Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
77s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-es -
resource tags
-
submitted
02/02/2023, 16:22 UTC
General
-
Target
https://cinecalidad.run/
Score
1/10
Malware Config
Signatures
-
Modifies Internet Explorer settings 1 TTPs 64 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SetWindowsHookEx 6 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" https://cinecalidad.run/1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5032 CREDAT:17410 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
-
Network
-
DNScinecalidad.runRemote address:8.8.8.8:53Requestcinecalidad.runIN AResponsecinecalidad.runIN A104.21.234.203cinecalidad.runIN A104.21.234.202 -
GEThttps://cinecalidad.run/Remote address:104.21.234.203:443RequestGET / HTTP/2.0
host: cinecalidad.run
accept: text/html, application/xhtml+xml, image/jxr, */*
accept-language: es-ES,es;q=0.5
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
date: Thu, 02 Feb 2023 16:23:14 GMT
content-type: text/html; charset=UTF-8
x-dns-prefetch-control: on
link: <https://cinecalidad.run/wp-json/>; rel="https://api.w.org/"
x-litespeed-cache: hit
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J14RprVpKUn75p9FW5aVshXlRmq2fnME8bikTWuZteOjog%2BpEo6RMQoPVJ0JDBM7tHpGP3ktZVPvQkHLcVXzMDZ6H%2BekrzyoIEj1V%2FY7kAO7Jf8ljtc%2BzlCUvPcYNaznaOU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79344527eb141afd-AMS
content-encoding: gzip
-
GEThttps://cinecalidad.run/wp-content/litespeed/css/e85ac847e8df1a86184f3e264e9a2778.css?ver=a8853Remote address:104.21.234.203:443RequestGET /wp-content/litespeed/css/e85ac847e8df1a86184f3e264e9a2778.css?ver=a8853 HTTP/2.0
host: cinecalidad.run
accept: text/css, */*
referer: https://cinecalidad.run/
accept-language: es-ES,es;q=0.5
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
date: Thu, 02 Feb 2023 16:23:14 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=175573
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cache-control: public, max-age=16070400
expires: Sun, 05 Feb 2023 19:17:27 GMT
last-modified: Sun, 29 Jan 2023 19:17:18 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 335148
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EK4qplOREwcFNiem6Nm1G1T1EG3eBuUNApPssCi4rp6o9hBl8g4hqFAe6vV%2FO6X3KaNQPFmrXMk6vIFBdWalvkiW2492E0bsaQQRnc0I8d00BjqQyCVh%2BnRn91%2F%2B1ft%2FtsE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7934452dd9c31afd-AMS
content-encoding: gzip
-
GEThttps://cinecalidad.run/wp-content/litespeed/css/356d410a0b28acbae14c546e482fa4b3.css?ver=fa4b3Remote address:104.21.234.203:443RequestGET /wp-content/litespeed/css/356d410a0b28acbae14c546e482fa4b3.css?ver=fa4b3 HTTP/2.0
host: cinecalidad.run
accept: text/css, */*
referer: https://cinecalidad.run/
accept-language: es-ES,es;q=0.5
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
date: Thu, 02 Feb 2023 16:23:14 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=175383
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cache-control: public, max-age=16070400
expires: Sun, 05 Feb 2023 21:54:43 GMT
last-modified: Sun, 29 Jan 2023 21:54:14 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 325712
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=V0aNKTLm8%2Bxr0hpK0Ac7GH23HHIUwULvcjHAz8z0GCK398KiyQbptzK5vphUAo%2BAUOKnKb0glG%2BFS2JCyqK2%2FtJtkx4LSqkXKLg75epW1%2Fquz1ppJeyUdanVKgWLHzCKmTw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7934452dd9c51afd-AMS
content-encoding: gzip
-
GEThttps://cinecalidad.run/wp-content/litespeed/css/4230384dd851d7865e9fd1a231f409bf.css?ver=7232fRemote address:104.21.234.203:443RequestGET /wp-content/litespeed/css/4230384dd851d7865e9fd1a231f409bf.css?ver=7232f HTTP/2.0
host: cinecalidad.run
accept: text/css, */*
referer: https://cinecalidad.run/
accept-language: es-ES,es;q=0.5
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
date: Thu, 02 Feb 2023 16:23:14 GMT
content-type: text/css
cf-bgj: minify
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cache-control: public, max-age=16070400
expires: Mon, 06 Feb 2023 03:34:44 GMT
last-modified: Mon, 30 Jan 2023 03:34:05 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 305312
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HK63Bk3CDdiSIeZagEjQAPutK4mzfjWz1j2dJjsHyAQ%2BqQGAVmGRlB95SNXCEOVSWBXwm9uv3pcmaAhJ7Vif3M7vNkHdRwPnmlKR6dhnNdtbc745kHyJkx67CFxOT9wQ%2F%2Bo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7934452e5a761afd-AMS
content-encoding: gzip
-
GEThttps://cinecalidad.run/wp-content/litespeed/css/1885658c142531b2cbc74e7d9abce007.css?ver=63942Remote address:104.21.234.203:443RequestGET /wp-content/litespeed/css/1885658c142531b2cbc74e7d9abce007.css?ver=63942 HTTP/2.0
host: cinecalidad.run
accept: text/css, */*
referer: https://cinecalidad.run/
accept-language: es-ES,es;q=0.5
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
date: Thu, 02 Feb 2023 16:23:14 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=217
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cache-control: public, max-age=16070400
expires: Sun, 05 Feb 2023 21:54:43 GMT
last-modified: Sun, 29 Jan 2023 21:54:14 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 325712
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bS32LPEnAO8Akm9ldr9U7ahXAdiGOWF2xnDjfP1PLHzla7%2FQiq%2F91ZpCrZiPJKMBzycnvLdLt0oebrIlLn%2Bz4JFZ%2BAVwMqtEGa3HZGAXeVbFtc0EN4TyBTiJsH58zsIcwS8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7934452e4a631afd-AMS
content-encoding: gzip
-
GEThttps://cinecalidad.run/wp-content/plugins/wp-smush-pro/app/assets/js/smush-lazy-load-native.min.js?ver=3.8.4Remote address:104.21.234.203:443RequestGET /wp-content/plugins/wp-smush-pro/app/assets/js/smush-lazy-load-native.min.js?ver=3.8.4 HTTP/2.0
host: cinecalidad.run
accept: application/javascript, */*;q=0.8
referer: https://cinecalidad.run/
accept-language: es-ES,es;q=0.5
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
date: Thu, 02 Feb 2023 16:23:14 GMT
content-type: application/javascript
content-length: 4149
cache-control: public, max-age=16070400
expires: Sun, 05 Feb 2023 21:54:43 GMT
last-modified: Tue, 21 Jun 2022 06:20:33 GMT
content-encoding: gzip
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 325712
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iRj%2Bk67FThM98%2FjRW2DAsJB69rrpI7dKGMfdZzTGG7wuX4yogBSfd5mH4k4%2B6rfIU5KZLAVM2B4Gh4Ndlq5T0rv%2BpfxmIJEUy%2FhpKFG9jKFboTX6V4ZxXHJtCfXqjxHZehk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7934452e5a7e1afd-AMS
-
GEThttps://cinecalidad.run/wp-content/themes/Cinecalidad/assets/js/void.js?ver=6.1.1Remote address:104.21.234.203:443RequestGET /wp-content/themes/Cinecalidad/assets/js/void.js?ver=6.1.1 HTTP/2.0
host: cinecalidad.run
accept: application/javascript, */*;q=0.8
referer: https://cinecalidad.run/
accept-language: es-ES,es;q=0.5
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
date: Thu, 02 Feb 2023 16:23:14 GMT
content-type: application/javascript
content-length: 27
cf-bgj: minify
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cache-control: public, max-age=16070400
expires: Fri, 03 Feb 2023 15:55:44 GMT
last-modified: Tue, 21 Jun 2022 06:20:35 GMT
cf-cache-status: HIT
age: 520050
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=el3sAqA5LzH3jinr4DOPxuj0XM1kZCqoaGsnyAwojGsR%2BcHDHzEq80%2Bzh1EH97vnGzXGBbvkSVboy5R3RuAfcRg%2B3Q%2BzyXvkeUM3y%2FVB1HRN%2B2sCZ312nOdVJCzKWOn3Po8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7934452e6a811afd-AMS
-
GEThttps://cinecalidad.run/wp-content/themes/Cinecalidad/assets/js/bundle.js?v=1.10?v=0.01825800%201675351439Remote address:104.21.234.203:443RequestGET /wp-content/themes/Cinecalidad/assets/js/bundle.js?v=1.10?v=0.01825800%201675351439 HTTP/2.0
host: cinecalidad.run
accept: application/javascript, */*;q=0.8
referer: https://cinecalidad.run/
accept-language: es-ES,es;q=0.5
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
date: Thu, 02 Feb 2023 16:23:14 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=3782
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cache-control: public, max-age=16070400
expires: Thu, 09 Feb 2023 15:26:04 GMT
last-modified: Tue, 21 Jun 2022 06:20:35 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 3430
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IhGxYt8q3TJl%2Fn3Np8LrgPF6Tct7g8YDoW5rpql0pBGLE%2FEzripF%2BuKgT50UjAhqu%2BX57uo7S%2F1DCZMX9jsYc6Cbu7Cpv0BTR0p33rwsJqvu2HFYala7dHA93BvoWiCUx68%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7934452e7a951afd-AMS
content-encoding: gzip
-
GEThttps://cinecalidad.run/wp-content/themes/Cinecalidad/assets/webfonts/fa-brands-400.eot?Remote address:104.21.234.203:443RequestGET /wp-content/themes/Cinecalidad/assets/webfonts/fa-brands-400.eot? HTTP/2.0
host: cinecalidad.run
accept: */*
referer: https://cinecalidad.run/
accept-language: es-ES,es;q=0.5
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
origin: https://cinecalidad.run
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
date: Thu, 02 Feb 2023 16:23:15 GMT
content-type: image/webp
content-length: 11842
cache-control: public, max-age=16070400
expires: Thu, 09 Feb 2023 11:25:12 GMT
last-modified: Thu, 02 Feb 2023 03:00:26 GMT
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 17883
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VFY35vlycCm%2B9IV6r5TVEgWFBbGgl%2Beof88HwMSQaFH3wV74ePTQr08QenQlXNtBPcgXM%2FCKxZg3jfNSSW9XRrHTYAsByG0WoJRFNLGoB3Xo0txNEs9DQgWJhUO7j9EGW3k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79344532cfeb1afd-AMS
-
GEThttps://cinecalidad.run/wp-content/themes/Cinecalidad/assets/webfonts/fa-light-300.eot?Remote address:104.21.234.203:443RequestGET /wp-content/themes/Cinecalidad/assets/webfonts/fa-light-300.eot? HTTP/2.0
host: cinecalidad.run
accept: */*
referer: https://cinecalidad.run/
accept-language: es-ES,es;q=0.5
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
origin: https://cinecalidad.run
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
date: Thu, 02 Feb 2023 16:23:16 GMT
content-type: application/vnd.ms-fontobject
content-length: 92374
last-modified: Tue, 21 Jun 2022 06:20:35 GMT
content-encoding: gzip
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cache-control: max-age=16070400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wkgArRGej37mbsMhphUWVq7K9EkhgrrRO3%2BcxM8BNfPgLA83UGl43s5v8lhqK7HD0hZivVkmCOAUXvSCb%2BjPMwybsItFDjWe4zCOOlCRdaPR%2BfCffuFI%2BNadQ3h%2Bh7ovE8o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 793445317e2e1afd-AMS
-
GEThttps://cinecalidad.run/wp-content/themes/Cinecalidad/assets/webfonts/fa-regular-400.eot?Remote address:104.21.234.203:443RequestGET /wp-content/themes/Cinecalidad/assets/webfonts/fa-regular-400.eot? HTTP/2.0
host: cinecalidad.run
accept: */*
referer: https://cinecalidad.run/
accept-language: es-ES,es;q=0.5
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
origin: https://cinecalidad.run
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
date: Thu, 02 Feb 2023 16:23:16 GMT
content-type: application/vnd.ms-fontobject
content-length: 190463
last-modified: Tue, 21 Jun 2022 06:20:35 GMT
content-encoding: gzip
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cache-control: max-age=16070400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xmxOKhpBM%2BWmRV8obS4a5FwmVLEQJymxUaEna3kS9KkVQXFobuVUDrGHtxYgpmV26iJRXaAyE0vG%2BSYCichSt0TwZoMviDZacNdlciqYmQkKtxpT18PNahiY1el9PEmBu7M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79344531ce8d1afd-AMS
-
GEThttps://cinecalidad.run/wp-content/themes/Cinecalidad/assets/webfonts/fa-solid-900.eot?Remote address:104.21.234.203:443RequestGET /wp-content/themes/Cinecalidad/assets/webfonts/fa-solid-900.eot? HTTP/2.0
host: cinecalidad.run
accept: */*
referer: https://cinecalidad.run/
accept-language: es-ES,es;q=0.5
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
origin: https://cinecalidad.run
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
date: Thu, 02 Feb 2023 16:23:16 GMT
content-type: application/vnd.ms-fontobject
content-length: 232304
last-modified: Tue, 21 Jun 2022 06:20:35 GMT
content-encoding: gzip
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cache-control: max-age=16070400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h6S5poFSasZAD0WwX26vm%2BdWKusEgZWHXv335iohvNCL7WouWVW%2BFgTsl0ddG8%2BzkIgxx8Z5TQLCy3Gvzly7qgRoUHUTrzOJFc3%2FyTf9C5bZ3q3rBdXZcUGR%2FN6QUYUfeok%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79344531ce8c1afd-AMS
-
GEThttps://cinecalidad.run/wp-content/webp-express/webp-images/uploads/2023/02/kep70QHsWAV3ayS4nHKbwvdr9nc-234x327.jpg.webpRemote address:104.21.234.203:443RequestGET /wp-content/webp-express/webp-images/uploads/2023/02/kep70QHsWAV3ayS4nHKbwvdr9nc-234x327.jpg.webp HTTP/2.0
host: cinecalidad.run
accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5
referer: https://cinecalidad.run/
accept-language: es-ES,es;q=0.5
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
date: Thu, 02 Feb 2023 16:23:16 GMT
content-type: application/vnd.ms-fontobject
content-length: 253502
last-modified: Tue, 21 Jun 2022 06:20:35 GMT
content-encoding: gzip
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cache-control: max-age=16070400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mwPRf50U4CtfL1tvAdJH29AMrd28YwWChrcc8QNkCrD7QwT%2BSs%2BNbVPHOfSLmAlPFnsW0%2Fhdr9lDKI6z26KPcbOElX0VWx0Pd%2BjAKId5b2uZxm8wP%2BKt9guZrx4tM4%2BoR2Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79344531be751afd-AMS
-
GEThttps://cinecalidad.run/wp-content/uploads/2021/11/favicon-de-cinecalidad-150x150.pngRemote address:104.21.234.203:443RequestGET /wp-content/uploads/2021/11/favicon-de-cinecalidad-150x150.png HTTP/2.0
host: cinecalidad.run
accept: */*
accept-encoding: gzip, deflate
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
ResponseHTTP/2.0 200
date: Thu, 02 Feb 2023 16:23:17 GMT
content-type: image/png
content-length: 7219
cache-control: public, max-age=16070400
expires: Sun, 05 Feb 2023 22:50:45 GMT
last-modified: Tue, 21 Jun 2022 06:20:44 GMT
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 322353
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=On10eVjhOXdZgta%2Fb2XPYBLEDdZC%2BOY6C9ZHh9mUgCurN3LwieNszSOvGOrXE9uuozkU04tWeJM%2Fudq2SYSIr%2BM8atOoQN57tMA7vo%2BF9ZvK9WtMfXeaHXec0n%2BwP9hsVtM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7934453f18101afd-AMS
-
DNScdn.cinecalidad.lolRemote address:8.8.8.8:53Requestcdn.cinecalidad.lolIN AResponse
-
DNScdn.ww2.cinecalidad.linkRemote address:8.8.8.8:53Requestcdn.ww2.cinecalidad.linkIN AResponse
-
DNSimage.tmdb.orgRemote address:8.8.8.8:53Requestimage.tmdb.orgIN AResponseimage.tmdb.orgIN CNAMEtmdb-image-prod.b-cdn.nettmdb-image-prod.b-cdn.netIN A169.150.236.97
-
DNSardslediana.comRemote address:8.8.8.8:53Requestardslediana.comIN AResponseardslediana.comIN A139.45.197.236
-
DNScdn.jsdelivr.netRemote address:8.8.8.8:53Requestcdn.jsdelivr.netIN AResponsecdn.jsdelivr.netIN CNAMEcdn.jsdelivr.net.cdn.cloudflare.netcdn.jsdelivr.net.cdn.cloudflare.netIN A104.16.88.20cdn.jsdelivr.net.cdn.cloudflare.netIN A104.16.85.20cdn.jsdelivr.net.cdn.cloudflare.netIN A104.16.89.20cdn.jsdelivr.net.cdn.cloudflare.netIN A104.16.86.20cdn.jsdelivr.net.cdn.cloudflare.netIN A104.16.87.20
-
GEThttps://ardslediana.com/5/4854578Remote address:139.45.197.236:443RequestGET /5/4854578 HTTP/2.0
host: ardslediana.com
accept: application/javascript, */*;q=0.8
referer: https://cinecalidad.run/
accept-language: es-ES,es;q=0.5
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
server: nginx
date: Thu, 02 Feb 2023 16:23:15 GMT
content-type: application/javascript
x-trace-id: e74642ce56ab233374f6167ee1c95d56
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
set-cookie: OAID=f9ab161cb0d54f3b913af2914914cb87; expires=Fri, 02 Feb 2024 16:23:15 GMT; path=/; secure; SameSite=None
set-cookie: oaidts=1675354995; expires=Fri, 02 Feb 2024 16:23:15 GMT; path=/; secure; SameSite=None
set-cookie: syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
-
GEThttps://cdn.jsdelivr.net/npm/vanilla-lazyload@17.5.0/dist/lazyload.min.jsRemote address:104.16.88.20:443RequestGET /npm/vanilla-lazyload@17.5.0/dist/lazyload.min.js HTTP/2.0
host: cdn.jsdelivr.net
accept: application/javascript, */*;q=0.8
referer: https://cinecalidad.run/
accept-language: es-ES,es;q=0.5
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
date: Thu, 02 Feb 2023 16:23:15 GMT
content-type: application/javascript; charset=utf-8
content-length: 2891
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 17.5.0
x-jsd-version-type: version
etag: W/"2064-oi+c7JJTK/ZiiPmw9llPJzhqJ/I"
content-encoding: gzip
age: 20657142
x-served-by: cache-fra19171-FRA, cache-ams21057-AMS
x-cache: HIT, HIT
vary: Accept-Encoding
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rjRK8wROFtH%2FHv8c5SzNSWoBoNRyL8wKdIEsbZwyKbTM9gWCgKbbABorpj0yJ1%2BaCSUVOYOwIpF6tx9jJ8HrU3DAcZsCZnXsA1BrstPab799HGgSd45vV9DMikuW9ZrihHU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79344530f878b718-AMS
-
DNSnanouwho.comRemote address:8.8.8.8:53Requestnanouwho.comIN AResponsenanouwho.comIN A139.45.197.242
-
GEThttps://nanouwho.com/1?z=4907427Remote address:139.45.197.242:443RequestGET /1?z=4907427 HTTP/2.0
host: nanouwho.com
accept: application/javascript, */*;q=0.8
referer: https://cinecalidad.run/
accept-language: es-ES,es;q=0.5
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
accept-encoding: gzip, deflate
ResponseHTTP/2.0 404
server: nginx
date: Thu, 02 Feb 2023 16:23:15 GMT
content-type: text/plain; charset=utf-8
content-length: 7
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID
x-trace-id: 525d1a5874579cb0fb36e9149b739169
access-control-expose-headers: X-Sc
x-sc: 4KdnrdofxFOHMlcU
set-cookie: scm=1; expires=Fri, 02 Feb 2024 16:23:15 GMT; secure; SameSite=None
-
DNSmy.rtmark.netRemote address:8.8.8.8:53Requestmy.rtmark.netIN AResponsemy.rtmark.netIN A139.45.195.8
-
GEThttps://my.rtmark.net/gid.js?userId=f9ab161cb0d54f3b913af2914914cb87Remote address:139.45.195.8:443RequestGET /gid.js?userId=f9ab161cb0d54f3b913af2914914cb87 HTTP/2.0
host: my.rtmark.net
accept: */*
referer: https://cinecalidad.run/
accept-language: es-ES,es;q=0.5
origin: https://cinecalidad.run
accept-encoding: gzip, deflate
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
ResponseHTTP/2.0 200
server: nginx
date: Thu, 02 Feb 2023 16:23:15 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://cinecalidad.run
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
timing-allow-origin: *
set-cookie: ID=f9ab161cb0d54f3b913af2914914cb87; expires=Fri, 02 Feb 2024 16:23:15 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
-
GEThttps://ieonline.microsoft.com/iedomainsuggestions/ie11/suggestions.es-ESRemote address:204.79.197.200:443RequestGET /iedomainsuggestions/ie11/suggestions.es-ES HTTP/2.0
host: ieonline.microsoft.com
accept: */*
ua-cpu: AMD64
accept-encoding: gzip, deflate
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko
cookie: _EDGE_V=1; MUID=0775A1278FC36B6B2CB6B37E8E6F6A18; MUIDB=0775A1278FC36B6B2CB6B37E8E6F6A18
ResponseHTTP/2.0 200
cache-control: public, max-age=3600
content-length: 19132
content-type: application/octet-stream
etag: WeBSg+BMbAJS0rddUUG6Ytc+nfk=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: SUID=M; domain=.microsoft.com; expires=Fri, 03-Feb-2023 04:24:18 GMT; path=/; HttpOnly
set-cookie: _EDGE_S=SID=24151CD95C33699A1A6C0E755DDE68BE; domain=.microsoft.com; path=/; HttpOnly
set-cookie: MUIDB=0775A1278FC36B6B2CB6B37E8E6F6A18; expires=Tue, 27-Feb-2024 16:24:18 GMT; path=/; HttpOnly
set-cookie: SRCHD=AF=NOFORM; domain=.microsoft.com; expires=Sun, 02-Feb-2025 16:24:18 GMT; path=/
set-cookie: SRCHUID=V=2&GUID=7D324935EC0D45A99AF831A9845995DE&dmnchg=1; domain=.microsoft.com; expires=Sun, 02-Feb-2025 16:24:18 GMT; path=/
set-cookie: SRCHUSR=DOB=20230202; domain=.microsoft.com; expires=Sun, 02-Feb-2025 16:24:18 GMT; path=/
set-cookie: SRCHHPGUSR=SRCHLANG=en; domain=.microsoft.com; expires=Sun, 02-Feb-2025 16:24:18 GMT; path=/
set-cookie: _SS=SID=24151CD95C33699A1A6C0E755DDE68BE; domain=.microsoft.com; path=/
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: D49A9A767BF64EA28064C60BBC2C6B0E Ref B: AMS04EDGE3318 Ref C: 2023-02-02T16:24:18Z
date: Thu, 02 Feb 2023 16:24:17 GMT
-
104.21.234.203:443https://cinecalidad.run/wp-content/uploads/2021/11/favicon-de-cinecalidad-150x150.pngtls, http2
HTTP Request
GET https://cinecalidad.run/HTTP Response
200HTTP Request
GET https://cinecalidad.run/wp-content/litespeed/css/e85ac847e8df1a86184f3e264e9a2778.css?ver=a8853HTTP Request
GET https://cinecalidad.run/wp-content/litespeed/css/356d410a0b28acbae14c546e482fa4b3.css?ver=fa4b3HTTP Response
200HTTP Response
200HTTP Request
GET https://cinecalidad.run/wp-content/litespeed/css/4230384dd851d7865e9fd1a231f409bf.css?ver=7232fHTTP Request
GET https://cinecalidad.run/wp-content/litespeed/css/1885658c142531b2cbc74e7d9abce007.css?ver=63942HTTP Request
GET https://cinecalidad.run/wp-content/plugins/wp-smush-pro/app/assets/js/smush-lazy-load-native.min.js?ver=3.8.4HTTP Request
GET https://cinecalidad.run/wp-content/themes/Cinecalidad/assets/js/void.js?ver=6.1.1HTTP Request
GET https://cinecalidad.run/wp-content/themes/Cinecalidad/assets/js/bundle.js?v=1.10?v=0.01825800%201675351439HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Request
GET https://cinecalidad.run/wp-content/themes/Cinecalidad/assets/webfonts/fa-brands-400.eot?HTTP Request
GET https://cinecalidad.run/wp-content/themes/Cinecalidad/assets/webfonts/fa-light-300.eot?HTTP Request
GET https://cinecalidad.run/wp-content/themes/Cinecalidad/assets/webfonts/fa-regular-400.eot?HTTP Request
GET https://cinecalidad.run/wp-content/themes/Cinecalidad/assets/webfonts/fa-solid-900.eot?HTTP Request
GET https://cinecalidad.run/wp-content/webp-express/webp-images/uploads/2023/02/kep70QHsWAV3ayS4nHKbwvdr9nc-234x327.jpg.webpHTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Request
GET https://cinecalidad.run/wp-content/uploads/2021/11/favicon-de-cinecalidad-150x150.pngHTTP Response
200 -
104.21.234.203:443cinecalidad.runtls, http2
-
72.21.91.29:80
-
139.45.197.236:443https://ardslediana.com/5/4854578tls, http2
HTTP Request
GET https://ardslediana.com/5/4854578HTTP Response
200 -
139.45.197.236:443ardslediana.comtls, http2
-
104.16.88.20:443https://cdn.jsdelivr.net/npm/vanilla-lazyload@17.5.0/dist/lazyload.min.jstls, http2
HTTP Request
GET https://cdn.jsdelivr.net/npm/vanilla-lazyload@17.5.0/dist/lazyload.min.jsHTTP Response
200 -
104.16.88.20:443cdn.jsdelivr.nettls, http2
-
139.45.197.242:443nanouwho.comtls, http2
-
139.45.197.242:443https://nanouwho.com/1?z=4907427tls, http2
HTTP Request
GET https://nanouwho.com/1?z=4907427HTTP Response
404 -
139.45.195.8:443https://my.rtmark.net/gid.js?userId=f9ab161cb0d54f3b913af2914914cb87tls, http2
HTTP Request
GET https://my.rtmark.net/gid.js?userId=f9ab161cb0d54f3b913af2914914cb87HTTP Response
200 -
139.45.195.8:443my.rtmark.nettls, http2
-
72.21.81.240:80
-
72.21.81.240:80
-
104.80.225.205:443
-
40.79.141.152:443
-
72.21.81.240:80
-
72.21.81.240:80
-
72.21.81.240:80
-
204.79.197.200:443https://ieonline.microsoft.com/iedomainsuggestions/ie11/suggestions.es-EStls, http2
HTTP Request
GET https://ieonline.microsoft.com/iedomainsuggestions/ie11/suggestions.es-ESHTTP Response
200 -
204.79.197.200:443ieonline.microsoft.comtls, http2
-
8.8.8.8:53cinecalidad.rundns
DNS Request
cinecalidad.run
DNS Response
104.21.234.203104.21.234.202
-
8.8.8.8:53cdn.cinecalidad.loldns
DNS Request
cdn.cinecalidad.lol
-
8.8.8.8:53cdn.ww2.cinecalidad.linkdns
DNS Request
cdn.ww2.cinecalidad.link
-
8.8.8.8:53image.tmdb.orgdns
DNS Request
image.tmdb.org
DNS Response
169.150.236.97
-
8.8.8.8:53ardslediana.comdns
DNS Request
ardslediana.com
DNS Response
139.45.197.236
-
8.8.8.8:53cdn.jsdelivr.netdns
DNS Request
cdn.jsdelivr.net
DNS Response
104.16.88.20104.16.85.20104.16.89.20104.16.86.20104.16.87.20
-
8.8.8.8:53nanouwho.comdns
DNS Request
nanouwho.com
DNS Response
139.45.197.242
-
8.8.8.8:53my.rtmark.netdns
DNS Request
my.rtmark.net
DNS Response
139.45.195.8
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
471B
MD58795643bd9448f355f1e817b1beb8f13
SHA1fc5afcd5dc1c57ec501109cb987bec2e7b628514
SHA256c9a53a6962ee0ada77bad358699a886e9d54243a3ae24cc182acfeaef4dba134
SHA5124a8bc9001359c55a68bb329ef000ea7506c003ef6a98d57d769ca020758bcde63d52b03add74e39294b7b0c52abb9a07ff6ec3bd1e66f9eca0e0675b2b9cd2f2
-
Filesize
404B
MD57769a9ea58dc9b84a4a2f437574f4bff
SHA108eac6d47ec4f3997b1c94b4eb5ea7e76ecd198f
SHA256eac1da05912b5385e337cdf06fcf83e006bfb246cab99789d5a42f7a33eb4887
SHA5125e2fa8c1b5ef869ae5469bbb7399fb848d5cf20c8a2b8bb217ed9437b84a725f05ad1243f92da750a008c011531b4ea64875554fd5c524b86f2e7b13182291c3
-
Filesize
7KB
MD59f9dfa6e50e89d6a77a77eea6171b8a2
SHA155acb3add7b4b6c6d4c4b5aec66bdf30a354d461
SHA256131d3e31af22144751ba4d33a3675ee5e876fcf1aaa8295c3bc42a716af9e986
SHA512216b71a877e6254e4425300bb6c5ae82c80d1177c30c8b7417bdc181a7a5053f6d5243ccfb68aaa4d0978a9fa3681597a97d88f060895621ad73c4ad9eddba37