef&ts=2492&inflight_dur=91&x=40"
GET embmaxtv.online/premiereclubes/tracks-v1a1/2025/07/20/22/17/37-06000.ts
200 OK 2.3 MB URL
embmaxtv.online/premiereclubes/tracks-v1a1/2025/07/20/22/17/37-06000.ts
IP / ASN
104.26.9.140
#13335 CLOUDFLARENET
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type data
First Seen 2025-07-20
Last Seen 2025-07-20
Times Seen 1
Size 2.3 MB (2286080 bytes)
MD5 456c220d7e1290cb9159836c257408ef
SHA1 f6be3c6827b7ed4068b0d9926f2973c81e1b80f6
SHA256 d015c46d791633bd79bab06919c0b81c7f992d7be09e8e302eac86f48e70e224
Certificate Info
Issuer Google Trust Services
Subject embmaxtv.online
Fingerprint 2A:3F:B9:3C:50:1B:4F:78:91:90:B5:16:EE:EF:40:17:A2:83:0E:47
Validity Mon, 26 May 2025 20:54:07 GMT - Sun, 24 Aug 2025 21:53:59 GMT
GET /premiereclubes/tracks-v1a1/2025/07/20/22/17/37-06000.ts HTTP/1.1
Host: embmaxtv.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://embedcanaistv.com
DNT: 1
Connection: keep-alive
Referer: https://embedcanaistv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Jul 2025 22:18:02 GMT
content-type: video/MP2T
content-length: 2286080
access-control-allow-headers: x-vsaas-session, x-no-redirect, origin, authorization, accept, range, content-type, x-add-effective, session, x-originator, x-sid
access-control-allow-methods: GET, PUT, DELETE, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server, range, X-Run-Time, X-Sid, Content-Length, Location
server: cloudflare
x-just-generated: false
x-memory: yes
x-route-time: 78
x-run-time: 21
x-sid: 687d6b14-6908-4711-abf4-47c0d37cb318
cache-control: max-age=86400
cf-cache-status: MISS
last-modified: Sun, 20 Jul 2025 22:18:02 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ttPLm7oyUF8zTk%2BDBuMN4eKErTAoiN8MbdoLAYfXCP14TL%2FGHskZT%2BIiMbK97AAj2RKbV7Br%2B4h5MU4pSCXU%2FSvVpSiWCfkg%2BZdozA%3D%3D"}]}
cf-ray: 9625d5058c5356c3-OSL
X-Firefox-Spdy: h2
GET sultrymomentarily.com/pixel/purst?dl=0&th=0&sc=0&rs=12207&rd=12207&fd=523&bv=25.7.6656&tmpl=70
200 OK 0 B URL
sultrymomentarily.com/pixel/purst?dl=0&th=0&sc=0&rs=12207&rd=12207&fd=523&bv=25.7.6656&tmpl=70
IP / ASN
172.240.108.84
#7979 SERVERS-COM
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605935
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject sultrymomentarily.com
Fingerprint 2D:7B:79:9C:C0:6D:57:CE:0F:A9:5C:53:6D:FD:67:18:A7:A4:87:86
Validity Sat, 28 Jun 2025 22:27:43 GMT - Fri, 26 Sep 2025 22:27:42 GMT
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=12207&rd=12207&fd=523&bv=25.7.6656&tmpl=70 HTTP/1.1
Host: sultrymomentarily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://embedcanaistv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 20 Jul 2025 22:18:07 GMT
Content-Length: 0
Connection: keep-alive
Host: sultrymomentarily.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET preferencenail.com/sfp.js
200 OK 85 kB URL
preferencenail.com/sfp.js
IP / ASN
185.196.197.72
#39572 DataWeb Global Group B.V.
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
First Seen 2025-07-08
Last Seen 2025-08-02
Times Seen 1998
Size 85 kB (85386 bytes)
MD5 46a6fef91632b94d14252fe324c1585f
SHA1 387cebbd261b8fe947fe9805875300f2ceeb5cfd
SHA256 36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5
Certificate Info
Issuer Let's Encrypt
Subject preferencenail.com
Fingerprint F9:52:70:4B:81:A8:F8:39:E6:E7:96:8F:EA:FE:17:FD:96:C5:32:E3
Validity Tue, 01 Jul 2025 15:11:38 GMT - Mon, 29 Sep 2025 15:11:37 GMT
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sfp.js HTTP/1.1
Host: preferencenail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://embedcanaistv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 20 Jul 2025 22:18:06 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 28254
Connection: keep-alive
Content-Encoding: gzip
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Host: preferencenail.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 3403b33a8e579d92cf17079fd76e1a41
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET cdn.creative-sb1.com/sb/interstitial/utility/robot/3/css/magic.css
200 OK 45 kB URL
cdn.creative-sb1.com/sb/interstitial/utility/robot/3/css/magic.css
IP / ASN
104.21.64.1
#13335 CLOUDFLARENET
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type ASCII text
First Seen 2025-06-11
Last Seen 2025-08-01
Times Seen 633
Size 45 kB (45054 bytes)
MD5 bcd1967f8c2604f55f57197de0ae895e
SHA1 c31a10c3ecde74b50450a0a1ad21aa474ff05e7d
SHA256 787eac5d9417257a04de7b18ef21f5ec887de3aee642ceba9a7d56a8209eea2a
Certificate Info
Issuer Google Trust Services
Subject creative-sb1.com
Fingerprint CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B
Validity Tue, 01 Jul 2025 14:01:22 GMT - Mon, 29 Sep 2025 14:59:36 GMT
GET /sb/interstitial/utility/robot/3/css/magic.css HTTP/1.1
Host: cdn.creative-sb1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://embedcanaistv.com
DNT: 1
Connection: keep-alive
Referer: https://embedcanaistv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Jul 2025 22:18:09 GMT
content-type: text/css
server: cloudflare
last-modified: Thu, 12 Dec 2024 14:36:19 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
etag: W/"675af4e3-affe"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
cf-cache-status: MISS
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=J14J%2BBX12XaX7LfGLgm3wKWKpgC9LtU8ltRB0uGrdsjgLegr3vQCDoLxRzmzTydOB4oLWAuOPYTtQEET6gS1WzJgvW9DqeBTR0Yn%2BwvuZO3LWA%3D%3D"}]}
cf-ray: 9625d52c5d057127-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET praystakeinstinct.com/impr.gif?sid=H4sIAAAAAAAC_1SSy2sk1RfHb_Vk8ePnQnygKIi1mIWC6VR1dyUps5inGQczk3FmZBB1cV-VXFN1b3lvVVcmIAQHZDZCC4JGN5VvJxMfgzh_gCgdF0JAsF0Fmbhw6UYUZuFKOmkInsU5597P4XLO99z3N8sD0kZJ91-_ZNZUmtKpqBn4z91QWpjK-Zev-2HQDOb8G0pPd-b81ZE7o4U1Ssz5tvti2O40g-f9C5KvmKlWEAZBGIT-vLIyMatThxQqvxuHzThodlrNMOpg1f737EoPjnoQ3QPyKJQYPvx78gYUH0Bn35yXbqUw-QsvZWVKC2PRFTuv6RVtKo3sOE2sh0TvjKth3JCQTxowemc8Ckx3azQKmBqSxhP3wfTOuE2w7vZRpyyF1GDiIVTdAWQ6gKIDcHMLSvxMAC5weRE6u3PZ2IrePKJ0RIdk4sHfUNWQTNx_HDr7-myqVv1rJi0LZbTDalJDrQ6glgbIy10Uaw2oahe8eA9K_ESmHixAZ1uLLjVQYv8kFZS3Y9manOZxMtmZjsNJ1g6mJ3lMO4wHLS4ZPZRIJQNQ10DpPJTKQ5k0UOYNZGLfn6W8Q8NAxrPJTNSSMpqmIoxjnsgkDmgsUPJR7z0UeQ887YHbdeR2HSuqB1t-D7dcw4kGXDEk3qvr6IoalSSoHEFFCSpFUBUEVbfeFqlrufqOSF3JwnFsjWO77ptiaZNum2JJagJqe7Ci3lL5O-4WeHGiv5Y40TcjR1lR9ykT9WZ-QB4ZSet9dvIPrMh9X0QslpTPtJIwYVEootlktiNEwGaDKGmzAE7VUK4B6jysqSE5_aOPXA3J_y7Mg9FduHQXXJ0ALZ8BrWrQ5Rpr-p7MmBScaqpc0W1yk0GYGnkxgeKmt5kekKcPN_zmy_uQfO_0k09tbGxsfApua-S2xtvqB4Kl9Hb_qqnI1lVTOXJvMS9UptboaPvXClrIiS9fkTcrY8XF8673xRk-AqP07nXpigWqhdJLjnx1Vgkh7byxXJJvL7obkl0p3fLZ0uoyX7hybv5illvpnDJ6AKqGhBz8Cq6G5LGFvw5_die6BmUHsGWNrNwjYwPP1-HyvdP_1x9_sPjbHJwhsOkxZ7mHqqz7tsWOL1M1JJc--hyp3DtVL5RvnftnHpTVcPJYBCb3vvvzqL5v6egFqupNdxtL1gMtbkFnNbq2RjetQdMeXHmiX-R279Qv7UMDS70-S623xVKbfngks1P7fhTLWIY0bPPpKO6IKApCOhOzmUTGcYu32yjccPndlWf_DQAA___7yznpxAQAAA==
200 OK 0 B URL
praystakeinstinct.com/impr.gif?sid=H4sIAAAAAAAC_1SSy2sk1RfHb_Vk8ePnQnygKIi1mIWC6VR1dyUps5inGQczk3FmZBB1cV-VXFN1b3lvVVcmIAQHZDZCC4JGN5VvJxMfgzh_gCgdF0JAsF0Fmbhw6UYUZuFKOmkInsU5597P4XLO99z3N8sD0kZJ91-_ZNZUmtKpqBn4z91QWpjK-Zev-2HQDOb8G0pPd-b81ZE7o4U1Ssz5tvti2O40g-f9C5KvmKlWEAZBGIT-vLIyMatThxQqvxuHzThodlrNMOpg1f737EoPjnoQ3QPyKJQYPvx78gYUH0Bn35yXbqUw-QsvZWVKC2PRFTuv6RVtKo3sOE2sh0TvjKth3JCQTxowemc8Ckx3azQKmBqSxhP3wfTOuE2w7vZRpyyF1GDiIVTdAWQ6gKIDcHMLSvxMAC5weRE6u3PZ2IrePKJ0RIdk4sHfUNWQTNx_HDr7-myqVv1rJi0LZbTDalJDrQ6glgbIy10Uaw2oahe8eA9K_ESmHixAZ1uLLjVQYv8kFZS3Y9manOZxMtmZjsNJ1g6mJ3lMO4wHLS4ZPZRIJQNQ10DpPJTKQ5k0UOYNZGLfn6W8Q8NAxrPJTNSSMpqmIoxjnsgkDmgsUPJR7z0UeQ887YHbdeR2HSuqB1t-D7dcw4kGXDEk3qvr6IoalSSoHEFFCSpFUBUEVbfeFqlrufqOSF3JwnFsjWO77ptiaZNum2JJagJqe7Ci3lL5O-4WeHGiv5Y40TcjR1lR9ykT9WZ-QB4ZSet9dvIPrMh9X0QslpTPtJIwYVEootlktiNEwGaDKGmzAE7VUK4B6jysqSE5_aOPXA3J_y7Mg9FduHQXXJ0ALZ8BrWrQ5Rpr-p7MmBScaqpc0W1yk0GYGnkxgeKmt5kekKcPN_zmy_uQfO_0k09tbGxsfApua-S2xtvqB4Kl9Hb_qqnI1lVTOXJvMS9UptboaPvXClrIiS9fkTcrY8XF8673xRk-AqP07nXpigWqhdJLjnx1Vgkh7byxXJJvL7obkl0p3fLZ0uoyX7hybv5illvpnDJ6AKqGhBz8Cq6G5LGFvw5_die6BmUHsGWNrNwjYwPP1-HyvdP_1x9_sPjbHJwhsOkxZ7mHqqz7tsWOL1M1JJc--hyp3DtVL5RvnftnHpTVcPJYBCb3vvvzqL5v6egFqupNdxtL1gMtbkFnNbq2RjetQdMeXHmiX-R279Qv7UMDS70-S623xVKbfngks1P7fhTLWIY0bPPpKO6IKApCOhOzmUTGcYu32yjccPndlWf_DQAA___7yznpxAQAAA==
IP / ASN
172.240.127.234
#7979 SERVERS-COM
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605935
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject praystakeinstinct.com
Fingerprint 08:B9:39:D3:1C:E2:4B:34:21:BC:02:6F:17:3E:89:73:97:AC:E1:C9
Validity Sat, 28 Jun 2025 22:08:16 GMT - Fri, 26 Sep 2025 22:08:15 GMT
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC_1SSy2sk1RfHb_Vk8ePnQnygKIi1mIWC6VR1dyUps5inGQczk3FmZBB1cV-VXFN1b3lvVVcmIAQHZDZCC4JGN5VvJxMfgzh_gCgdF0JAsF0Fmbhw6UYUZuFKOmkInsU5597P4XLO99z3N8sD0kZJ91-_ZNZUmtKpqBn4z91QWpjK-Zev-2HQDOb8G0pPd-b81ZE7o4U1Ssz5tvti2O40g-f9C5KvmKlWEAZBGIT-vLIyMatThxQqvxuHzThodlrNMOpg1f737EoPjnoQ3QPyKJQYPvx78gYUH0Bn35yXbqUw-QsvZWVKC2PRFTuv6RVtKo3sOE2sh0TvjKth3JCQTxowemc8Ckx3azQKmBqSxhP3wfTOuE2w7vZRpyyF1GDiIVTdAWQ6gKIDcHMLSvxMAC5weRE6u3PZ2IrePKJ0RIdk4sHfUNWQTNx_HDr7-myqVv1rJi0LZbTDalJDrQ6glgbIy10Uaw2oahe8eA9K_ESmHixAZ1uLLjVQYv8kFZS3Y9manOZxMtmZjsNJ1g6mJ3lMO4wHLS4ZPZRIJQNQ10DpPJTKQ5k0UOYNZGLfn6W8Q8NAxrPJTNSSMpqmIoxjnsgkDmgsUPJR7z0UeQ887YHbdeR2HSuqB1t-D7dcw4kGXDEk3qvr6IoalSSoHEFFCSpFUBUEVbfeFqlrufqOSF3JwnFsjWO77ptiaZNum2JJagJqe7Ci3lL5O-4WeHGiv5Y40TcjR1lR9ykT9WZ-QB4ZSet9dvIPrMh9X0QslpTPtJIwYVEootlktiNEwGaDKGmzAE7VUK4B6jysqSE5_aOPXA3J_y7Mg9FduHQXXJ0ALZ8BrWrQ5Rpr-p7MmBScaqpc0W1yk0GYGnkxgeKmt5kekKcPN_zmy_uQfO_0k09tbGxsfApua-S2xtvqB4Kl9Hb_qqnI1lVTOXJvMS9UptboaPvXClrIiS9fkTcrY8XF8673xRk-AqP07nXpigWqhdJLjnx1Vgkh7byxXJJvL7obkl0p3fLZ0uoyX7hybv5illvpnDJ6AKqGhBz8Cq6G5LGFvw5_die6BmUHsGWNrNwjYwPP1-HyvdP_1x9_sPjbHJwhsOkxZ7mHqqz7tsWOL1M1JJc--hyp3DtVL5RvnftnHpTVcPJYBCb3vvvzqL5v6egFqupNdxtL1gMtbkFnNbq2RjetQdMeXHmiX-R279Qv7UMDS70-S623xVKbfngks1P7fhTLWIY0bPPpKO6IKApCOhOzmUTGcYu32yjccPndlWf_DQAA___7yznpxAQAAA== HTTP/1.1
Host: praystakeinstinct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://embedcanaistv.com/
Cookie: uid_id2=adac39e2-6c9f-4691-b306-c9a4bc02ceba:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26944747=1; slecd5b9eac72f1fb51d58f84dd0b805f3b0=[6047961]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 20 Jul 2025 22:18:09 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
access-control-allow-origin: *
vary: Origin
access-control-allow-credentials: true
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
set-cookie: iprc_l+fc97277e8a6f931be2e945e6bf3f6036=6047961; expires=Mon, 21 Jul 2025 22:18:09 GMT; path=/; secure; SameSite=None
iprc_l:6047961=1; expires=Mon, 21 Jul 2025 22:18:09 GMT; path=/; secure; SameSite=None
x-envoy-upstream-service-time: 2
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 87f2e1c8496f9f6e6d79e7a5c662fc5a
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET cdn.creative-sb1.com/sb/interstitial/utility/robot/3/js/jquery.min.js
200 OK 84 kB URL
cdn.creative-sb1.com/sb/interstitial/utility/robot/3/js/jquery.min.js
IP / ASN
104.21.64.1
#13335 CLOUDFLARENET
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type JavaScript source, ASCII text, with very long lines (32025), with CRLF line terminators
First Seen 2023-03-07
Last Seen 2025-08-01
Times Seen 2453
Size 84 kB (84384 bytes)
MD5 6326c600df01e3bfb9b40e1aa08176f8
SHA1 6b4fb754d29b297b539bf62ba9b4eaf0f33f314a
SHA256 df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3
Certificate Info
Issuer Google Trust Services
Subject creative-sb1.com
Fingerprint CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B
Validity Tue, 01 Jul 2025 14:01:22 GMT - Mon, 29 Sep 2025 14:59:36 GMT
GET /sb/interstitial/utility/robot/3/js/jquery.min.js HTTP/1.1
Host: cdn.creative-sb1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Jul 2025 22:18:08 GMT
content-type: application/javascript
server: cloudflare
last-modified: Thu, 12 Dec 2024 14:36:25 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=GrcuzWi3jpm0eAs8g%2FpVafPtMdbv%2BdZzRPPQPy4EZ0RmYuLFFyx2TJn3%2ByI8aoFJuzyalVZpyv%2Bd7ZVHUK%2FbiZs2wRwCiKJDlmnA0pIDjryncg%3D%3D"}]}
age: 1075317
cf-cache-status: HIT
etag: W/"675af4e9-149a0"
content-encoding: br
cf-ray: 9625d52cad8f7127-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET praystakeinstinct.com/pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-sb1.com%2Fsb%2Finterstitial%2Futility%2Frobot%2F3%2Fcss%2Fmagic.css&l=45054&fd=565
200 OK 0 B URL
praystakeinstinct.com/pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-sb1.com%2Fsb%2Finterstitial%2Futility%2Frobot%2F3%2Fcss%2Fmagic.css&l=45054&fd=565
IP / ASN
172.240.127.234
#7979 SERVERS-COM
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605935
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject praystakeinstinct.com
Fingerprint 08:B9:39:D3:1C:E2:4B:34:21:BC:02:6F:17:3E:89:73:97:AC:E1:C9
Validity Sat, 28 Jun 2025 22:08:16 GMT - Fri, 26 Sep 2025 22:08:15 GMT
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.creative-sb1.com%2Fsb%2Finterstitial%2Futility%2Frobot%2F3%2Fcss%2Fmagic.css&l=45054&fd=565 HTTP/1.1
Host: praystakeinstinct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://embedcanaistv.com/
Cookie: uid_id2=adac39e2-6c9f-4691-b306-c9a4bc02ceba:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26944747=1; slecd5b9eac72f1fb51d58f84dd0b805f3b0=[6047961]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 20 Jul 2025 22:18:09 GMT
Content-Length: 0
Connection: keep-alive
x-envoy-upstream-service-time: 1
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET cdn.jsdelivr.net/npm/p2p-media-loader-core@latest/build/p2p-media-loader-core.min.js
200 OK 144 kB URL
cdn.jsdelivr.net/npm/p2p-media-loader-core@latest/build/p2p-media-loader-core.min.js
IP / ASN
104.16.175.226
#13335 CLOUDFLARENET
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
First Seen 2023-03-07
Last Seen 2025-07-31
Times Seen 518
Size 144 kB (143751 bytes)
MD5 c9a8b05945fce050129e32f96c4c9344
SHA1 732e594daaae33e3141c4401eeb00e24d6255489
SHA256 6169aae21cd0ef9813b6bda9ec902dee165c4c70202c37af6eb0bc45ced0a872
Certificate Info
Issuer Sectigo Limited
Subject *.jsdelivr.net
Fingerprint A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F
Validity Fri, 25 Apr 2025 00:00:00 GMT - Mon, 04 May 2026 23:59:59 GMT
GET /npm/p2p-media-loader-core@latest/build/p2p-media-loader-core.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://embedcanaistv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Jul 2025 22:17:55 GMT
content-type: application/javascript; charset=utf-8
content-length: 41840
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 0.6.2
x-jsd-version-type: version
etag: W/"23187-cy5ZTaquM+MUHEQB7rAOJNYlVIk"
content-encoding: br
x-served-by: cache-fra-etou8220152-FRA, cache-lga21965-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 40439
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9SA80TUUxo%2FFJQNZTWWg5PMfO8Y9CVvzArEjoEBKrynpObaOzbaGOHtwrRtfLpwr2TsMQZJlbp44Fum32XRMTiXOIGGaEPDk3fCdisFpKMPTqp0mi3nSJyitA81ERhFacow%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9625d4d84d0056c5-OSL
X-Firefox-Spdy: h2
GET embedcanaistv.com/favicon.ico
302 Found 837 B URL
embedcanaistv.com/favicon.ico
IP / ASN
104.21.112.1
#13335 CLOUDFLARENET
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605935
Size 837 B (837 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject embedcanaistv.com
Fingerprint B0:FB:CD:0A:AC:90:35:4B:B5:0E:5C:88:49:74:B5:89:A8:4D:9B:8A
Validity Sun, 08 Jun 2025 02:33:23 GMT - Sat, 06 Sep 2025 03:30:48 GMT
GET /favicon.ico HTTP/1.1
Host: embedcanaistv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://embedcanaistv.com/premiereclubes/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Sun, 20 Jul 2025 22:17:56 GMT
content-type: text/html; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3b4Ot%2F%2BZD9c%2B5p%2BuUKKIl99NslDS53LNPnbhqpdAN0hJmC%2FNMp8rqY%2B580EMf4bEaOzN2ZAaAS6WPKIBdTgwKzI3ZP%2BvGtrfO3o53EyV1Z2PrBNHqEsEJGxJdgIGLkVjj8KBUg%3D%3D"}],"group":"cf-nel","max_age":604800}
x-dns-prefetch-control: on
link: <https://embedcanaistv.com/wp-json/>; rel="https://api.w.org/"
x-redirect-by: WordPress
location: https://embedcanaistv.com/wp-content/uploads/2024/11/cropped-cropped-iconn-32x32.png
x-litespeed-cache-control: public,max-age=604800
x-litespeed-tag: 008_default,008_URL.b54ff2eddcb0060bcd786ce388d8d4d7,008_guest,008_
x-litespeed-cache: miss
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
cf-ray: 9625d4e26a9b568d-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6923&min_rtt=552&rtt_var=7334&sent=101&recv=125&lost=0&retrans=0&sent_bytes=9919&recv_bytes=7293&delivery_rate=210447&ss_exit_cwnd=14923&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=71e9c11fd7fad6ef&ts=2184&inflight_dur=47&x=40"
GET skinnycrawlinglax.com/watch.65393690165.js?key=7db24bbecddc2e2e50e72c91d0fd9db3&kw=%5B%22premiere%22%2C%22clubes%22%5D&refer=https%3A%2F%2Fembedcanaistv.com%2Fpremiereclubes%2F&tz=0&dev=e&res=14.3095&abt=F-2480-rr-14_1&rb=&aioi=t&sub3=group_b&uuid=adac39e2-6c9f-4691-b306-c9a4bc02ceba%3A2%3A1
307 Temporary Redirect 5.0 kB URL
skinnycrawlinglax.com/watch.65393690165.js?key=7db24bbecddc2e2e50e72c91d0fd9db3&kw=%5B%22premiere%22%2C%22clubes%22%5D&refer=https%3A%2F%2Fembedcanaistv.com%2Fpremiereclubes%2F&tz=0&dev=e&res=14.3095&abt=F-2480-rr-14_1&rb=&aioi=t&sub3=group_b&uuid=adac39e2-6c9f-4691-b306-c9a4bc02ceba%3A2%3A1
IP / ASN
192.243.61.225
#39572 DataWeb Global Group B.V.
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605935
Size 5.0 kB (5049 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject skinnycrawlinglax.com
Fingerprint 4A:6A:48:C8:5B:C5:2B:2E:9C:03:AF:BF:4C:E6:10:23:E2:7B:EA:97
Validity Sat, 28 Jun 2025 22:21:33 GMT - Fri, 26 Sep 2025 22:21:32 GMT
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.65393690165.js?key=7db24bbecddc2e2e50e72c91d0fd9db3&kw=%5B%22premiere%22%2C%22clubes%22%5D&refer=https%3A%2F%2Fembedcanaistv.com%2Fpremiereclubes%2F&tz=0&dev=e&res=14.3095&abt=F-2480-rr-14_1&rb=&aioi=t&sub3=group_b&uuid=adac39e2-6c9f-4691-b306-c9a4bc02ceba%3A2%3A1 HTTP/1.1
Host: skinnycrawlinglax.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://embedcanaistv.com
DNT: 1
Connection: keep-alive
Referer: https://embedcanaistv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Sun, 20 Jul 2025 22:18:06 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Access-Control-Allow-Origin: https://embedcanaistv.com
Access-Control-Allow-Credentials: true
Location: https://skinnycrawlinglax.com/watch.65393690165.js?abt=F-2480-rr-14_1&aioi=t&dev=e&key=7db24bbecddc2e2e50e72c91d0fd9db3&kw=%5B%22premiere%22%2C%22clubes%22%5D&pst=1753049946&rb=&refer=https%3A%2F%2Fembedcanaistv.com%2Fpremiereclubes%2F&res=14.3095&rmtc=t&shu=4791823bd1afc911715e8542a67fa978e0433956bd75bc501e7f34c2a19b2793ff1162a92c01813d570cee0f39c5fd854299dfb52234531b49f69ccf959831a6f874964d5a90356d6c4fc07161d38ea292875982195684bf80d9&sub3=group_b&tz=0&uuid=adac39e2-6c9f-4691-b306-c9a4bc02ceba%3A2%3A1
Set-Cookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.eyG6dMcLiHYPLxpca40KgVa3pYsKeZw0n03s_8f2seY; expires=Sun, 20 Jul 2025 22:19:06 GMT; path=/; secure; SameSite=None
Host: skinnycrawlinglax.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 7f88eeb8da1fffb97b3113e39d73ad57
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET praystakeinstinct.com/pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.show-creative1.com%2Fsb%2Finterstitial%2Futility%2Frobot%2F3%2Findex.html&l=1332&fd=557
200 OK 0 B URL
praystakeinstinct.com/pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.show-creative1.com%2Fsb%2Finterstitial%2Futility%2Frobot%2F3%2Findex.html&l=1332&fd=557
IP / ASN
172.240.127.234
#7979 SERVERS-COM
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605935
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject praystakeinstinct.com
Fingerprint 08:B9:39:D3:1C:E2:4B:34:21:BC:02:6F:17:3E:89:73:97:AC:E1:C9
Validity Sat, 28 Jun 2025 22:08:16 GMT - Fri, 26 Sep 2025 22:08:15 GMT
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbls?bv=&tmpl=482&u=https%3A%2F%2Fcdn.show-creative1.com%2Fsb%2Finterstitial%2Futility%2Frobot%2F3%2Findex.html&l=1332&fd=557 HTTP/1.1
Host: praystakeinstinct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://embedcanaistv.com/
Cookie: uid_id2=adac39e2-6c9f-4691-b306-c9a4bc02ceba:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26944747=1; slecd5b9eac72f1fb51d58f84dd0b805f3b0=[6047961]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 20 Jul 2025 22:18:08 GMT
Content-Length: 0
Connection: keep-alive
x-envoy-upstream-service-time: 0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET cdn.creative-sb1.com/sb/interstitial/utility/robot/3/img/close.svg
200 OK 1.3 kB URL
cdn.creative-sb1.com/sb/interstitial/utility/robot/3/img/close.svg
IP / ASN
104.21.64.1
#13335 CLOUDFLARENET
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type SVG Scalable Vector Graphics image
First Seen 2023-04-07
Last Seen 2025-08-02
Times Seen 2009
Size 1.3 kB (1279 bytes)
MD5 369850b9873659adf0951d845f57dba1
SHA1 a64257186daa33b6b318943a457b6cf8d80b26b6
SHA256 9630c142a8c074cc1809ebf4109538cf29cc0baeb6c27726191f1cf5376e2e21
Certificate Info
Issuer Google Trust Services
Subject creative-sb1.com
Fingerprint CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B
Validity Tue, 01 Jul 2025 14:01:22 GMT - Mon, 29 Sep 2025 14:59:36 GMT
GET /sb/interstitial/utility/robot/3/img/close.svg HTTP/1.1
Host: cdn.creative-sb1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Jul 2025 22:18:08 GMT
content-type: image/svg+xml
server: cloudflare
last-modified: Thu, 12 Dec 2024 14:36:22 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=7oW3RhxVi1aFe5Y9gXhxuj4mt%2Fn01mNVIXVBf4ytEymhb%2B%2B4qKTlolYEpXdfcrUaQmGc1rUX%2B%2FPqxkbtgtr0B%2ByKtVvK%2B%2BcT97YCfV%2FNu4qktw%3D%3D"}]}
age: 1075317
cf-cache-status: HIT
etag: W/"675af4e6-4ff"
content-encoding: br
cf-ray: 9625d52cad7f7127-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdn.creative-sb1.com/sb/interstitial/utility/robot/3/img/banner.png
200 OK 32 kB URL
cdn.creative-sb1.com/sb/interstitial/utility/robot/3/img/banner.png
IP / ASN
104.21.64.1
#13335 CLOUDFLARENET
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type PNG image data, 600 x 400, 8-bit/color RGBA, non-interlaced
First Seen 2025-07-04
Last Seen 2025-08-01
Times Seen 544
Size 32 kB (31747 bytes)
MD5 8b80e5aaebd2987d46dd0382da97fdc1
SHA1 bccdfd974f19600eac67f10c43a8d3cd92188aff
SHA256 41f23c36cc8dedef9d191f90f7f85c4aebba6012af7794fdfdf30331df5afe05
Certificate Info
Issuer Google Trust Services
Subject creative-sb1.com
Fingerprint CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B
Validity Tue, 01 Jul 2025 14:01:22 GMT - Mon, 29 Sep 2025 14:59:36 GMT
GET /sb/interstitial/utility/robot/3/img/banner.png HTTP/1.1
Host: cdn.creative-sb1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Jul 2025 22:18:08 GMT
content-type: image/png
content-length: 31747
server: cloudflare
last-modified: Thu, 12 Dec 2024 14:36:22 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
etag: "675af4e6-7c03"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
accept-ranges: bytes
age: 942773
cf-cache-status: HIT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=LsLNXWmf2p%2B0HCq5uuz%2B1aj3uZQkp9CFj8vPjxxTdMfIZ4%2BnknlEu2dMHJp%2BI8lG2tQhd%2BHg7z%2BsIQHW1Fq%2F6Gtw7EBPYn%2BK%2FbtS%2F1JAXfXE9w%3D%3D"}]}
cf-ray: 9625d52cad867127-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2
200 OK 40 kB URL
fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2
IP / ASN
142.250.178.99
#15169 GOOGLE
Requested by https://embedcanaistv.com/premiereclubes/
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 40128, version 1.0
First Seen 2025-01-08
Last Seen 2025-08-02
Times Seen 97598
Size 40 kB (40128 bytes)
MD5 9a01b69183a9604ab3a439e388b30501
SHA1 8ed1d59003d0dbe6360481017b44665153665fbe
SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
Certificate Info
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA
Validity Mon, 23 Jun 2025 08:41:27 GMT - Mon, 15 Sep 2025 08:41:26 GMT
GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://embedcanaistv.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 40128
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 18 Jul 2025 08:13:08 GMT
expires: Sat, 18 Jul 2026 08:13:08 GMT
cache-control: public, max-age=31536000
age: 223501
last-modified: Thu, 29 May 2025 23:30:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
