Edit tour

Windows Analysis Report
https://www.cineuserdad.ec

Overview

General Information

Sample URL:	https://www.cineuserdad.ec
Analysis ID:	1587301
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Connects to several IPs in different countries

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 2932 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6884 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1944 --field-trial-handle=1760,i,13835907714971257728,9868410907798193367,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4636 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4960 --field-trial-handle=1760,i,13835907714971257728,9868410907798193367,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6496 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.cineuserdad.ec" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /zhJwXttv5f0KTUqADNXlghdnB4LqOUMg0FPYkWGH5OvnntAXi0r9Tgte2rDWbGRACXXvSkd82jKBClc1pmyt_g376xZFLsJ0j4dv_9vxmsYGhoVdEnSLyrLGxJCd6fuaXd_xSmcfuRmxQzyPailPbmrQXiNGa4VYSgVakk-TUMqvSK4UnCzIGgF-vGjItPlGG6jXiXKRhbV0Yky7fptlbltUBVSiOOB-RTb11hj4BgpgQQW-QA4nKdZBODVE4TQ3b20XPeTe_CWeHcqgYa_TJ4aVEZkITUCZcD6IQ2McOM44Go_EiAXCIpBezeUVYonAhitRgk6a15PLRwNEZz2O1LoRkmKgbiz5KcnOJVhopHiSh8IU5VvaSAXUluz6JoEU3eM-H56qyK-aZMSWD3UqGiRDHiPt5Hav0wyW-ospC2F3eHtAily7MYoM24ZTjpxaWcMU5HxYBveBam_8AL8L1D_MV_2pqUPJQBx_u8EBofKP2IyhhY25RmhjWawkshCf_zrGrpagsZMNo5iFUymf4oV_5vNoMQhiNHw5rjsCy1AUpvwr0P4R3RSl9x_peWrFr9-MD1pBMc4zfzQ4Q68W7un6U084G5WBkyQkTnc6S0lmgilTD7-j5GLAXnOocrABd_MrTAVa0V1dAR1E? HTTP/1.1Host: dj2550.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.cineuserdad.ecSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cineuserdad.ec/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://betwinner.com/en/block	HTTP Parser: No favicon
Source: https://betwinner.com/en/block	HTTP Parser: No favicon
Source: https://betwinner.com/en/block	HTTP Parser: No favicon
Source: https://www.cineuserdad.ec/ver-pelicula/flow/	HTTP Parser: No favicon
Source: https://www.cineuserdad.ec/ver-pelicula/flow/	HTTP Parser: No favicon
Source: https://www.cineuserdad.ec/ver-pelicula/flow/	HTTP Parser: No favicon
Source: https://www.cineuserdad.ec/ver-pelicula/flow/	HTTP Parser: No favicon

Source: https://www.cineuserdad.ec/	HTTP Parser: No <meta name="author".. found
Source: https://www.cineuserdad.ec/	HTTP Parser: No <meta name="author".. found
Source: https://www.cineuserdad.ec/	HTTP Parser: No <meta name="author".. found
Source: https://www.cineuserdad.ec/	HTTP Parser: No <meta name="author".. found
Source: https://www.cineuserdad.ec/fecha-de-lanzamiento/2024/	HTTP Parser: No <meta name="author".. found
Source: https://www.cineuserdad.ec/fecha-de-lanzamiento/2024/	HTTP Parser: No <meta name="author".. found
Source: https://www.cineuserdad.ec/fecha-de-lanzamiento/2024/	HTTP Parser: No <meta name="author".. found
Source: https://www.cineuserdad.ec/ver-pelicula/flow/	HTTP Parser: No <meta name="author".. found

Source: https://www.cineuserdad.ec/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cineuserdad.ec/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cineuserdad.ec/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cineuserdad.ec/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cineuserdad.ec/fecha-de-lanzamiento/2024/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cineuserdad.ec/fecha-de-lanzamiento/2024/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cineuserdad.ec/fecha-de-lanzamiento/2024/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cineuserdad.ec/ver-pelicula/flow/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_531.1.dr, chromecache_335.1.dr	String found in binary or memory: <li id="player-option-trailer" class="dooplay_player_option dooplay_player_option_trailer" data-option="https://www.youtube.com/embed/Ax8qnxP2TWY" style="position:relative;">Trailer</li> equals www.youtube.com (Youtube)
Source: chromecache_389.1.dr	String found in binary or memory: <li id="player-option-trailer" class="dooplay_player_option dooplay_player_option_trailer" data-option="https://www.youtube.com/embed/WZM90izJ8sI" style="position:relative;">Trailer</li> equals www.youtube.com (Youtube)
Source: chromecache_500.1.dr, chromecache_496.1.dr	String found in binary or memory: <li id="player-option-trailer" class="dooplay_player_option dooplay_player_option_trailer" data-option="https://www.youtube.com/embed/ZgZccxuj2RY" style="position:relative;">Trailer</li> equals www.youtube.com (Youtube)
Source: chromecache_482.1.dr, chromecache_474.1.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/t3hOLs8wlXy/ equals www.facebook.com (Facebook)
Source: chromecache_243.1.dr, chromecache_401.1.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},Nk:function(){e=nb()},Kd:function(){d()}}};var Vb=wa(["data-gtm-yt-inspected-"]),QE=["www.youtube.com","www.youtube-nocookie.com"],RE,SE=!1; equals www.youtube.com (Youtube)
Source: chromecache_243.1.dr, chromecache_401.1.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Kh:e,Ih:f,Jh:g,ri:k,si:m,bf:n,Mb:b},q=A.YT;if(q)return q.ready&&q.ready(d),b;var r=A.onYouTubeIframeAPIReady;A.onYouTubeIframeAPIReady=function(){r&&r();d()};H(function(){for(var u=E.getElementsByTagName("script"),v=u.length,t=0;t<v;t++){var w=u[t].getAttribute("src");if(aF(w,"iframe_api")\|\|aF(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!SE&&ZE(x[B],p.bf))return lc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_505.1.dr, chromecache_418.1.dr, chromecache_511.1.dr, chromecache_468.1.dr, chromecache_315.1.dr, chromecache_368.1.dr	String found in binary or memory: return b}OE.F="internal.enableAutoEventOnTimer";var Vb=wa(["data-gtm-yt-inspected-"]),QE=["www.youtube.com","www.youtube-nocookie.com"],RE,SE=!1; equals www.youtube.com (Youtube)
Source: chromecache_510.1.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(b){var c=typeof a.URL==="function"?a.URL:a.webkitURL;c=new c(b);c=c.hostname.endsWith(".facebook.com")&&c.pathname=="/signals/iwl.js";if(!c)throw new Error("Disallowed script URL");return b}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_510.1.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_510.1.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_482.1.dr, chromecache_474.1.dr	String found in binary or memory: window.FB&&window.FB.__buffer&&(window.__buffer=babelHelpers["extends"]({},window.FB.__buffer)); } }).call(global);})();} catch (__fb_err) {var __fb_i = new Image();__fb_i.crossOrigin = 'anonymous';__fb_i.dataset.testid = 'fbSDKErrorReport';__fb_i.src='https://www.facebook.com/platform/scribe_endpoint.php/?c=jssdk_error&m='+encodeURIComponent('{"error":"LOAD", "extra": {"name":"'+__fb_err.name+'","line":"'+(__fb_err.lineNumber\|\|__fb_err.line)+'","script":"'+(__fb_err.fileName\|\|__fb_err.sourceURL\|\|__fb_err.script\|\|"sdk.js")+'","stack":"'+(__fb_err.stackTrace\|\|__fb_err.stack)+'","revision":"1019249042","namespace":"FB","message":"'+__fb_err.message+'"}}');document.body.appendChild(__fb_i);} equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.cineuserdad.ec
Source: global traffic	DNS traffic detected: DNS query: cdn.ww2.cineuserdad.link
Source: global traffic	DNS traffic detected: DNS query: image.tmdb.org
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: cdn.dj2550.com
Source: global traffic	DNS traffic detected: DNS query: click.ggpickaff.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: dj2550.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: betwinner.com
Source: global traffic	DNS traffic detected: DNS query: radar.cedexis.com
Source: global traffic	DNS traffic detected: DNS query: suphelper.com
Source: global traffic	DNS traffic detected: DNS query: v3.traincdn.com
Source: global traffic	DNS traffic detected: DNS query: mc.yandex.ru
Source: global traffic	DNS traffic detected: DNS query: i2-hjtcsbalpqklewyeaqlwejtlyxmjxx.init.cedexis-radar.net
Source: global traffic	DNS traffic detected: DNS query: rpt.cedexis.com
Source: global traffic	DNS traffic detected: DNS query: mc.yandex.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: servers-sg2.cdnsfree.com
Source: global traffic	DNS traffic detected: DNS query: cineuserdad.lol
Source: global traffic	DNS traffic detected: DNS query: trstx.org
Source: global traffic	DNS traffic detected: DNS query: aj2550.bid
Source: global traffic	DNS traffic detected: DNS query: amd-cdn-1.ffb7df5a878b59e42e257c042f54bed2.com
Source: global traffic	DNS traffic detected: DNS query: amd-cdn-1.custacin-crowlexing-i-283.site
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 04:23:00 GMTTransfer-Encoding: chunkedConnection: closeServer-Timing: dt_total;dur=0.024Vary: Accept-EncodingX-Dt: 495X-Request-Guid: 278bb8ce7bf4388725cea87a8db9b012X-Time-Ng: 0.003Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 10 Jan 2025 04:23:57 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-dns-prefetch-control: onx-litespeed-tag: a64_HTTP.404x-wp-cf-super-cache-cookies-bypass: swfpc-feature-not-enabledx-wp-cf-super-cache-active: 1x-wp-cf-super-cache: cachelink: <https://www.cineuserdad.ec/wp-json/>; rel="https://api.w.org/"x-wp-cf-super-cache-disabled-reason: 404pragma: no-cacheexpires: Fri, 10 Jan 2025 04:23:57 GMTx-wp-spc-disk-cache: BYPASSx-wp-cf-super-cache-cache-control: no-store, no-cache, must-revalidate, max-age=0x-litespeed-cache-control: no-cacheCache-Control: no-cache, no-store, must-revalidate, max-age=0vary: Accept-EncodingCF-Cache-Status: BYPASSReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9y4bYa9e7F4ZlwompJO21nkXwefc8j8OEN3yHaJIBcHDx3zCom4iiwoHOYaA%2FNyCEuT2T2P5DUA5t%2FCTiNl3Eq%2FHuqCizldiH%2BPd67HGWxdWga9%2F4XrkFN%2BN7IWJeNVkICrGzHM%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8ff9e5040a28f799-EWRalt-svc: h3=":443"; ma=86400

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1944 --field-trial-handle=1760,i,13835907714971257728,9868410907798193367,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.cineuserdad.ec"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4960 --field-trial-handle=1760,i,13835907714971257728,9868410907798193367,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1944 --field-trial-handle=1760,i,13835907714971257728,9868410907798193367,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4960 --field-trial-handle=1760,i,13835907714971257728,9868410907798193367,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://cineuserdad.lol/#webpage	0%	Avira URL Cloud	safe
https://betwinner-india.com/hi	100%	Avira URL Cloud	malware
https://acortalink.me/s.php?i=VTJGc2RHVmtYMThJOUJGckNNN0xVWDZQUldwSnZSaStyOHd1K0tmOXIrdHc4WHdMN1NtcV	0%	Avira URL Cloud	safe
https://cineuserdad.run	0%	Avira URL Cloud	safe
https://acortalink.me/s.php?i=VTJGc2RHVmtYMTlIY2hJb0JMNWU0WDhvOGV6V3JLSVFad2EyQzZ3WHM2TWdRMTNkOTZnaz	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.1.229	true	false	high
mc.yandex.ru	87.250.250.119	true	false	high
stats.g.doubleclick.net	142.251.168.157	true	false	high
suphelper.com	104.17.54.7	true	false	high
scontent.xx.fbcdn.net	157.240.251.9	true	false	high
tmdb-image-prod.b-cdn.net	79.127.216.111	true	false	high
www.google.com	142.250.186.164	true	false	high
betwinner.com	213.183.38.31	true	false	high
star-mini.c10r.facebook.com	157.240.0.35	true	false	high
dj2550.com	104.21.79.241	true	false	high
amd-cdn-1.custacin-crowlexing-i-283.site	50.7.24.35	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
alanbase.com	78.141.210.193	true	false	high
amd-cdn-1.ffb7df5a878b59e42e257c042f54bed2.com	50.7.24.35	true	false	high
radar.cedexis.com	45.54.49.5	true	false	high
www.cineuserdad.ec	188.114.96.3	true	false	high
cineuserdad.lol	188.114.97.3	true	false	unknown
aj2550.bid	74.117.182.84	true	false	high
cl-glbb6db8e4.gcdn.co	92.223.124.62	true	false	high
i2-hjtcsbalpqklewyeaqlwejtlyxmjxx.init.cedexis-radar.net	104.225.98.131	true	false	high
rpt.cedexis.com	45.54.49.1	true	false	high
analytics-alv.google.com	216.239.32.181	true	false	high
trstx.org	213.183.62.123	true	false	high
td.doubleclick.net	172.217.16.194	true	false	high
1548164934.rsc.cdn77.org	169.150.255.184	true	false	high
servers-sg2.cdnsfree.com	185.230.245.154	true	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
cdn.ww2.cineuserdad.link	unknown	unknown	false	high
www.facebook.com	unknown	unknown	false	high
v3.traincdn.com	unknown	unknown	false	high
click.ggpickaff.com	unknown	unknown	false	high
mc.yandex.com	unknown	unknown	false	high
image.tmdb.org	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high
cdn.dj2550.com	unknown	unknown	false	high
analytics.google.com	unknown	unknown	false	high

Name	Malicious	Reputation
https://betwinner.com/genfiles/web-app-v2/dictionary2/v3_marketing_modules/en/dictionary_5a1d8238c34c817d16a0c0f1c566d7e7.json	false	high
https://betwinner.com/main-static/98cd156c/desktop/betwinner/Betting.Core-c277cf6d.js	false	high
https://rpt.cedexis.com/n1/0/1736482941224/0/0/1736482941228/1736482942209/1736482942209/1736482942209/1736482942209/1736482942209/1736482942209/0/1736482942211/1736482942478/1736482944734/1736482942485/1736482952406/1736482953828/1736482953828/1736482961432/1736482961432/1736482961462/_CgJqMRAUGHwiBggBEPq5ASjp0Pi_BjCfwYK8BjigwYK8BkCsi9XsC0oPCAMQNRiXaCAAKPODgKAEUABaCggAEAAYACAAKABgAWoTYnV0dG9uMy5hbXMuaHYucHJvZIIBFAgBEN8BGJwaIIWAgMAEKKCAgKAEiAGI3OzrC5ABAJgBAA/0/1736482952407	false	high
https://betwinner.com/sys-static/sys-betting-app-static/Desktop/BetWinner/44136fa355b3/Dep-2OXX.css	false	high
https://betwinner.com/main-static/98cd156c/check-ob.js	false	high
https://betwinner.com/	false	high
https://www.cineuserdad.ec/	false	high
https://betwinner.com/sys-static/sys-betting-app-static/Desktop/BetWinner/44136fa355b3/BxrVxt0x.css	false	high
https://image.tmdb.org/t/p/w342//qBVqPyNLdjMmQNzZFBZaBY1BDgL.jpg	false	high
https://betwinner.com/genfiles/web-app-v2/dictionary2/v3_auth/en/dictionary_3302f5052cd12ca260cd946af7660ff0.json	false	high
https://dj2550.com/zuf1UDavIw0dEQ8z006AMnYP5iWFzrU8RN_8Ey5j1x5SfLvlryw5-wZRizvHZn11EQ17sHJgbQKOt9wDN6JUg8SvLRQ4zO1qjAF39ABUpUAemTfK9sRm-wiuckHU9Hkg4PI38bGmMXFjYCaizMtM5-DYJB9IglgnmDJILjWxvHtsQpVJyFVhefY30aGpSi-zoypteBmQDJNq6WlHmfUbNjJEScxEj-L8H5ppaD-3PxJlpTfa8SA9rep7tCX1W_h36TpXvLWvx3E9wVTX1wfkJ_1zs-AceWP9sWVLFGFatRgo3YNycs3amw75yXJuOChYyCkwfjw0HynfxF1tP1nxwqq0PoWpQUFnPH1qxZqBKIZG4VI4hySf8ILRdtwp13dRAbWUUqRRxiM9HGW0_D_Ec1AGqlrAZlA1maodN5w82DippXZywRztPwW4tGtm1UchVjrj5Ays45ftm_N3pUgwuIAXdnyJsVgAf7VlZTXOdEAtSYIzMB_8gA4LrPZC9ExN3Idpe5k1MdeSGUvZPR86yIkf3Y-85dL046FZYbsj3q3sQUSd5tWU56cDUVfOecuhifv6bg9xTvZJH8QDXc0GAh4CY1sOGw8bMdSV-m5g57krA?DC=HZFI	false	high
https://amd-cdn-1.custacin-crowlexing-i-283.site/content/stream/France/1010x90_betwinner.jpg	false	high
https://image.tmdb.org/t/p/w185//im4yhz8A9LvXgu1nBPSIBtaBIf6.jpg	false	high
https://image.tmdb.org/t/p/w342//aZZKkmhgkN6AfmK7m7KrJRI1Uc5.jpg	false	high
https://dj2550.com/zbWzUQ4fk9YL5sNWGiccHip2ttXlphRxfAtA-Al8GCe6G4orn5O7VVIBnJp7E9pWATUcej5IGx6vEgSc-0X93BQ5LEhcuBPCGgavMBxJ8x2FJbi7TBzlHZFbm-a9k0r5lSfWIWihg6SjXuwCcqo554EyCwuuXmiAGCXCv1n07AZ0WB3VIxVqHKkzNI1WIxG2Jbo22OAW1ggTXFbHavk34Q7P0fP7IfD2Xa2iYhktNZP03aLsQqf8ffpgHpmAg8C-rRc98h3D2fY9SnQ16dc3V_VFd2ax-twirwK0bIpBWX54LYcCcfdZkfES1kWNbJtn9XZqaMQB0ddvEDGnoWUaiYXQrZ4V_UqRgpkNwI9a3T4hrJH2p9_HRs-NXa8hKCb97E3Y4umZMyO57EjrIphBhiJ1XW9FPBbZQY56oSDloFDEJRDm3-P8EoqVZQi6uY9Z4lUNhzx-WlNMkMeubhzCFhp6ZbUEdEqTvgNFrSLU0cepek2JqKaIYWJwEQUA1x9WPAN9ppT_G4a9ZcjRhgDPMtzlKSwSTqmShoYpCo5X6YTF5GlG_IunfzcvbnszEByxK54P82IH-AO2cuPV_Heg0bbNhaJ13gsnDUHCWaPsWVP4BzES4WZX--CQYA_1TsyDcHslHDQY?DC=HZFI	false	high
https://betwinner.com/genfiles/web-app-v2/dictionary2/v3_game/en/dictionary_656b6b420324a310371e850996e5e5d8.json	false	high
https://image.tmdb.org/t/p/w185//sJiHVM0A3OXDVxl4Z6a7ihMPHfm.jpg	false	high
https://betwinner.com/sys-static/sys-v3-host-app-static/Desktop/BetWinner/44136fa355b3/C1wkEXqG.css	false	high
https://betwinner.com/genfiles/web-app-v2/dictionary2/v3_registration/en/dictionary_60c452a4b57f0b9231563ee81a5a97da.json	false	high
https://www.cineuserdad.ec/zopass/frontcurtain.jpg	false	high
https://betwinner.com/sys-static/sys-betting-app-static/Desktop/BetWinner/44136fa355b3/vxgkXSoP.css	false	high
https://betwinner.com/sys-ui/2.3.7/Desktop/Default/client.css	false	high
https://betwinner.com/version.json?timestamp=1736482960261	false	high
https://betwinner.com/genfiles/web-app-v2/dictionary2/v3_home_showcase/en/dictionary_065912316f8fd4900d03a8ebe5c328f1.json	false	high
https://www.cineuserdad.ec/zopass/play.png	false	high
https://betwinner.com/sys-static/sys-v3-host-app-static/Desktop/BetWinner/44136fa355b3/B-Kpjrmg.css	false	high
https://www.cineuserdad.ec/fecha-de-lanzamiento/2024/1/	false	high
https://betwinner.com/genfiles/cms/152-495/desktop/media_asset/7967ac044a991a036ebc73876612cea5.json	false	high
https://betwinner.com/main-static/98cd156c/desktop/betwinner/Page.Block-244a48f6.js	false	high
https://betwinner.com/hd-api/external/01944e73-6c51-766c-8d24-9a939955c266.js	false	high
https://betwinner.com/hd-api/external/verify	false	high
https://www.cineuserdad.ec/zopass/rope.png	false	high
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=499076179354112&ev=PageView&dl=https%3A%2F%2Fbetwinner.com%2Fen%2Fblock&rl=https%3A%2F%2Fwww.cineuserdad.ec%2F&if=false&ts=1736482977740&sw=1280&sh=1024&v=2.9.179&r=stable&ec=0&o=4126&fbp=fb.1.1736482977737.704424165787497040&cs_est=true&ler=other&cdl=API_unavailable&it=1736482976159&coo=false&rqm=FGET	false	high
https://www.cineuserdad.ec/wp-content/themes/Cineuserdad/assets/css/bundle.css?v=1736482990	false	high
https://betwinner.com/hd-api/external/apps/c5e31d5915661de4393e3f1489b00ebc4497dd48/api.js	false	high
https://cdn.dj2550.com/a1fbae7b.js	false	high

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.cineuserdad.ec/release/2022/	chromecache_477.1.dr, chromecache_306.1.dr, chromecache_311.1.dr, chromecache_431.1.dr, chromecache_508.1.dr, chromecache_277.1.dr	false		high
https://www.cineuserdad.ec/release/2010/	chromecache_477.1.dr, chromecache_306.1.dr, chromecache_311.1.dr, chromecache_431.1.dr, chromecache_508.1.dr, chromecache_277.1.dr	false		high
https://www.cineuserdad.ec/ver-serie/x-men-evolucion/	chromecache_508.1.dr	false		high
https://www.cineuserdad.ec/genero-de-la-pelicula/romance/	chromecache_277.1.dr	false		high
https://www.cineuserdad.ec/fecha-de-lanzamiento/2024/1/page/24/	chromecache_306.1.dr, chromecache_311.1.dr	false		high
https://www.cineuserdad.ec/ver-serie/page/20/?fbclid=IwZXh0bgNhZW0CMTEAAR3xjQap_NumQKogNg73Jhd_6VOLP	chromecache_508.1.dr	false		high
https://www.cineuserdad.ec/genero-de-la-pelicula/familia/	chromecache_277.1.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_347.1.dr, chromecache_529.1.dr	false		high
https://www.cineuserdad.ec/genero-de-la-pelicula/drama/	chromecache_277.1.dr	false		high
https://www.cineuserdad.ec/ver-serie/you/	chromecache_508.1.dr	false		high
https://www.cineuserdad.ec/reparto/andy-kellegher/	chromecache_389.1.dr	false		high
https://www.internalfb.com/intern/invariant/	chromecache_482.1.dr, chromecache_474.1.dr	false		high
https://image.tmdb.org/t/p/w185//1jvCVdlgInyItAUEvvvCakm1Yxz.jpg	chromecache_389.1.dr	false		high
https://play.google.com/store/apps/details?id=com.facebook.orca	chromecache_482.1.dr, chromecache_474.1.dr	false		high
https://www.cineuserdad.ec/release/2021/	chromecache_477.1.dr, chromecache_306.1.dr, chromecache_311.1.dr, chromecache_431.1.dr, chromecache_508.1.dr, chromecache_277.1.dr	false		high
https://www.cineuserdad.ec/ver-pelicula/desencantada-disenchanted-online-gratis-en-cineuserdad/	chromecache_477.1.dr, chromecache_306.1.dr, chromecache_311.1.dr, chromecache_431.1.dr, chromecache_508.1.dr, chromecache_277.1.dr	false		high
https://www.cineuserdad.ec/ver-serie/feed/	chromecache_508.1.dr	false		high
https://www.cineuserdad.ec/ver-pelicula/hachiko-2-siempre-a-tu-lado/	chromecache_389.1.dr	false		high
https://image.tmdb.org/t/p/w342//5NDs12paqvz4Jug3f13fC9XmSVN.jpg	chromecache_508.1.dr	false		high
https://acortalink.me/s.php?i=VTJGc2RHVmtYMThJOUJGckNNN0xVWDZQUldwSnZSaStyOHd1K0tmOXIrdHc4WHdMN1NtcV	chromecache_500.1.dr, chromecache_496.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cineuserdad.ec/release/2020/	chromecache_477.1.dr, chromecache_306.1.dr, chromecache_311.1.dr, chromecache_431.1.dr, chromecache_508.1.dr, chromecache_277.1.dr	false		high
https://www.cineuserdad.ec/release/1969/	chromecache_477.1.dr, chromecache_306.1.dr, chromecache_311.1.dr, chromecache_431.1.dr, chromecache_508.1.dr, chromecache_277.1.dr	false		high
https://www.cineuserdad.ec/ver-serie/producciones-de-ensueno/	chromecache_477.1.dr	false		high
https://image.tmdb.org/t/p/w342//s6rbC03EEhsyljKrmSjJ4mY3Xqn.jpg	chromecache_306.1.dr, chromecache_311.1.dr, chromecache_277.1.dr	false		high
https://betwinner-india.com/hi	chromecache_388.1.dr	false	Avira URL Cloud: malware	unknown
https://image.tmdb.org/t/p/w342//8Nd5QDgdXSlOpS1onh8fVjF4t9i.jpg	chromecache_508.1.dr	false		high
https://cineuserdad.run	chromecache_389.1.dr, chromecache_531.1.dr, chromecache_477.1.dr, chromecache_500.1.dr, chromecache_306.1.dr, chromecache_311.1.dr, chromecache_431.1.dr, chromecache_508.1.dr, chromecache_496.1.dr, chromecache_335.1.dr, chromecache_277.1.dr	false	Avira URL Cloud: safe	unknown
https://image.tmdb.org/t/p/w342//kkFeLiMeih9jgXatztoloOyGSbc.jpg	chromecache_477.1.dr	false		high
https://image.tmdb.org/t/p/w342//mIYN3HP6U2X7ZkDXT8xM47tXvOx.jpg	chromecache_477.1.dr	false		high
https://www.cineuserdad.ec/genero-de-la-pelicula/reality/	chromecache_306.1.dr, chromecache_311.1.dr, chromecache_508.1.dr, chromecache_277.1.dr	false		high
https://www.cineuserdad.ec/wp-content/plugins/wp-cloudflare-page-cache/assets/js/instantpage.min.js?	chromecache_389.1.dr, chromecache_531.1.dr, chromecache_477.1.dr, chromecache_500.1.dr, chromecache_306.1.dr, chromecache_311.1.dr, chromecache_431.1.dr, chromecache_508.1.dr, chromecache_496.1.dr, chromecache_335.1.dr, chromecache_277.1.dr	false		high
https://image.tmdb.org/t/p/w185//qBVqPyNLdjMmQNzZFBZaBY1BDgL.jpg	chromecache_389.1.dr, chromecache_531.1.dr, chromecache_335.1.dr	false		high
https://www.cineuserdad.ec/release/1968/	chromecache_477.1.dr, chromecache_306.1.dr, chromecache_311.1.dr, chromecache_431.1.dr, chromecache_508.1.dr, chromecache_277.1.dr	false		high
https://www.cineuserdad.ec/ver-pelicula/small-things-like-these/	chromecache_277.1.dr	false		high
https://www.cineuserdad.ec/reparto/allison-janney/	chromecache_531.1.dr, chromecache_335.1.dr	false		high
https://www.cineuserdad.ec/ver-pelicula/moana-2/	chromecache_477.1.dr	false		high
https://www.cineuserdad.ec/genero-de-la-pelicula/accion/	chromecache_477.1.dr, chromecache_306.1.dr, chromecache_311.1.dr, chromecache_431.1.dr, chromecache_277.1.dr	false		high
https://filemoon.sx/e/6ebw674w2d8w	chromecache_531.1.dr, chromecache_335.1.dr	false		high
https://www.cineuserdad.ec/genero-de-la-pelicula/action-adventure/	chromecache_477.1.dr, chromecache_508.1.dr	false		high
https://voe.sx/e/ztwz2xmcghle	chromecache_389.1.dr	false		high
https://www.cineuserdad.ec/release/1967/	chromecache_477.1.dr, chromecache_306.1.dr, chromecache_311.1.dr, chromecache_431.1.dr, chromecache_508.1.dr, chromecache_277.1.dr	false		high
https://www.cineuserdad.ec/release/1979/	chromecache_477.1.dr, chromecache_306.1.dr, chromecache_311.1.dr, chromecache_431.1.dr, chromecache_508.1.dr, chromecache_277.1.dr	false		high
https://image.tmdb.org/t/p/w342//bjwHrZKREhL4VbCQP5x3LUPolQ5.jpg	chromecache_477.1.dr	false		high
https://www.cineuserdad.ec/ver-serie/si-las-estrellas-hablaran/	chromecache_508.1.dr	false		high
https://www.cineuserdad.ec/fecha-de-lanzamiento/2024/1/page/20/	chromecache_306.1.dr, chromecache_311.1.dr	false		high
https://image.tmdb.org/t/p/w342//comPtHolYrnbkS8ydWIuuW3P4vY.jpg	chromecache_508.1.dr	false		high
https://www.cineuserdad.ec/fecha-de-lanzamiento/2024/1/page/3/	chromecache_306.1.dr, chromecache_311.1.dr	false		high
https://cineuserdad.lol/#webpage	chromecache_431.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cineuserdad.ec/genero-de-la-pelicula/misterio/	chromecache_508.1.dr	false		high
https://www.cineuserdad.ec/ver-pelicula/el-mago-de-oz/	chromecache_500.1.dr, chromecache_496.1.dr	false		high
https://www.cineuserdad.ec/release/1966/	chromecache_477.1.dr, chromecache_306.1.dr, chromecache_311.1.dr, chromecache_431.1.dr, chromecache_508.1.dr, chromecache_277.1.dr	false		high
https://betwinner.com/al	chromecache_388.1.dr	false		high
https://image.tmdb.org/t/p/w185//s6rbC03EEhsyljKrmSjJ4mY3Xqn.jpg	chromecache_389.1.dr	false		high
https://www.cineuserdad.ec/release/1978/	chromecache_477.1.dr, chromecache_306.1.dr, chromecache_311.1.dr, chromecache_431.1.dr, chromecache_508.1.dr, chromecache_277.1.dr	false		high
https://www.cineuserdad.ec/wp-content/themes/Cineuserdad/assets/css/bundle.css?v=1736482993	chromecache_389.1.dr	false		high
https://betwinner.com/ar	chromecache_388.1.dr	false		high
https://www.cineuserdad.ec/ver-pelicula/mision-imposible-sentencia-mortal-parte-uno/	chromecache_477.1.dr, chromecache_306.1.dr, chromecache_311.1.dr, chromecache_431.1.dr, chromecache_508.1.dr, chromecache_277.1.dr	false		high
https://www.cineuserdad.ec/reparto/aaron-therol/	chromecache_531.1.dr, chromecache_335.1.dr	false		high
https://www.cineuserdad.ec/ver-serie/wynonna-earp/	chromecache_508.1.dr	false		high
https://www.cineuserdad.ec/ver-pelicula/bonhoeffer-pastor-spy-assassin/?download=OU9wNno3VHVmZ0EyeGl	chromecache_389.1.dr	false		high
https://acortalink.me/s.php?i=VTJGc2RHVmtYMTlIY2hJb0JMNWU0WDhvOGV6V3JLSVFad2EyQzZ3WHM2TWdRMTNkOTZnaz	chromecache_531.1.dr, chromecache_335.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cineuserdad.ec/ver-pelicula/mufasa-el-rey-leon/	chromecache_477.1.dr	false		high
https://www.cineuserdad.ec/ver-serie/dexter-pecado-original/	chromecache_508.1.dr	false		high
https://betwinner.com/az	chromecache_388.1.dr	false		high

IP	Domain	Country	ASN	ASN Name	Malicious
172.67.172.5	unknown	United States	13335	CLOUDFLARENETUS	false
169.150.247.35	unknown	United States	2711	SPIRITTEL-ASUS	false
104.17.54.7	suphelper.com	United States	13335	CLOUDFLARENETUS	false
213.183.62.123	trstx.org	Lithuania	56630	MELBICOM-EU-ASMelbikomasUABNL	false
151.101.193.229	unknown	United States	54113	FASTLYUS	false
50.7.24.35	amd-cdn-1.custacin-crowlexing-i-283.site	United States	174	COGENT-174US	false
104.21.79.241	dj2550.com	United States	13335	CLOUDFLARENETUS	false
87.250.250.119	mc.yandex.ru	Russian Federation	13238	YANDEXRU	false
213.183.38.31	betwinner.com	Lithuania	56630	MELBICOM-EU-ASMelbikomasUABNL	false
45.54.49.1	rpt.cedexis.com	United States	63911	NETACTUATE-AS-APNetActuateIncUS	false
87.250.251.119	unknown	Russian Federation	13238	YANDEXRU	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
79.127.216.111	tmdb-image-prod.b-cdn.net	Czech Republic	9080	GINCzechRepublicEUCZ	false
45.54.49.5	radar.cedexis.com	United States	63911	NETACTUATE-AS-APNetActuateIncUS	false
216.239.32.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
157.240.0.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
185.230.245.154	servers-sg2.cdnsfree.com	Lebanon	49037	PG19RU	false
185.59.220.198	unknown	United Kingdom	60068	CDN77GB	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
77.88.21.119	unknown	Russian Federation	13238	YANDEXRU	false
172.217.16.194	td.doubleclick.net	United States	15169	GOOGLEUS	false
195.181.175.41	unknown	United Kingdom	60068	CDN77GB	false
169.150.255.184	1548164934.rsc.cdn77.org	United States	2711	SPIRITTEL-ASUS	false
195.181.175.40	unknown	United Kingdom	60068	CDN77GB	false
74.117.182.84	aj2550.bid	United States	40824	WZCOM-US	false
157.240.0.6	unknown	United States	32934	FACEBOOKUS	false
104.225.98.129	unknown	United States	36236	NETACTUATEUS	false
151.101.1.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
104.225.98.131	i2-hjtcsbalpqklewyeaqlwejtlyxmjxx.init.cedexis-radar.net	United States	36236	NETACTUATEUS	false
142.251.168.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
157.240.251.9	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
138.199.37.225	unknown	European Union	51964	ORANGE-BUSINESS-SERVICES-IPSN-ASNFR	false
157.240.253.1	unknown	United States	32934	FACEBOOKUS	false
188.114.96.3	www.cineuserdad.ec	European Union	13335	CLOUDFLARENETUS	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
92.223.124.62	cl-glbb6db8e4.gcdn.co	Austria	199524	GCOREAT	false

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1587301
Start date and time:	2025-01-10 05:21:34 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 49s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://www.cineuserdad.ec
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@24/550@121/38
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Input	Output
URL: https://www.cineuserdad.ec Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": true, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://www.cineuserdad.ec
URL: https://www.cineuserdad.ec/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Aade a tus favoritos el dominio \"cineuserdad.ec\". Es crucial que lo recuerdes, ya que existen sitios falsos que intentan robar datos personales, como tarjetas de crdito. Asegrate de escribir \"cineuserdad.ec\" directamente para entrar de manera segura.", "prominent_button_name": "PRESIONA CTRL+D PARA GUARDAR EN FAVORITOS", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.cineuserdad.ec/ Model: Joe Sandbox AI	{ "brands": [ "Cineuserdad.ec" ] }
	{ "brands": [ "Cineuserdad.ec" ] }
URL: https://betwinner.com/en Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "BET, SPIN, WIN - REPEAT!", "prominent_button_name": "TAKE PART", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://betwinner.com/en Model: Joe Sandbox AI	{ "brands": [ "Betwinner" ] }
	{ "brands": [ "Betwinner" ] }
URL: https://betwinner.com/en/block Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://betwinner.com/en/block Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://betwinner.com/en/block Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://betwinner.com/en/block Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://www.cineuserdad.ec/fecha-de-lanzamiento/2024/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.cineuserdad.ec/fecha-de-lanzamiento/2024/ Model: Joe Sandbox AI	{ "brands": [ "Cineuserdad" ] }
	{ "brands": [ "Cineuserdad" ] }
URL: https://www.cineuserdad.ec/fecha-de-lanzamiento/2024/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Aade a tus favoritos el dominio \"cineuserdad.ec\". Es crucial que lo recuerdes, ya que existen sitios falsos que intentan robar datos personales, como tarjetas de crdito. Asegrate de escribir \"cineuserdad.ec\" directamente para entrar de manera segura.", "prominent_button_name": "PRESIONA CTRL+D PARA GUARDAR EN FAVORITOS", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.cineuserdad.ec/fecha-de-lanzamiento/2024/ Model: Joe Sandbox AI	{ "brands": [ "Cineuserdad.ec" ] }
	{ "brands": [ "Cineuserdad.ec" ] }
URL: https://www.cineuserdad.ec/fecha-de-lanzamiento/2024/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.cineuserdad.ec/ver-pelicula/flow/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.cineuserdad.ec/fecha-de-lanzamiento/2024/ Model: Joe Sandbox AI	{ "brands": [ "Cineuserdad" ] }
	{ "brands": [ "Cineuserdad" ] }
URL: https://www.cineuserdad.ec/ver-pelicula/flow/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.cineuserdad.ec/ver-pelicula/flow/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.cineuserdad.ec/ver-pelicula/flow/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.cineuserdad.ec/ver-pelicula/flow/ Model: Joe Sandbox AI	{ "brands": [ "Cine userdad" ] }
	{ "brands": [ "Cine userdad" ] }
URL: https://www.cineuserdad.ec/ver-pelicula/flow/ Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://www.cineuserdad.ec/ver-pelicula/flow/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.cineuserdad.ec/ver-pelicula/flow/ Model: Joe Sandbox AI	{ "brands": [ "Goodstream", "Hiswish", "Voe", "Filemoon", "Streamtape", "Doodstream", "Trailer", "uTorrent", "Mega", "Megaup", "1fichier", "Mediafire" ] }

URL: https://www.cineuserdad.ec/ver-pelicula/flow/ Model: Joe Sandbox AI	{ "brands": [ "Bet Winner", "Obtener Bono" ] }
	{ "brands": [ "Bet Winner", "Obtener Bono" ] }
URL: https://www.cineuserdad.ec/ver-pelicula/flow/ Model: Joe Sandbox AI	{ "brands": [ "Bet Winner", "Obtener Bono" ] }
	{ "brands": [ "Bet Winner", "Obtener Bono" ] }
URL: https://www.cineuserdad.ec/ver-pelicula/flow/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Click Aqu", "prominent_button_name": "Click Aqu", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.cineuserdad.ec/ver-pelicula/flow/ Model: Joe Sandbox AI	{ "brands": [ "Bet Winner", "Obtener Bono" ] }
	{ "brands": [ "Bet Winner", "Obtener Bono" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 03:22:03 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9907785282006074
Encrypted:	false
SSDEEP:	48:82d6jTeys4fHNidAKZdA1FehwiZUklqehgy+3:87jTh/3y
MD5:	D51265B708A2E073F6F2568CD39A5F3D
SHA1:	8CCB6CA10B39B2D69FF564231F7D6C393D88038B
SHA-256:	9C7812EF4A0403A078B8ED6C5EBFF8D8525A8A761052862818322F760F470455
SHA-512:	5FFA3A8BEE0EBC2319A3326ECFF689BC9D3DA53429F50C39A51A94ED6F38E5002966905261E424AE0CC621C583BD0BB8CB5EB7B6BC3514630C04A1F1B62360DE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....T .3.c..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IZ."....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ."....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VZ."....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VZ."..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VZ."...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............4.\|.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 10, 2025 05:22:03.250835896 CET	192.168.2.16	1.1.1.1	0x2ec1	Standard query (0)	www.cineuserdad.ec	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:03.251230001 CET	192.168.2.16	1.1.1.1	0x1562	Standard query (0)	www.cineuserdad.ec	65	IN (0x0001)	false
Jan 10, 2025 05:22:03.898158073 CET	192.168.2.16	1.1.1.1	0x1e67	Standard query (0)	cdn.ww2.cineuserdad.link	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:03.898351908 CET	192.168.2.16	1.1.1.1	0xefa7	Standard query (0)	cdn.ww2.cineuserdad.link	65	IN (0x0001)	false
Jan 10, 2025 05:22:03.898590088 CET	192.168.2.16	1.1.1.1	0x140a	Standard query (0)	image.tmdb.org	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:03.898755074 CET	192.168.2.16	1.1.1.1	0x7280	Standard query (0)	image.tmdb.org	65	IN (0x0001)	false
Jan 10, 2025 05:22:03.918617964 CET	192.168.2.16	1.1.1.1	0x3d78	Standard query (0)	cdn.ww2.cineuserdad.link	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:04.080312967 CET	192.168.2.16	1.1.1.1	0x4d17	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:04.080459118 CET	192.168.2.16	1.1.1.1	0x101e	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Jan 10, 2025 05:22:04.082298994 CET	192.168.2.16	1.1.1.1	0xc816	Standard query (0)	cdn.dj2550.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:04.083651066 CET	192.168.2.16	1.1.1.1	0xba67	Standard query (0)	cdn.dj2550.com	65	IN (0x0001)	false
Jan 10, 2025 05:22:04.701781034 CET	192.168.2.16	1.1.1.1	0x1543	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:04.701927900 CET	192.168.2.16	1.1.1.1	0x5c48	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Jan 10, 2025 05:22:04.712358952 CET	192.168.2.16	1.1.1.1	0x70b1	Standard query (0)	www.cineuserdad.ec	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:04.712501049 CET	192.168.2.16	1.1.1.1	0x6294	Standard query (0)	www.cineuserdad.ec	65	IN (0x0001)	false
Jan 10, 2025 05:22:05.081748009 CET	192.168.2.16	1.1.1.1	0xe8b1	Standard query (0)	click.ggpickaff.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:05.081866026 CET	192.168.2.16	1.1.1.1	0x2a76	Standard query (0)	click.ggpickaff.com	65	IN (0x0001)	false
Jan 10, 2025 05:22:05.136039972 CET	192.168.2.16	1.1.1.1	0xdc86	Standard query (0)	image.tmdb.org	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:05.136178017 CET	192.168.2.16	1.1.1.1	0x62de	Standard query (0)	image.tmdb.org	65	IN (0x0001)	false
Jan 10, 2025 05:22:05.165767908 CET	192.168.2.16	1.1.1.1	0x8998	Standard query (0)	cdn.dj2550.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:05.165916920 CET	192.168.2.16	1.1.1.1	0x1dfc	Standard query (0)	cdn.dj2550.com	65	IN (0x0001)	false
Jan 10, 2025 05:22:05.719647884 CET	192.168.2.16	1.1.1.1	0x6f3d	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:05.719799995 CET	192.168.2.16	1.1.1.1	0xf839	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Jan 10, 2025 05:22:05.730983973 CET	192.168.2.16	1.1.1.1	0x369	Standard query (0)	dj2550.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:05.732057095 CET	192.168.2.16	1.1.1.1	0x6f7c	Standard query (0)	dj2550.com	65	IN (0x0001)	false
Jan 10, 2025 05:22:06.726412058 CET	192.168.2.16	1.1.1.1	0xbc21	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:06.726574898 CET	192.168.2.16	1.1.1.1	0x5ea6	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Jan 10, 2025 05:22:07.148083925 CET	192.168.2.16	1.1.1.1	0x3b21	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:07.148190022 CET	192.168.2.16	1.1.1.1	0x79d7	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 10, 2025 05:22:07.328958035 CET	192.168.2.16	1.1.1.1	0x4b87	Standard query (0)	dj2550.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:07.329071999 CET	192.168.2.16	1.1.1.1	0x9634	Standard query (0)	dj2550.com	65	IN (0x0001)	false
Jan 10, 2025 05:22:07.370639086 CET	192.168.2.16	1.1.1.1	0xe7ea	Standard query (0)	betwinner.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:07.371309996 CET	192.168.2.16	1.1.1.1	0xb512	Standard query (0)	betwinner.com	65	IN (0x0001)	false
Jan 10, 2025 05:22:21.909251928 CET	192.168.2.16	1.1.1.1	0xfd63	Standard query (0)	betwinner.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:21.909252882 CET	192.168.2.16	1.1.1.1	0x91af	Standard query (0)	betwinner.com	65	IN (0x0001)	false
Jan 10, 2025 05:22:23.292992115 CET	192.168.2.16	1.1.1.1	0xc76f	Standard query (0)	radar.cedexis.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:23.293127060 CET	192.168.2.16	1.1.1.1	0x535f	Standard query (0)	radar.cedexis.com	65	IN (0x0001)	false
Jan 10, 2025 05:22:23.302117109 CET	192.168.2.16	1.1.1.1	0xa600	Standard query (0)	suphelper.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:23.302247047 CET	192.168.2.16	1.1.1.1	0xb47b	Standard query (0)	suphelper.com	65	IN (0x0001)	false
Jan 10, 2025 05:22:30.862402916 CET	192.168.2.16	1.1.1.1	0x2f03	Standard query (0)	v3.traincdn.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:30.862581968 CET	192.168.2.16	1.1.1.1	0x56c3	Standard query (0)	v3.traincdn.com	65	IN (0x0001)	false
Jan 10, 2025 05:22:31.103226900 CET	192.168.2.16	1.1.1.1	0x2c83	Standard query (0)	betwinner.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:31.103405952 CET	192.168.2.16	1.1.1.1	0xb15d	Standard query (0)	betwinner.com	65	IN (0x0001)	false
Jan 10, 2025 05:22:31.914283037 CET	192.168.2.16	1.1.1.1	0xa69a	Standard query (0)	v3.traincdn.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:31.914483070 CET	192.168.2.16	1.1.1.1	0x7186	Standard query (0)	v3.traincdn.com	65	IN (0x0001)	false
Jan 10, 2025 05:22:55.503416061 CET	192.168.2.16	1.1.1.1	0xe56	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:55.503644943 CET	192.168.2.16	1.1.1.1	0x32b6	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Jan 10, 2025 05:22:55.504431963 CET	192.168.2.16	1.1.1.1	0x3af1	Standard query (0)	mc.yandex.ru	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:55.504568100 CET	192.168.2.16	1.1.1.1	0x3d9c	Standard query (0)	mc.yandex.ru	65	IN (0x0001)	false
Jan 10, 2025 05:22:56.407145977 CET	192.168.2.16	1.1.1.1	0x4ead	Standard query (0)	radar.cedexis.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:56.407296896 CET	192.168.2.16	1.1.1.1	0x2072	Standard query (0)	radar.cedexis.com	65	IN (0x0001)	false
Jan 10, 2025 05:22:56.409651041 CET	192.168.2.16	1.1.1.1	0x1841	Standard query (0)	i2-hjtcsbalpqklewyeaqlwejtlyxmjxx.init.cedexis-radar.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:56.409887075 CET	192.168.2.16	1.1.1.1	0x72ff	Standard query (0)	i2-hjtcsbalpqklewyeaqlwejtlyxmjxx.init.cedexis-radar.net	65	IN (0x0001)	false
Jan 10, 2025 05:22:57.312647104 CET	192.168.2.16	1.1.1.1	0x8b8b	Standard query (0)	mc.yandex.ru	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:57.312796116 CET	192.168.2.16	1.1.1.1	0x1beb	Standard query (0)	mc.yandex.ru	65	IN (0x0001)	false
Jan 10, 2025 05:22:57.326966047 CET	192.168.2.16	1.1.1.1	0x376c	Standard query (0)	i2-hjtcsbalpqklewyeaqlwejtlyxmjxx.init.cedexis-radar.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:57.327083111 CET	192.168.2.16	1.1.1.1	0xc3f5	Standard query (0)	i2-hjtcsbalpqklewyeaqlwejtlyxmjxx.init.cedexis-radar.net	65	IN (0x0001)	false
Jan 10, 2025 05:22:57.477247000 CET	192.168.2.16	1.1.1.1	0x9b7	Standard query (0)	rpt.cedexis.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:57.477426052 CET	192.168.2.16	1.1.1.1	0x5b57	Standard query (0)	rpt.cedexis.com	65	IN (0x0001)	false
Jan 10, 2025 05:22:57.501517057 CET	192.168.2.16	1.1.1.1	0xba10	Standard query (0)	mc.yandex.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:57.501919031 CET	192.168.2.16	1.1.1.1	0x6f32	Standard query (0)	mc.yandex.com	65	IN (0x0001)	false
Jan 10, 2025 05:22:58.075697899 CET	192.168.2.16	1.1.1.1	0xd995	Standard query (0)	rpt.cedexis.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:58.076026917 CET	192.168.2.16	1.1.1.1	0xb52e	Standard query (0)	rpt.cedexis.com	65	IN (0x0001)	false
Jan 10, 2025 05:22:58.295392990 CET	192.168.2.16	1.1.1.1	0xb1a7	Standard query (0)	mc.yandex.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:58.295530081 CET	192.168.2.16	1.1.1.1	0xf207	Standard query (0)	mc.yandex.com	65	IN (0x0001)	false
Jan 10, 2025 05:22:58.535892010 CET	192.168.2.16	1.1.1.1	0x1ed1	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:58.536031008 CET	192.168.2.16	1.1.1.1	0x49ca	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Jan 10, 2025 05:22:59.470980883 CET	192.168.2.16	1.1.1.1	0x67f	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:59.471115112 CET	192.168.2.16	1.1.1.1	0x49c	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Jan 10, 2025 05:22:59.893959999 CET	192.168.2.16	1.1.1.1	0x6693	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:59.894937992 CET	192.168.2.16	1.1.1.1	0xab4c	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Jan 10, 2025 05:22:59.902883053 CET	192.168.2.16	1.1.1.1	0xa496	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:22:59.903172970 CET	192.168.2.16	1.1.1.1	0x45ba	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Jan 10, 2025 05:23:00.004899025 CET	192.168.2.16	1.1.1.1	0xdae2	Standard query (0)	mc.yandex.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:23:00.005070925 CET	192.168.2.16	1.1.1.1	0x9a7e	Standard query (0)	mc.yandex.com	65	IN (0x0001)	false
Jan 10, 2025 05:23:00.542664051 CET	192.168.2.16	1.1.1.1	0x95bb	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:23:00.542785883 CET	192.168.2.16	1.1.1.1	0xfaec	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Jan 10, 2025 05:23:06.415141106 CET	192.168.2.16	1.1.1.1	0xe959	Standard query (0)	servers-sg2.cdnsfree.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:23:06.415142059 CET	192.168.2.16	1.1.1.1	0x1541	Standard query (0)	servers-sg2.cdnsfree.com	65	IN (0x0001)	false
Jan 10, 2025 05:23:19.775917053 CET	192.168.2.16	1.1.1.1	0x19a5	Standard query (0)	cineuserdad.lol	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:23:19.776107073 CET	192.168.2.16	1.1.1.1	0x2f12	Standard query (0)	cineuserdad.lol	65	IN (0x0001)	false
Jan 10, 2025 05:23:22.260001898 CET	192.168.2.16	1.1.1.1	0xc86a	Standard query (0)	cdn.ww2.cineuserdad.link	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:23:22.260113955 CET	192.168.2.16	1.1.1.1	0xb552	Standard query (0)	cdn.ww2.cineuserdad.link	65	IN (0x0001)	false
Jan 10, 2025 05:23:22.260554075 CET	192.168.2.16	1.1.1.1	0xcaef	Standard query (0)	cdn.dj2550.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:23:22.260761023 CET	192.168.2.16	1.1.1.1	0xfd0c	Standard query (0)	cdn.dj2550.com	65	IN (0x0001)	false
Jan 10, 2025 05:23:22.261401892 CET	192.168.2.16	1.1.1.1	0x2018	Standard query (0)	image.tmdb.org	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:23:22.261586905 CET	192.168.2.16	1.1.1.1	0xa015	Standard query (0)	image.tmdb.org	65	IN (0x0001)	false
Jan 10, 2025 05:23:22.275509119 CET	192.168.2.16	1.1.1.1	0xd21f	Standard query (0)	cdn.ww2.cineuserdad.link	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:23:23.342833042 CET	192.168.2.16	1.1.1.1	0xd48f	Standard query (0)	cdn.dj2550.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:23:23.343020916 CET	192.168.2.16	1.1.1.1	0x8158	Standard query (0)	cdn.dj2550.com	65	IN (0x0001)	false
Jan 10, 2025 05:23:24.351218939 CET	192.168.2.16	1.1.1.1	0x5f40	Standard query (0)	image.tmdb.org	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:23:24.351453066 CET	192.168.2.16	1.1.1.1	0xb26c	Standard query (0)	image.tmdb.org	65	IN (0x0001)	false
Jan 10, 2025 05:23:24.794893980 CET	192.168.2.16	1.1.1.1	0x964f	Standard query (0)	cdn.ww2.cineuserdad.link	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:23:24.794996977 CET	192.168.2.16	1.1.1.1	0x9f57	Standard query (0)	cdn.ww2.cineuserdad.link	65	IN (0x0001)	false
Jan 10, 2025 05:23:28.765953064 CET	192.168.2.16	1.1.1.1	0x917a	Standard query (0)	cdn.ww2.cineuserdad.link	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:23:28.766062021 CET	192.168.2.16	1.1.1.1	0x11f7	Standard query (0)	cdn.ww2.cineuserdad.link	65	IN (0x0001)	false
Jan 10, 2025 05:23:28.779825926 CET	192.168.2.16	1.1.1.1	0xbad0	Standard query (0)	cdn.ww2.cineuserdad.link	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:23:29.885740995 CET	192.168.2.16	1.1.1.1	0xdfd4	Standard query (0)	trstx.org	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:23:29.885869026 CET	192.168.2.16	1.1.1.1	0x597b	Standard query (0)	trstx.org	65	IN (0x0001)	false
Jan 10, 2025 05:23:32.770075083 CET	192.168.2.16	1.1.1.1	0xa2b3	Standard query (0)	trstx.org	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:23:32.770234108 CET	192.168.2.16	1.1.1.1	0xebf0	Standard query (0)	trstx.org	65	IN (0x0001)	false
Jan 10, 2025 05:23:32.775890112 CET	192.168.2.16	1.1.1.1	0x26bc	Standard query (0)	aj2550.bid	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:23:32.776005030 CET	192.168.2.16	1.1.1.1	0x765f	Standard query (0)	aj2550.bid	65	IN (0x0001)	false
Jan 10, 2025 05:23:33.511924982 CET	192.168.2.16	1.1.1.1	0xadf	Standard query (0)	aj2550.bid	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:23:33.512190104 CET	192.168.2.16	1.1.1.1	0x195	Standard query (0)	aj2550.bid	65	IN (0x0001)	false
Jan 10, 2025 05:23:33.521013021 CET	192.168.2.16	1.1.1.1	0xecc5	Standard query (0)	amd-cdn-1.ffb7df5a878b59e42e257c042f54bed2.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:23:33.521152020 CET	192.168.2.16	1.1.1.1	0x2cf8	Standard query (0)	amd-cdn-1.ffb7df5a878b59e42e257c042f54bed2.com	65	IN (0x0001)	false
Jan 10, 2025 05:23:33.909344912 CET	192.168.2.16	1.1.1.1	0xb1fe	Standard query (0)	amd-cdn-1.custacin-crowlexing-i-283.site	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:23:33.909346104 CET	192.168.2.16	1.1.1.1	0x8421	Standard query (0)	amd-cdn-1.custacin-crowlexing-i-283.site	65	IN (0x0001)	false
Jan 10, 2025 05:23:35.028707027 CET	192.168.2.16	1.1.1.1	0x52b	Standard query (0)	amd-cdn-1.custacin-crowlexing-i-283.site	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:23:35.028903008 CET	192.168.2.16	1.1.1.1	0x5e94	Standard query (0)	amd-cdn-1.custacin-crowlexing-i-283.site	65	IN (0x0001)	false
Jan 10, 2025 05:23:41.998936892 CET	192.168.2.16	1.1.1.1	0x758f	Standard query (0)	cdn.ww2.cineuserdad.link	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:23:50.912580013 CET	192.168.2.16	1.1.1.1	0x7bd8	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:23:50.912719011 CET	192.168.2.16	1.1.1.1	0x5d8d	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Jan 10, 2025 05:23:50.915189028 CET	192.168.2.16	1.1.1.1	0xdb04	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:23:50.915301085 CET	192.168.2.16	1.1.1.1	0x4f94	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Jan 10, 2025 05:23:50.955836058 CET	192.168.2.16	1.1.1.1	0xac11	Standard query (0)	cdn.ww2.cineuserdad.link	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:23:50.956022024 CET	192.168.2.16	1.1.1.1	0x5f44	Standard query (0)	cdn.ww2.cineuserdad.link	65	IN (0x0001)	false
Jan 10, 2025 05:23:51.009790897 CET	192.168.2.16	1.1.1.1	0x2e47	Standard query (0)	cdn.ww2.cineuserdad.link	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:23:57.362596989 CET	192.168.2.16	1.1.1.1	0x4395	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 05:23:57.362924099 CET	192.168.2.16	1.1.1.1	0x718c	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2025-01-10 04:22:03 UTC	661	OUT	GET / HTTP/1.1 Host: www.cineuserdad.ec Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 04:22:03 UTC	1188	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 04:22:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-dns-prefetch-control: on link: <https://www.cineuserdad.ec/wp-json/>; rel="https://api.w.org/" Cache-Control: s-maxage=31536000, max-age=60 x-wp-spc-disk-cache: DISABLED x-wp-cf-super-cache-active: 1 x-wp-cf-super-cache-cache-control: s-maxage=31536000, max-age=60 x-wp-cf-super-cache-cookies-bypass: swfpc-feature-not-enabled x-litespeed-cache: hit vary: Accept-Encoding CF-Cache-Status: HIT Age: 1131 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eRC8VQ0lK5GMw8aOp86SS2i0XVwd5BwdTxejRB61it3KqMg4%2FVh6gxVV9pVI48QyRM%2BNiRHKvguge%2Bjax86kR%2BjuQ3A1pdYFJvb3NYFg73jYXGgAS%2F1rzvM8iFaj3pN%2FZ9pDJQM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff9e241dea443eb-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1584&min_rtt=1572&rtt_var=614&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1239&delivery_rate=1748502&cwnd=183&unsent_bytes=0&cid=dc4108072ae4b26d&ts=146&x=0"
2025-01-10 04:22:03 UTC	181	IN	Data Raw: 37 62 64 33 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d Data Ascii: 7bd3<!doctype html><html lang="en-US"><head><meta charset="UTF-8"><meta charset="UTF-8" /><meta name="apple-mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-
2025-01-10 04:22:03 UTC	1369	IN	Data Raw: 73 74 61 74 75 73 2d 62 61 72 2d 73 74 79 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 62 6c 61 63 6b 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 66 66 66 66 66 66 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 Data Ascii: status-bar-style" content="black"><meta name="mobile-web-app-capable" content="yes"><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><meta name="theme-color" content="#ffffff"><meta name='robots' content='index, follow
2025-01-10 04:22:03 UTC	1369	IN	Data Raw: 65 76 69 65 77 3a 2d 31 27 20 2f 3e 3c 74 69 74 6c 65 3e 43 49 4e 45 43 41 4c 49 44 41 44 20 4f 46 49 43 49 41 4c 20 2d 20 50 65 6c c3 ad 63 75 6c 61 73 20 6f 6e 6c 69 6e 65 20 79 20 44 65 73 63 61 72 67 61 20 47 72 61 74 69 73 20 65 6e 20 48 44 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 56 65 72 20 50 65 6c c3 ad 63 75 6c 61 73 20 4f 6e 6c 69 6e 65 20 65 6e 20 43 49 4e 45 43 41 4c 49 44 41 44 20 64 69 73 66 72 75 74 61 20 64 65 20 6c 61 73 20 6d 65 6a 6f 72 65 73 20 70 65 6c c3 ad 63 75 6c 61 73 20 63 6f 6d 70 6c 65 74 61 73 20 65 6e 20 6c 61 74 69 6e 6f 2e 20 4d 69 72 61 20 50 65 6c c3 ad 63 75 6c 61 73 20 4f 6e 6c 69 6e 65 20 67 72 61 74 69 73 20 65 6e 20 63 61 73 74 65 Data Ascii: eview:-1' /><title>CINEuserDAD OFICIAL - Pelculas online y Descarga Gratis en HD</title><meta name="description" content="Ver Pelculas Online en CINEuserDAD disfruta de las mejores pelculas completas en latino. Mira Pelculas Online gratis en caste
2025-01-10 04:22:03 UTC	1369	IN	Data Raw: 65 74 63 68 27 20 68 72 65 66 3d 27 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 27 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 e1 90 88 20 43 69 6e 65 63 61 6c 69 64 61 64 20 7c 20 50 65 6c c3 ad 63 75 6c 61 73 20 4f 6e 6c 69 6e 65 20 79 20 44 65 73 63 61 72 67 61 20 47 72 61 74 69 73 20 65 6e 20 48 44 20 26 72 61 71 75 6f 3b 20 46 65 65 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 69 6e 65 63 61 6c 69 64 61 64 2e 65 63 2f 66 65 65 64 2f 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 Data Ascii: etch' href='//fonts.googleapis.com' /><link rel="alternate" type="application/rss+xml" title=" Cineuserdad \| Pelculas Online y Descarga Gratis en HD » Feed" href="https://www.cineuserdad.ec/feed/" /><link rel="alternate" type="application/rss+x
2025-01-10 04:22:03 UTC	1369	IN	Data Raw: 61 6d 62 65 72 3a 20 23 66 63 62 39 30 30 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 3a 20 23 37 62 64 63 62 35 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 3a 20 23 30 30 64 30 38 34 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 63 79 61 6e 2d 62 6c 75 65 3a 20 23 38 65 64 31 66 63 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 3a 20 23 30 36 39 33 65 33 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 3a 20 23 39 62 35 31 65 30 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 Data Ascii: amber: #fcb900;--wp--preset--color--light-green-cyan: #7bdcb5;--wp--preset--color--vivid-green-cyan: #00d084;--wp--preset--color--pale-cyan-blue: #8ed1fc;--wp--preset--color--vivid-cyan-blue: #0693e3;--wp--preset--color--vivid-purple: #9b51e0;--wp--preset
2025-01-10 04:22:03 UTC	1369	IN	Data Raw: 72 67 62 28 32 35 35 2c 32 30 33 2c 31 31 32 29 20 30 25 2c 72 67 62 28 31 39 39 2c 38 31 2c 31 39 32 29 20 35 30 25 2c 72 67 62 28 36 35 2c 38 38 2c 32 30 38 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 70 61 6c 65 2d 6f 63 65 61 6e 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 35 35 2c 32 34 35 2c 32 30 33 29 20 30 25 2c 72 67 62 28 31 38 32 2c 32 32 37 2c 32 31 32 29 20 35 30 25 2c 72 67 62 28 35 31 2c 31 36 37 2c 31 38 31 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 65 6c 65 63 74 72 69 63 2d 67 72 61 73 73 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 30 32 2c 32 Data Ascii: rgb(255,203,112) 0%,rgb(199,81,192) 50%,rgb(65,88,208) 100%);--wp--preset--gradient--pale-ocean: linear-gradient(135deg,rgb(255,245,203) 0%,rgb(182,227,212) 50%,rgb(51,167,181) 100%);--wp--preset--gradient--electric-grass: linear-gradient(135deg,rgb(202,2
2025-01-10 04:22:03 UTC	1369	IN	Data Raw: 64 20 3e 20 3a 69 73 28 2a 2c 20 64 69 76 29 7b 6d 61 72 67 69 6e 3a 20 30 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 69 73 2d 6c 61 79 6f 75 74 2d 66 6c 65 78 29 7b 67 61 70 3a 20 32 65 6d 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 69 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 29 7b 67 61 70 3a 20 32 65 6d 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 74 65 6d 70 6c 61 74 65 2e 69 73 2d 6c 61 79 6f 75 74 2d 66 6c 65 78 29 7b 67 61 70 3a 20 31 2e 32 35 65 6d 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 74 65 6d 70 6c 61 74 65 2e 69 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 29 7b 67 61 70 3a 20 31 2e 32 35 65 6d 3b 7d 2e 68 61 73 2d 62 Data Ascii: d > :is(*, div){margin: 0;}:where(.wp-block-columns.is-layout-flex){gap: 2em;}:where(.wp-block-columns.is-layout-grid){gap: 2em;}:where(.wp-block-post-template.is-layout-flex){gap: 1.25em;}:where(.wp-block-post-template.is-layout-grid){gap: 1.25em;}.has-b
2025-01-10 04:22:03 UTC	1369	IN	Data Raw: 72 61 79 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 77 68 69 74 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 70 69 6e 6b 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c Data Ascii: ray-background-color{background-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-background-color{background-color: var(--wp--preset--color--white) !important;}.has-pale-pink-background-color{background-color: var(--wp--preset--col
2025-01-10 04:22:03 UTC	1369	IN	Data Raw: 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 70 69 6e 6b 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 72 65 64 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 72 65 64 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d Data Ascii: er-color{border-color: var(--wp--preset--color--white) !important;}.has-pale-pink-border-color{border-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-border-color{border-color: var(--wp--preset--color--vivid-red) !important;}.has-lum
2025-01-10 04:22:03 UTC	1369	IN	Data Raw: 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 74 6f 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 74 6f 2d 76 69 76 69 64 2d 72 65 64 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 74 6f 2d 76 69 76 69 64 2d 72 65 64 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 65 72 79 2d 6c 69 67 68 74 2d 67 72 61 79 2d 74 6f 2d 63 79 61 6e 2d 62 6c 75 69 Data Ascii: set--gradient--luminous-vivid-amber-to-luminous-vivid-orange) !important;}.has-luminous-vivid-orange-to-vivid-red-gradient-background{background: var(--wp--preset--gradient--luminous-vivid-orange-to-vivid-red) !important;}.has-very-light-gray-to-cyan-blui

Timestamp	Bytes transferred	Direction	Data
2025-01-10 04:22:03 UTC	606	OUT	GET /wp-content/litespeed/css/e9d9037fef01407aa187ff8d561d2dda.css?ver=b27a0 HTTP/1.1 Host: www.cineuserdad.ec Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cineuserdad.ec/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 04:22:03 UTC	935	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 04:22:03 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=604800 expires: Fri, 17 Jan 2025 04:02:09 GMT last-modified: Fri, 10 Jan 2025 04:02:09 GMT vary: Accept-Encoding CF-Cache-Status: HIT Age: 1130 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hkk2OJy4E8Kts%2FFELS1Ik%2BCMYDRJx7BZG2cPlfwbtvHz9SHH1miVJuMfj2mo%2BhUhdWKRNcXEwv%2FTayofQYE77kxH5lU0grMtbEZoPwGh47MtMDDA7bl1eX0hHGz3EVNE%2BXXS834%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff9e2429c6643c9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1767&min_rtt=1767&rtt_var=663&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1184&delivery_rate=1650650&cwnd=232&unsent_bytes=0&cid=ea81d460da5bc776&ts=263&x=0"
2025-01-10 04:22:03 UTC	434	IN	Data Raw: 37 63 64 30 0d 0a 2e 63 6c 65 61 72 2c 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 63 6c 65 61 72 2c 2e 6d 6f 64 75 6c 65 20 2e 63 6f 6e 74 65 6e 74 20 2e 69 74 65 6d 73 20 2e 69 74 65 6d 3a 68 6f 76 65 72 3e 2e 64 74 69 6e 66 6f 2c 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 64 65 74 61 69 6c 73 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 6d 65 6e 75 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 2c 6f 6c 2c 75 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 61 2c 61 62 62 72 2c 61 63 72 6f 6e 79 6d 2c 61 64 64 72 65 73 73 2c 61 70 70 6c 65 74 2c 61 72 74 69 63 6c 65 2c Data Ascii: 7cd0.clear,body{margin:0;padding:0}.clear,.module .content .items .item:hover>.dtinfo,article,aside,details,figcaption,figure,footer,header,hgroup,menu,nav,section{display:block}.post-comments,ol,ul{list-style:none}a,abbr,acronym,address,applet,article,
2025-01-10 04:22:03 UTC	1369	IN	Data Raw: 2c 69 2c 69 66 72 61 6d 65 2c 69 6d 67 2c 69 6e 73 2c 6b 62 64 2c 6c 61 62 65 6c 2c 6c 65 67 65 6e 64 2c 6c 69 2c 6d 61 72 6b 2c 6d 65 6e 75 2c 6e 61 76 2c 6f 62 6a 65 63 74 2c 6f 6c 2c 6f 75 74 70 75 74 2c 70 2c 70 72 65 2c 71 2c 72 75 62 79 2c 73 2c 73 61 6d 70 2c 73 65 63 74 69 6f 6e 2c 73 6d 61 6c 6c 2c 73 70 61 6e 2c 73 74 72 69 6b 65 2c 73 74 72 6f 6e 67 2c 73 75 62 2c 73 75 6d 6d 61 72 79 2c 73 75 70 2c 74 61 62 6c 65 2c 74 62 6f 64 79 2c 74 64 2c 74 66 6f 6f 74 2c 74 68 2c 74 68 65 61 64 2c 74 69 6d 65 2c 74 72 2c 74 74 2c 75 2c 75 6c 2c 76 61 72 2c 76 69 64 65 6f 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 Data Ascii: ,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,object,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{margin:0;padding:0;border:0;font-size:100%;vertical-align:bas
2025-01-10 04:22:03 UTC	1369	IN	Data Raw: 68 3a 61 75 74 6f 7d 2e 77 70 2d 63 61 70 74 69 6f 6e 20 70 2e 77 70 2d 63 61 70 74 69 6f 6e 2d 74 65 78 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 37 70 78 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 20 34 70 78 20 35 70 78 7d 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 74 65 78 74 7b 63 6c 69 70 3a 72 65 63 74 28 31 70 78 2c 31 70 78 2c 31 70 78 2c 31 70 78 29 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 21 69 6d 70 6f 72 74 61 6e 74 3b 68 65 69 67 68 74 3a 31 70 78 3b 77 69 64 74 68 3a 31 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 74 65 78 74 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 78 Data Ascii: h:auto}.wp-caption p.wp-caption-text{font-size:11px;line-height:17px;margin:0;padding:0 4px 5px}.screen-reader-text{clip:rect(1px,1px,1px,1px);position:absolute!important;height:1px;width:1px;overflow:hidden}.screen-reader-text:focus{border-radius:3px;box
2025-01-10 04:22:03 UTC	1369	IN	Data Raw: 74 69 74 6c 65 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 2e 64 6f 6f 70 6c 61 79 5f 70 6c 61 79 65 72 20 2e 6f 70 74 69 6f 6e 73 20 75 6c 20 6c 69 20 73 70 61 6e 2e 73 65 72 76 65 72 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 35 70 78 7d 2e 64 6f 6f 70 6c 61 79 5f 70 6c 61 79 65 72 20 2e 6f 70 74 69 6f 6e 73 20 75 6c 20 6c 69 20 73 70 61 6e 2e 6c 6f 61 64 65 72 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 70 6f 73 69 74 69 6f 6e 3a 73 74 69 63 6b 79 3b 6c 65 66 74 3a 61 75 74 6f 3b 74 6f 70 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 70 78 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 64 6f 6f 70 6c 61 79 5f 70 6c Data Ascii: title{float:left;font-weight:600}.dooplay_player .options ul li span.server{font-size:12px;margin-left:15px}.dooplay_player .options ul li span.loader{float:right;position:sticky;left:auto;top:auto;margin-right:20px;margin-top:5px;display:none}.dooplay_pl
2025-01-10 04:22:03 UTC	1369	IN	Data Raw: 49 6e 20 2e 35 73 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 49 6e 20 2e 35 73 7d 2e 61 6e 69 6d 61 74 69 6f 6e 2d 32 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 49 6e 20 32 73 3b 2d 6d 6f 7a 2d 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 49 6e 20 32 73 3b 2d 6d 73 2d 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 49 6e 20 32 73 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 49 6e 20 32 73 7d 2e 61 6e 69 6d 61 74 69 6f 6e 2d 33 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 49 6e 44 6f 77 6e 20 2e 35 73 3b 2d 6d 6f 7a 2d 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 49 6e 44 6f 77 6e 20 2e 35 73 3b 2d 6d 73 2d 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 49 6e 44 6f 77 6e 20 2e 35 73 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 Data Ascii: In .5s;animation:fadeIn .5s}.animation-2{-webkit-animation:fadeIn 2s;-moz-animation:fadeIn 2s;-ms-animation:fadeIn 2s;animation:fadeIn 2s}.animation-3{-webkit-animation:fadeInDown .5s;-moz-animation:fadeInDown .5s;-ms-animation:fadeInDown .5s;animation:fa
2025-01-10 04:22:03 UTC	1369	IN	Data Raw: 6f 72 69 67 69 6e 3a 35 30 25 20 35 30 25 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 6c 61 73 68 7b 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 35 30 25 7b 6f 70 61 63 69 74 79 3a 2e 31 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 6c 61 73 68 7b 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 35 30 25 7b 6f 70 61 63 69 74 79 3a 2e 31 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 44 6f 77 6e 7b 66 72 6f 6d 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 31 30 30 25 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c Data Ascii: origin:50% 50%}@-webkit-keyframes flash{0%{opacity:1}50%{opacity:.1}100%{opacity:1}}@keyframes flash{0%{opacity:1}50%{opacity:.1}100%{opacity:1}}@-webkit-keyframes fadeInDown{from{opacity:0;-webkit-transform:translate3d(0,-100%,0);transform:translate3d(0,
2025-01-10 04:22:03 UTC	1369	IN	Data Raw: 31 30 70 78 2c 30 29 7d 34 30 25 7b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 31 30 70 78 2c 30 29 7d 35 30 25 7b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 31 30 70 78 2c 30 29 7d 36 30 25 7b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 31 30 70 78 2c 30 29 7d 37 30 25 7b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 31 30 70 78 2c 30 29 7d 38 30 25 7b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 31 30 70 78 2c 30 29 7d 39 30 25 7b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 31 30 70 78 2c 30 29 7d 31 30 30 25 7b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 Data Ascii: 10px,0)}40%{-moz-transform:translate(10px,0)}50%{-moz-transform:translate(-10px,0)}60%{-moz-transform:translate(10px,0)}70%{-moz-transform:translate(-10px,0)}80%{-moz-transform:translate(10px,0)}90%{-moz-transform:translate(-10px,0)}100%{-moz-transform:tr
2025-01-10 04:22:03 UTC	1369	IN	Data Raw: 70 78 2c 30 29 7d 36 30 25 7b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 31 30 70 78 2c 30 29 7d 37 30 25 7b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 31 30 70 78 2c 30 29 7d 38 30 25 7b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 31 30 70 78 2c 30 29 7d 39 30 25 7b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 31 30 70 78 2c 30 29 7d 31 30 30 25 7b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 30 2c 30 29 7d 7d 23 64 74 5f 63 6f 6e 74 65 6e 65 64 6f 72 7b 77 69 64 74 68 3a 31 30 30 25 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 35 30 25 20 30 3b 62 61 63 6b 67 Data Ascii: px,0)}60%{-ms-transform:translate(10px,0)}70%{-ms-transform:translate(-10px,0)}80%{-ms-transform:translate(10px,0)}90%{-ms-transform:translate(-10px,0)}100%{-ms-transform:translate(0,0)}}#dt_contenedor{width:100%;float:left;background-position:50% 0;backg
2025-01-10 04:22:03 UTC	1369	IN	Data Raw: 68 74 3a 31 30 30 25 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 7d 2e 6d 6f 64 75 6c 65 20 2e 73 69 64 65 62 61 72 2e 72 69 67 68 74 7b 72 69 67 68 74 3a 30 7d 2e 6d 6f 64 75 6c 65 20 2e 73 69 64 65 62 61 72 2e 6c 65 66 74 7b 6c 65 66 74 3a 30 7d 2e 6d 6f 64 75 6c 65 20 2e 63 6f 6e 74 65 6e 74 7b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 33 36 30 70 78 29 3b 70 61 64 64 69 6e 67 3a 32 30 70 78 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 6d 6f 64 75 6c 65 20 2e 63 6f 6e 74 65 6e 74 2e 66 75 6c 6c 7b 70 61 64 64 69 6e 67 3a 32 30 70 78 20 34 30 70 78 7d 2e 6d 6f 64 75 6c 65 20 2e 63 6f 6e 74 65 6e 74 2e Data Ascii: ht:100%;float:left;position:absolute;top:0;overflow:hidden;padding:30px}.module .sidebar.right{right:0}.module .sidebar.left{left:0}.module .content{width:calc(100% - 360px);padding:20px;float:left}.module .content.full{padding:20px 40px}.module .content.
2025-01-10 04:22:03 UTC	1369	IN	Data Raw: 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 34 30 25 7d 2e 6d 6f 64 75 6c 65 20 2e 63 6f 6e 74 65 6e 74 20 2e 69 74 65 6d 73 20 2e 69 74 65 6d 20 2e 70 6f 73 74 65 72 20 61 20 2e 73 65 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 69 6e 65 63 61 6c 69 64 61 64 2e 65 63 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 43 69 6e 65 63 61 6c 69 64 61 64 2f 61 73 73 65 74 73 2f 63 73 73 2f 69 6d 67 2f 70 6c 61 79 31 2e 73 76 67 29 20 35 30 25 20 35 30 25 20 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: ;height:100%;float:left;position:relative;overflow:hidden;margin:0;padding-top:140%}.module .content .items .item .poster a .see{background:url(https://www.cineuserdad.ec/wp-content/themes/Cineuserdad/assets/css/img/play1.svg) 50% 50% no-repeat;background

Timestamp	Bytes transferred	Direction	Data
2025-01-10 04:22:04 UTC	606	OUT	GET /wp-content/litespeed/css/8299a2d6f38fe50dd8239e0ae50e5d27.css?ver=e5d27 HTTP/1.1 Host: www.cineuserdad.ec Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cineuserdad.ec/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 04:22:04 UTC	935	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 04:22:04 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=604800 expires: Fri, 17 Jan 2025 04:02:09 GMT last-modified: Fri, 10 Jan 2025 04:02:09 GMT vary: Accept-Encoding CF-Cache-Status: HIT Age: 1186 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BO189Sl7m5NBa6FD2QfEsc8gjlKF0vM1XAZ9x9fp3DoUmYvEbeq%2FlQ%2B6w2Z0hOdR1KTdRboH8AZ%2BdqlXBCrTZ8hLjb%2B0UGxu0CjAcZYKvpMgP%2F5UHLudnZncAFzbzW2bhOzU1qU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff9e246d8e04245-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1743&min_rtt=1743&rtt_var=654&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2834&recv_bytes=1184&delivery_rate=1675272&cwnd=193&unsent_bytes=0&cid=93e54f21b23d68eb&ts=302&x=0"
2025-01-10 04:22:04 UTC	434	IN	Data Raw: 37 63 64 30 0d 0a 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 50 72 6f 20 35 2e 31 35 2e 31 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 20 28 43 6f 6d 6d 65 72 63 69 61 6c 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 0a 2e 66 61 2c 2e 66 61 62 2c 2e 66 61 64 2c 2e 66 61 6c 2c 2e 66 61 72 2c 2e 66 61 73 7b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 64 69 73 70 6c 61 79 3a Data Ascii: 7cd0/! Font Awesome Pro 5.15.1 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license (Commercial License) */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: 61 2d 73 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 7d 2e 66 61 2d 31 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 2e 66 61 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 33 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 65 6d 7d 2e 66 61 2d 34 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 65 6d 7d 2e 66 61 2d 35 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 35 65 6d 7d 2e 66 61 2d 36 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 36 65 6d 7d 2e 66 61 2d 37 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 37 65 6d 7d 2e 66 61 2d 38 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 65 6d 7d 2e 66 61 2d 39 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 39 65 6d 7d 2e 66 61 2d 31 30 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 65 6d 7d 2e 66 61 2d 66 77 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e Data Ascii: a-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:cen
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: 39 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 31 38 30 7b 2d 6d 73 2d 66 69 6c 74 65 72 3a 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 42 61 73 69 63 49 6d 61 67 65 28 72 6f 74 61 74 69 6f 6e 3d 32 29 22 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 32 37 30 7b 2d 6d 73 2d 66 69 6c 74 65 72 3a 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 42 61 73 69 63 49 6d 61 67 65 28 72 6f 74 61 74 69 6f 6e 3d Data Ascii: 90deg);transform:rotate(90deg)}.fa-rotate-180{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=2)";-webkit-transform:rotate(180deg);transform:rotate(180deg)}.fa-rotate-270{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: 2d 61 63 6f 72 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 61 65 22 7d 2e 66 61 2d 61 63 71 75 69 73 69 74 69 6f 6e 73 2d 69 6e 63 6f 72 70 6f 72 61 74 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 61 66 22 7d 2e 66 61 2d 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 34 31 22 7d 2e 66 61 2d 61 64 64 72 65 73 73 2d 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 62 39 22 7d 2e 66 61 2d 61 64 64 72 65 73 73 2d 63 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 62 62 22 7d 2e 66 61 2d 61 64 6a 75 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 32 22 7d 2e 66 61 2d 61 64 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 Data Ascii: -acorn:before{content:"\f6ae"}.fa-acquisitions-incorporated:before{content:"\f6af"}.fa-ad:before{content:"\f641"}.fa-address-book:before{content:"\f2b9"}.fa-address-card:before{content:"\f2bb"}.fa-adjust:before{content:"\f042"}.fa-adn:before{content:"\f17
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 34 33 22 7d 2e 66 61 2d 61 6e 63 68 6f 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 33 64 22 7d 2e 66 61 2d 61 6e 64 72 6f 69 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 62 22 7d 2e 66 61 2d 61 6e 67 65 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 37 39 22 7d 2e 66 61 2d 61 6e 67 65 6c 6c 69 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 30 39 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 33 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 30 22 7d 2e 66 61 2d 61 6e 67 6c 65 Data Ascii: {content:"\f643"}.fa-anchor:before{content:"\f13d"}.fa-android:before{content:"\f17b"}.fa-angel:before{content:"\f779"}.fa-angellist:before{content:"\f209"}.fa-angle-double-down:before{content:"\f103"}.fa-angle-double-left:before{content:"\f100"}.fa-angle
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: 65 6e 74 3a 22 5c 66 33 34 39 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 61 6c 74 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 35 35 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 61 6c 74 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 35 36 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 61 6c 74 2d 73 71 75 61 72 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 35 30 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 61 6c 74 2d 73 71 75 61 72 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 35 31 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 61 6c 74 2d 73 71 75 61 72 65 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 35 32 22 7d 2e 66 61 2d 61 72 72 6f 77 2d Data Ascii: ent:"\f349"}.fa-arrow-alt-left:before{content:"\f355"}.fa-arrow-alt-right:before{content:"\f356"}.fa-arrow-alt-square-down:before{content:"\f350"}.fa-arrow-alt-square-left:before{content:"\f351"}.fa-arrow-alt-square-right:before{content:"\f352"}.fa-arrow-
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: 72 6f 77 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 37 22 7d 2e 66 61 2d 61 72 72 6f 77 73 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 62 32 22 7d 2e 66 61 2d 61 72 72 6f 77 73 2d 61 6c 74 2d 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 33 37 22 7d 2e 66 61 2d 61 72 72 6f 77 73 2d 61 6c 74 2d 76 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 33 38 22 7d 2e 66 61 2d 61 72 72 6f 77 73 2d 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 65 22 7d 2e 66 61 2d 61 72 72 6f 77 73 2d 76 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 64 22 7d 2e 66 61 2d 61 72 74 73 74 61 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 37 61 22 Data Ascii: rows:before{content:"\f047"}.fa-arrows-alt:before{content:"\f0b2"}.fa-arrows-alt-h:before{content:"\f337"}.fa-arrows-alt-v:before{content:"\f338"}.fa-arrows-h:before{content:"\f07e"}.fa-arrows-v:before{content:"\f07d"}.fa-artstation:before{content:"\f77a"
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: 6f 6e 65 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 62 34 22 7d 2e 66 61 2d 62 61 67 73 2d 73 68 6f 70 70 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 34 37 22 7d 2e 66 61 2d 62 61 68 61 69 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 36 36 22 7d 2e 66 61 2d 62 61 6c 61 6e 63 65 2d 73 63 61 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 34 65 22 7d 2e 66 61 2d 62 61 6c 61 6e 63 65 2d 73 63 61 6c 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 31 35 22 7d 2e 66 61 2d 62 61 6c 61 6e 63 65 2d 73 63 61 6c 65 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 31 36 22 7d 2e 66 61 2d 62 61 6c 6c 2d 70 69 6c 65 3a 62 65 66 6f 72 Data Ascii: oney:before{content:"\f6b4"}.fa-bags-shopping:before{content:"\f847"}.fa-bahai:before{content:"\f666"}.fa-balance-scale:before{content:"\f24e"}.fa-balance-scale-left:before{content:"\f515"}.fa-balance-scale-right:before{content:"\f516"}.fa-ball-pile:befor
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: 61 2d 62 65 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 63 22 7d 2e 66 61 2d 62 65 68 61 6e 63 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 34 22 7d 2e 66 61 2d 62 65 68 61 6e 63 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 35 22 7d 2e 66 61 2d 62 65 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 33 22 7d 2e 66 61 2d 62 65 6c 6c 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 34 38 22 7d 2e 66 61 2d 62 65 6c 6c 2d 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 66 61 22 7d 2e 66 61 2d 62 65 6c 6c 2d 70 6c 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 34 39 22 7d Data Ascii: a-beer:before{content:"\f0fc"}.fa-behance:before{content:"\f1b4"}.fa-behance-square:before{content:"\f1b5"}.fa-bell:before{content:"\f0f3"}.fa-bell-exclamation:before{content:"\f848"}.fa-bell-on:before{content:"\f8fa"}.fa-bell-plus:before{content:"\f849"}
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: 74 6f 6f 74 68 2d 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 39 34 22 7d 2e 66 61 2d 62 6f 6c 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 32 22 7d 2e 66 61 2d 62 6f 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 37 22 7d 2e 66 61 2d 62 6f 6d 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 65 32 22 7d 2e 66 61 2d 62 6f 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 64 37 22 7d 2e 66 61 2d 62 6f 6e 65 2d 62 72 65 61 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 64 38 22 7d 2e 66 61 2d 62 6f 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 35 63 22 7d 2e 66 61 2d 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c Data Ascii: tooth-b:before{content:"\f294"}.fa-bold:before{content:"\f032"}.fa-bolt:before{content:"\f0e7"}.fa-bomb:before{content:"\f1e2"}.fa-bone:before{content:"\f5d7"}.fa-bone-break:before{content:"\f5d8"}.fa-bong:before{content:"\f55c"}.fa-book:before{content:"\

Timestamp	Bytes transferred	Direction	Data
2025-01-10 04:22:04 UTC	636	OUT	GET /wp-content/plugins/wp-cloudflare-page-cache/assets/js/instantpage.min.js?ver=5.2.0 HTTP/1.1 Host: www.cineuserdad.ec Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.cineuserdad.ec sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.cineuserdad.ec/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 04:22:04 UTC	861	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 04:22:04 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close last-modified: Sat, 30 Nov 2024 19:06:44 GMT vary: Accept-Encoding CF-Cache-Status: HIT Age: 1187 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mbDNWE6OgdcVuedi%2BXouywVz7qCIxOoSZIOTH3fNIqfeF0X1OX%2FjA8cibM9DBG%2Ble9B1grZCdR8hT4BT48Z0jlB%2FgbZBCac6Q67da2mV7J3r2nUsCcJW6VVP131hJ8gdlUtRlzM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff9e2470c6b41d5-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1648&min_rtt=1642&rtt_var=628&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1214&delivery_rate=1723730&cwnd=226&unsent_bytes=0&cid=6265a7a6ccb74b53&ts=180&x=0"
2025-01-10 04:22:04 UTC	508	IN	Data Raw: 66 35 64 0d 0a 6c 65 74 20 5f 61 6c 6c 6f 77 51 75 65 72 79 53 74 72 69 6e 67 2c 5f 61 6c 6c 6f 77 45 78 74 65 72 6e 61 6c 4c 69 6e 6b 73 2c 5f 75 73 65 57 68 69 74 65 6c 69 73 74 2c 5f 6c 61 73 74 54 6f 75 63 68 54 69 6d 65 73 74 61 6d 70 2c 5f 6d 6f 75 73 65 6f 76 65 72 54 69 6d 65 72 2c 5f 63 68 72 6f 6d 69 75 6d 4d 61 6a 6f 72 56 65 72 73 69 6f 6e 49 6e 55 73 65 72 41 67 65 6e 74 3d 6e 75 6c 6c 2c 5f 64 65 6c 61 79 4f 6e 48 6f 76 65 72 3d 36 35 2c 5f 70 72 65 6c 6f 61 64 65 64 4c 69 73 74 3d 6e 65 77 20 53 65 74 3b 63 6f 6e 73 74 20 44 45 4c 41 59 5f 54 4f 5f 4e 4f 54 5f 42 45 5f 43 4f 4e 53 49 44 45 52 45 44 5f 41 5f 54 4f 55 43 48 5f 49 4e 49 54 49 41 54 45 44 5f 41 43 54 49 4f 4e 3d 31 31 31 31 3b 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 28 29 7b 69 Data Ascii: f5dlet _allowQueryString,_allowExternalLinks,_useWhitelist,_lastTouchTimestamp,_mouseoverTimer,_chromiumMajorVersionInUserAgent=null,_delayOnHover=65,_preloadedList=new Set;const DELAY_TO_NOT_BE_CONSIDERED_A_TOUCH_INITIATED_ACTION=1111;function init(){i
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: 74 2e 73 75 62 73 74 72 69 6e 67 28 74 2b 22 43 68 72 6f 6d 65 2f 22 2e 6c 65 6e 67 74 68 29 29 29 2c 65 26 26 5f 63 68 72 6f 6d 69 75 6d 4d 61 6a 6f 72 56 65 72 73 69 6f 6e 49 6e 55 73 65 72 41 67 65 6e 74 26 26 5f 63 68 72 6f 6d 69 75 6d 4d 61 6a 6f 72 56 65 72 73 69 6f 6e 49 6e 55 73 65 72 41 67 65 6e 74 3c 31 31 30 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 6e 3d 22 69 6e 73 74 61 6e 74 4d 6f 75 73 65 64 6f 77 6e 53 68 6f 72 74 63 75 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 64 61 74 61 73 65 74 3b 5f 61 6c 6c 6f 77 51 75 65 72 79 53 74 72 69 6e 67 3d 22 69 6e 73 74 61 6e 74 41 6c 6c 6f 77 51 75 65 72 79 53 74 72 69 6e 67 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 64 61 74 61 73 65 74 2c 5f 61 6c 6c 6f 77 45 78 74 65 72 6e 61 Data Ascii: t.substring(t+"Chrome/".length))),e&&_chromiumMajorVersionInUserAgent&&_chromiumMajorVersionInUserAgent<110)return;const n="instantMousedownShortcut"in document.body.dataset;_allowQueryString="instantAllowQueryString"in document.body.dataset,_allowExterna
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: 67 29 7b 63 6f 6e 73 74 20 6e 3d 74 2e 74 61 72 67 65 74 3b 65 2e 75 6e 6f 62 73 65 72 76 65 28 6e 29 2c 70 72 65 6c 6f 61 64 28 6e 2e 68 72 65 66 29 7d 7d 29 29 7d 29 29 3b 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 22 29 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 69 73 50 72 65 6c 6f 61 64 61 62 6c 65 28 74 29 26 26 65 2e 6f 62 73 65 72 76 65 28 74 29 7d 29 29 7d 29 2c 7b 74 69 6d 65 6f 75 74 3a 31 35 30 30 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 6f 75 63 68 73 74 61 72 74 4c 69 73 74 65 6e 65 72 28 65 29 7b 5f 6c 61 73 74 54 6f 75 63 68 54 69 6d 65 73 74 61 6d 70 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 63 6f 6e 73 74 20 74 3d 65 2e 74 61 72 67 65 74 2e 63 6c 6f 73 65 73 74 28 22 61 22 29 3b 69 Data Ascii: g){const n=t.target;e.unobserve(n),preload(n.href)}}))}));document.querySelectorAll("a").forEach((t=>{isPreloadable(t)&&e.observe(t)}))}),{timeout:1500})}}function touchstartListener(e){_lastTouchTimestamp=performance.now();const t=e.target.closest("a");i
2025-01-10 04:22:04 UTC	694	IN	Data Raw: 69 6e 21 3d 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 29 7b 69 66 28 21 28 5f 61 6c 6c 6f 77 45 78 74 65 72 6e 61 6c 4c 69 6e 6b 73 7c 7c 22 69 6e 73 74 61 6e 74 22 69 6e 20 65 2e 64 61 74 61 73 65 74 29 7c 7c 21 5f 63 68 72 6f 6d 69 75 6d 4d 61 6a 6f 72 56 65 72 73 69 6f 6e 49 6e 55 73 65 72 41 67 65 6e 74 29 72 65 74 75 72 6e 7d 69 66 28 5b 22 68 74 74 70 3a 22 2c 22 68 74 74 70 73 3a 22 5d 2e 69 6e 63 6c 75 64 65 73 28 65 2e 70 72 6f 74 6f 63 6f 6c 29 26 26 28 22 68 74 74 70 3a 22 21 3d 65 2e 70 72 6f 74 6f 63 6f 6c 7c 7c 22 68 74 74 70 73 3a 22 21 3d 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 29 26 26 28 5f 61 6c 6c 6f 77 51 75 65 72 79 53 74 72 69 6e 67 7c 7c 21 65 2e 73 65 61 72 63 68 7c 7c 22 69 6e 73 74 61 6e 74 22 69 6e 20 65 2e 64 61 Data Ascii: in!=location.origin){if(!(_allowExternalLinks\|\|"instant"in e.dataset)\|\|!_chromiumMajorVersionInUserAgent)return}if(["http:","https:"].includes(e.protocol)&&("http:"!=e.protocol\|\|"https:"!=location.protocol)&&(_allowQueryString\|\|!e.search\|\|"instant"in e.da
2025-01-10 04:22:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.cineuserdad.ec

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Chrome Cache Entry: 217

Chrome Cache Entry: 218

Chrome Cache Entry: 219

Chrome Cache Entry: 220

Chrome Cache Entry: 221

Chrome Cache Entry: 222

Chrome Cache Entry: 223

Chrome Cache Entry: 224

Chrome Cache Entry: 225

Windows Analysis Report
https://www.cineuserdad.ec

Timestamp	Bytes transferred	Direction	Data
2025-01-10 04:22:04 UTC	642	OUT	GET /wp-content/themes/Cineuserdad/assets/img/logo.svg?v=1aaaaaa.0 HTTP/1.1 Host: www.cineuserdad.ec Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cineuserdad.ec/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 04:22:04 UTC	940	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 04:22:04 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=604800 expires: Fri, 17 Jan 2025 04:02:09 GMT last-modified: Mon, 20 Nov 2023 22:21:57 GMT vary: Accept-Encoding CF-Cache-Status: HIT Age: 1186 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XsZh%2BpTvtnnVsdaEBrFWBUsOwYpIzZY9b%2B6JGBWfHiLkOVPEXAdE1uzTKtmgzzWfMlb9Eh6E51ZdlQAK8xTeW2el8qldqBWaKDRD6gdYv%2BVK%2FbudWqlgfYs3WJO04e%2B3ZFKO54k%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff9e2472de432d9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2004&min_rtt=2001&rtt_var=753&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1220&delivery_rate=1459270&cwnd=174&unsent_bytes=0&cid=8e2204d148263338&ts=291&x=0"
2025-01-10 04:22:04 UTC	429	IN	Data Raw: 31 66 64 35 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 78 22 20 77 69 64 74 68 3d 22 31 36 34 70 78 22 20 68 65 69 67 68 74 3d 22 31 33 30 70 78 22 0a 09 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 34 20 31 33 30 22 20 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3d 22 6e 65 77 20 30 20 30 20 31 36 34 20 Data Ascii: 1fd5<?xml version="1.0" encoding="utf-8"?><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" width="164px" height="130px" viewBox="0 0 164 130" enable-background="new 0 0 164
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: 0a 09 09 09 09 43 31 2e 38 36 33 2c 32 37 2e 35 32 39 2c 33 30 2e 37 31 33 2d 30 2e 37 35 33 2c 36 35 2e 34 30 38 2c 30 2e 31 35 39 63 32 30 2e 31 32 35 2c 30 2e 35 32 39 2c 33 37 2e 38 30 31 2c 31 30 2e 37 35 39 2c 34 38 2e 38 36 32 2c 32 36 2e 32 38 37 4c 39 34 2e 31 30 34 2c 33 37 2e 31 32 36 0a 09 09 09 09 63 2d 37 2e 31 37 38 2d 38 2e 33 37 35 2d 31 37 2e 35 39 36 2d 31 33 2e 37 37 38 2d 32 39 2e 32 39 35 2d 31 34 2e 30 38 35 63 2d 32 32 2e 34 32 39 2d 30 2e 35 39 31 2d 34 31 2e 31 32 33 2c 31 37 2e 37 33 2d 34 31 2e 37 32 39 2c 34 30 2e 38 39 31 63 2d 30 2e 36 31 31 2c 32 33 2e 31 39 35 2c 31 37 2e 31 30 31 2c 34 32 2e 34 33 31 2c 33 39 2e 35 33 2c 34 33 2e 30 32 33 0a 09 09 09 09 63 31 32 2e 35 35 39 2c 30 2e 33 32 36 2c 32 33 2e 39 31 35 2d 35 2e Data Ascii: C1.863,27.529,30.713-0.753,65.408,0.159c20.125,0.529,37.801,10.759,48.862,26.287L94.104,37.126c-7.178-8.375-17.596-13.778-29.295-14.085c-22.429-0.591-41.123,17.73-41.729,40.891c-0.611,23.195,17.101,42.431,39.53,43.023c12.559,0.326,23.915-5.
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: 30 2e 35 36 38 2d 31 2e 35 34 32 2d 31 2e 30 39 32 2d 31 2e 39 38 35 63 2d 30 2e 35 32 31 2d 30 2e 34 34 34 2d 31 2e 31 35 32 2d 30 2e 36 36 36 2d 31 2e 38 39 33 2d 30 2e 36 36 36 63 2d 31 2e 31 31 39 2c 30 2d 32 2e 30 32 37 2c 30 2e 34 2d 32 2e 37 32 37 2c 31 2e 32 30 32 0a 09 09 09 09 09 63 2d 30 2e 36 39 37 2c 30 2e 38 30 32 2d 31 2e 30 34 37 2c 32 2e 30 37 2d 31 2e 30 34 37 2c 33 2e 38 30 35 63 30 2c 31 2e 37 36 2c 30 2e 33 33 36 2c 33 2e 30 33 38 2c 31 2e 30 31 2c 33 2e 38 33 36 63 30 2e 36 37 36 2c 30 2e 37 39 38 2c 31 2e 35 35 35 2c 31 2e 31 39 36 2c 32 2e 36 34 31 2c 31 2e 31 39 36 0a 09 09 09 09 09 63 30 2e 38 37 31 2c 30 2c 31 2e 36 2d 30 2e 32 36 38 2c 32 2e 31 38 32 2d 30 2e 38 30 32 43 39 33 2e 36 31 35 2c 35 39 2e 30 30 38 2c 39 33 2e 39 38 Data Ascii: 0.568-1.542-1.092-1.985c-0.521-0.444-1.152-0.666-1.893-0.666c-1.119,0-2.027,0.4-2.727,1.202c-0.697,0.802-1.047,2.07-1.047,3.805c0,1.76,0.336,3.038,1.01,3.836c0.676,0.798,1.555,1.196,2.641,1.196c0.871,0,1.6-0.268,2.182-0.802C93.615,59.008,93.98
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: 39 2d 31 2e 39 32 39 2d 30 2e 38 33 38 2d 32 2e 34 37 39 0a 09 09 09 09 09 63 2d 30 2e 37 30 37 2d 30 2e 38 35 34 2d 31 2e 36 32 35 2d 31 2e 32 38 32 2d 32 2e 37 35 2d 31 2e 32 38 32 63 2d 31 2e 30 32 2c 30 2d 31 2e 38 37 37 2c 30 2e 33 34 31 2d 32 2e 35 37 32 2c 31 2e 30 32 33 53 31 31 39 2e 36 33 35 2c 35 32 2e 39 32 33 2c 31 31 39 2e 35 36 33 2c 35 34 2e 30 36 37 7a 22 2f 3e 0a 09 09 09 3c 2f 67 3e 0a 09 09 09 3c 67 3e 0a 09 09 09 09 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 45 43 42 42 37 22 20 64 3d 22 4d 39 32 2e 36 36 34 2c 37 39 2e 36 30 32 6c 32 2e 31 38 34 2c 30 2e 32 38 33 63 2d 30 2e 32 33 38 2c 31 2e 35 30 36 2d 30 2e 38 35 2c 32 2e 36 38 34 2d 31 2e 38 33 32 2c 33 2e 35 33 35 73 2d 32 2e 31 38 39 2c 31 2e 32 37 37 2d 33 2e 36 32 31 2c 31 2e Data Ascii: 9-1.929-0.838-2.479c-0.707-0.854-1.625-1.282-2.75-1.282c-1.02,0-1.877,0.341-2.572,1.023S119.635,52.923,119.563,54.067z"/></g><g><path fill="#0ECBB7" d="M92.664,79.602l2.184,0.283c-0.238,1.506-0.85,2.684-1.832,3.535s-2.189,1.277-3.621,1.
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: 2e 31 37 2d 30 2e 32 39 37 0a 09 09 09 09 09 63 30 2e 31 39 37 2d 30 2e 39 32 38 2c 30 2e 35 32 31 2d 31 2e 36 38 2c 30 2e 39 37 35 2d 32 2e 32 35 63 30 2e 34 35 31 2d 30 2e 35 37 32 2c 31 2e 31 30 35 2d 31 2e 30 31 32 2c 31 2e 39 36 31 2d 31 2e 33 32 73 31 2e 38 34 36 2d 30 2e 34 36 33 2c 32 2e 39 37 35 2d 30 2e 34 36 33 0a 09 09 09 09 09 63 31 2e 31 31 37 2c 30 2c 32 2e 30 32 37 2c 30 2e 31 33 31 2c 32 2e 37 32 37 2c 30 2e 33 39 35 73 31 2e 32 31 33 2c 30 2e 35 39 34 2c 31 2e 35 34 31 2c 30 2e 39 39 32 63 30 2e 33 33 2c 30 2e 34 2c 30 2e 35 36 31 2c 30 2e 39 30 34 2c 30 2e 36 39 31 2c 31 2e 35 31 32 0a 09 09 09 09 09 63 30 2e 30 37 34 2c 30 2e 33 37 39 2c 30 2e 31 31 31 2c 31 2e 30 36 33 2c 30 2e 31 31 31 2c 32 2e 30 34 39 76 32 2e 39 36 31 63 30 2c 32 Data Ascii: .17-0.297c0.197-0.928,0.521-1.68,0.975-2.25c0.451-0.572,1.105-1.012,1.961-1.32s1.846-0.463,2.975-0.463c1.117,0,2.027,0.131,2.727,0.395s1.213,0.594,1.541,0.992c0.33,0.4,0.561,0.904,0.691,1.512c0.074,0.379,0.111,1.063,0.111,2.049v2.961c0,2
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: 09 09 63 30 2e 37 30 39 2c 30 2e 38 33 2c 31 2e 35 34 33 2c 31 2e 32 34 36 2c 32 2e 35 30 36 2c 31 2e 32 34 36 63 30 2e 39 37 31 2c 30 2c 31 2e 37 39 35 2d 30 2e 33 39 36 2c 32 2e 34 37 33 2d 31 2e 31 39 31 63 30 2e 36 38 2d 30 2e 37 39 33 2c 31 2e 30 32 2d 32 2e 30 30 34 2c 31 2e 30 32 2d 33 2e 36 33 33 0a 09 09 09 09 09 63 30 2d 31 2e 37 39 33 2d 30 2e 33 34 36 2d 33 2e 31 30 39 2d 31 2e 30 33 37 2d 33 2e 39 34 39 63 2d 30 2e 36 39 31 2d 30 2e 38 33 38 2d 31 2e 35 34 33 2d 31 2e 32 35 38 2d 32 2e 35 35 35 2d 31 2e 32 35 38 63 2d 30 2e 39 38 36 2c 30 2d 31 2e 38 31 31 2c 30 2e 34 30 32 2d 32 2e 34 37 33 2c 31 2e 32 30 39 0a 09 09 09 09 09 53 31 32 33 2e 35 31 2c 37 36 2e 31 32 37 2c 31 32 33 2e 35 31 2c 37 37 2e 38 36 31 7a 22 2f 3e 0a 09 09 09 09 3c 70 Data Ascii: c0.709,0.83,1.543,1.246,2.506,1.246c0.971,0,1.795-0.396,2.473-1.191c0.68-0.793,1.02-2.004,1.02-3.633c0-1.793-0.346-3.109-1.037-3.949c-0.691-0.838-1.543-1.258-2.555-1.258c-0.986,0-1.811,0.402-2.473,1.209S123.51,76.127,123.51,77.861z"/><p
2025-01-10 04:22:04 UTC	883	IN	Data Raw: 31 2e 31 30 35 2c 30 2e 35 39 32 2c 31 2e 39 36 39 2c 30 2e 35 39 32 63 30 2e 38 35 35 2c 30 2c 31 2e 36 31 37 2d 30 2e 31 38 38 2c 32 2e 32 38 33 2d 30 2e 35 36 31 0a 09 09 09 09 09 63 30 2e 36 36 36 2d 30 2e 33 37 35 2c 31 2e 31 35 34 2d 30 2e 38 38 37 2c 31 2e 34 36 37 2d 31 2e 35 33 37 63 30 2e 32 34 2d 30 2e 35 30 32 2c 30 2e 33 35 39 2d 31 2e 32 34 32 2c 30 2e 33 35 39 2d 32 2e 32 32 31 56 37 37 2e 38 32 34 7a 22 2f 3e 0a 09 09 09 09 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 45 43 42 42 37 22 20 64 3d 22 4d 31 35 38 2e 36 33 37 2c 38 34 2e 34 76 2d 31 2e 36 35 32 63 2d 30 2e 38 33 2c 31 2e 32 39 39 2d 32 2e 30 35 33 2c 31 2e 39 34 39 2d 33 2e 36 36 34 2c 31 2e 39 34 39 63 2d 31 2e 30 34 35 2c 30 2d 32 2e 30 30 36 2d 30 2e 32 38 39 2d 32 2e 38 38 31 Data Ascii: 1.105,0.592,1.969,0.592c0.855,0,1.617-0.188,2.283-0.561c0.666-0.375,1.154-0.887,1.467-1.537c0.24-0.502,0.359-1.242,0.359-2.221V77.824z"/><path fill="#0ECBB7" d="M158.637,84.4v-1.652c-0.83,1.299-2.053,1.949-3.664,1.949c-1.045,0-2.006-0.289-2.881
2025-01-10 04:22:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-01-10 04:22:04 UTC	634	OUT	GET /off/img/netflix-standart/netflix-standart-170x224.jpg HTTP/1.1 Host: www.cineuserdad.ec Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cineuserdad.ec/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 04:22:04 UTC	931	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 04:22:04 GMT Content-Type: image/jpeg Content-Length: 52247 Connection: close Cache-Control: public, max-age=604800 expires: Fri, 17 Jan 2025 04:02:09 GMT last-modified: Mon, 21 Oct 2024 13:10:22 GMT CF-Cache-Status: HIT Age: 1131 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZiEORe8nCemHuYdzIIuIvz5V1T7kWaJ9vS2%2FgaMOTPdan%2Bgly88VQNGpCt9k%2FiKSIoXzoiSd%2BXLoP0FPqi9tGO1AFQTtFsDoCRbippYFQPVj%2BmMeMa5d5vV8xGw3MXXtgzDo3Bc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff9e2470b137295-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1975&min_rtt=1936&rtt_var=804&sent=3&recv=6&lost=0&retrans=0&sent_bytes=2834&recv_bytes=1212&delivery_rate=1297777&cwnd=206&unsent_bytes=0&cid=e6054dca7aa5ce8b&ts=266&x=0"
2025-01-10 04:22:04 UTC	438	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 00 e0 00 aa 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFHHCC}!1AQa"q2
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fe 71 bc 41 7b 26 bf 3c 3a 95 9b 09 65 fe cd 82 3b db 78 c0 5f b1 b6 95 6d 0d 89 24 b3 1c 5b 4b 0c 36 b2 c5 34 9e 5a 79 f7 46 c5 4c 93 44 0c 9f c6 d8 78 7b 18 b8 3b c6 2a a3 71 9b fb 5e d6 52 9f 6d 65 79 49 34 Data Ascii: w!1AQaq"2B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?qA{&<:e;x_m$[K64ZyFLDx{;q^RmeyI4
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: e9 53 ad 5e 86 33 05 8b 54 25 5d a5 47 db c3 0d 88 ab 56 8c 6a b9 46 30 9c e0 a0 e5 28 c7 99 4a 51 4e e7 c3 0f d8 6f f6 88 f8 c7 e1 2b 0f 1a fc 3d f0 ff 00 84 f5 bd 13 51 b1 b8 d4 a2 56 f8 93 f0 ff 00 4e d5 ad ec ad ae e5 b1 96 7d 47 43 d4 7c 47 6b ab 69 91 8b 88 59 55 b5 0b 3b 70 e8 f1 4c a4 c5 34 4e f8 71 47 8e 5e 1d f0 76 6f 88 c9 38 87 30 cd b0 58 ec 3d 7a 78 69 35 c3 79 fe 23 09 52 bd 5a 30 af 0a 78 6c 6e 1f 2e ab 84 c5 4b d9 cd 36 b0 f5 aa 35 25 38 3b 4e 12 8a bc 9f c3 9e 2a cf b0 34 b3 0c af 0b 82 c4 61 ea d3 95 65 7c db 2b a5 5e 14 e1 52 54 e5 2a d8 7a b8 b8 57 a2 b9 e2 d2 75 69 c1 34 e3 25 ee ca 2d e2 f8 43 f6 35 fd a2 bc 6d f1 6b c6 1f 03 74 7f 00 98 3e 28 78 0f 4c 6d 63 c4 fe 19 d6 35 ff 00 0e 68 ed 65 a6 89 b4 b8 63 bb b7 d4 ef f5 58 74 8d 4e Data Ascii: S^3T%]GVjF0(JQNo+=QVN}GC\|GkiYU;pL4NqG^vo80X=zxi5y#RZ0xln.K65%8;N4ae\|+^RTzWui4%-C5mkt>(xLmc5hecXtN
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: 93 8c 66 e3 4b 22 cb 57 d7 73 3e 79 c1 c7 d8 bc 4d 0a 4f 01 42 ab 92 4b 17 8b c3 c5 73 4a 71 8c bf 1e e4 b9 96 57 79 65 77 92 49 1d a4 92 49 1d 9d dd dc 96 77 77 6c b3 3b 31 2c cc c4 96 24 92 49 35 9d ff 00 ab 23 fd e7 a5 4a 9d 1a 74 e8 d1 a7 0a 54 69 42 14 a9 52 a5 18 d3 a7 4a 9d 38 a8 c2 9d 38 45 28 c2 10 8a 51 84 22 94 63 14 92 49 23 6f e1 bf 8a 16 da c6 4b ab f0 ad 63 ad 5b f9 1a 85 88 98 c2 cd a7 b3 89 6d 51 59 49 11 dc 5b 91 05 ec 2d 20 96 dd 75 08 a3 79 ad e7 b7 4f b3 9f e6 1c e3 09 cb 5f d8 d2 52 72 a0 ef 1a 8a 37 bd 54 b9 6a 49 b6 ae d3 6a 71 5a a7 ec ec ae a4 e4 df f5 f6 57 88 b5 39 54 a9 6e 5a c9 46 50 bd ad 4f 78 46 fd 1c 7d d9 bd 5c 5c f5 d6 2a 29 67 f8 c2 f6 45 d4 ad b4 8f 0d cf 0e b3 3e a9 77 69 61 a6 0b 39 47 99 75 77 a8 3c 51 5a db 18 9c Data Ascii: fK"Ws>yMOBKsJqWyewIIwwl;1,$I5#JtTiBRJ88E(Q"cI#oKc[mQYI[- uyO_Rr7TjIjqZW9TnZFPOxF}\\*)gE>wia9Guw<QZ
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: 4e 6f 13 d9 eb d7 1a df 86 2f 3e 32 f8 7e 7d 06 1b 29 23 d4 2f a6 90 69 fa 6e 83 ab dc bd 91 99 ee 74 b4 b5 bb 4d 42 1b 7b 94 9a 24 fd c7 c2 08 cf 37 f1 c7 c3 3c 56 55 96 57 74 b2 7e 09 cb a8 f1 16 25 65 95 b0 14 f0 59 95 1e 0d c7 c3 1f 3a d1 96 1e 84 23 f5 8c 4e 3f 09 49 56 50 8d 3c 54 ab 52 78 79 d4 a7 28 4a 5f 9c f1 db 58 1f 0e 78 be 8e 37 17 4f 9f 1f c4 38 aa 99 55 27 8b a7 89 96 23 09 53 3e c2 cb 0c a9 b8 d5 a9 27 ec a9 61 ab cd c1 c9 ce 8a 84 d5 58 c6 6a 49 73 1f b2 46 8f 7b 61 f0 8b f6 41 9b c1 49 a8 ae b7 e2 2b ff 00 03 eb 9e 28 b7 d0 3c 3d 3a 4e be 19 d0 be 30 78 fb 4a f1 26 a9 a9 f8 93 4e d4 92 5f ec ab fd 32 fa d2 cb 5f d3 2f f4 49 6d 2e ad 34 bb 1b 8b 9d 66 18 ec 92 c6 7f 53 c5 dc 65 1a fc 5f e2 ec 33 99 61 9e 0b 2e a3 9d 60 72 ca 98 fc c2 9c Data Ascii: No/>2~})#/intMB{$7<VUWt~%eY:#N?IVP<TRxy(J_Xx7O8U'#S>'aXjIsF{aAI+(<=:N0xJ&N_2_/Im.4fSe_3a.`r
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: ec e7 3c 90 06 72 ae 32 87 f4 4a 89 d9 f6 b7 c8 fc 2b c6 9c 5f d4 fc 18 f1 4a a7 f3 f0 3f 13 e1 ae ed ff 00 31 d9 46 23 04 d5 dc 65 ba af 6b 5a ed b4 94 a2 ed 25 fd 1c d7 29 fe 10 85 00 7c 09 fb 5e 78 d9 af 35 7d 1b c0 56 72 93 6f a4 40 35 bd 61 51 c1 47 d4 6f 63 68 f4 d8 25 45 25 96 5b 3b 03 2d c8 0e 06 e8 f5 58 d8 0e 01 a8 93 e8 7f a7 df 41 3f 0e a3 81 c8 78 87 c4 dc 7d 05 f5 ac f6 bc b8 77 20 9c e9 c9 4e 9e 53 97 55 8d 5c db 13 46 72 8a 8c e8 e3 f3 48 d0 c2 37 06 f9 2a e4 b5 60 da e6 68 f8 b7 07 d0 fe 46 a4 ff 00 40 8f 9d ad 3c 5b 25 b2 1b 7d 92 45 6b 1a ed b6 85 1b 7b aa ae 73 25 c4 87 ef cf 21 f9 8e 01 58 f8 c1 df 93 5f 91 d7 ca e1 36 a6 a5 1a 95 24 f9 aa ce 5e ea 72 76 f7 69 c5 5f 96 11 db bc b5 be 96 47 f4 65 3c 65 58 ae 5e 5e 58 47 48 46 fa af ef Data Ascii: <r2J+_J?1F#ekZ%)\|^x5}Vro@5aQGoch%E%[;-XA?x}w NSU\FrH7*`hF@<[%}Ek{s%!X_6$^rvi_Ge<eX^^XGHF
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: ea f2 ec 0e 59 8e a9 c3 b5 67 c3 f8 5c 3e 07 1b 9c 67 8f 0f 3e 68 d5 94 e9 c3 0f 9e fb 3a 38 ac 3f bb 3a 15 9b a7 ed 21 1a 4e bd 2e 5a 4a 55 31 31 ad 3f 64 be 27 f8 d7 f0 17 e1 b5 a7 ec 7f fb 5b 78 d6 7f 06 c6 7c 4d f0 db e3 1f 88 bc 3d e0 5f 11 34 d2 d8 c7 a3 e9 8b f1 9b 47 d2 2e b4 7d 3f 42 b7 be 68 ed 52 de de ee e5 e7 3a 8c 77 d2 b4 9a a8 b7 4b c9 65 d3 59 6d ff 00 6a e0 8e 3e e2 5a de 2f f8 4d 92 c3 39 97 f6 67 11 f0 86 5f 98 67 99 72 84 2b cb 19 89 7c 19 8b c5 d2 c6 62 31 f3 a0 a5 56 55 2a 52 a7 1a 6b 0e e8 45 47 08 ea 4a 8c 63 89 4e a7 e7 dc 45 c3 39 45 3e 04 e3 7c c2 59 7c 7e b9 94 e7 b8 ac 2e 5d 8b 72 95 35 42 8f f6 fd 0a 13 a1 4b 0d 1a 96 82 8c 27 37 27 55 54 6d d7 e5 55 24 e9 7b 9f 42 fe c8 7f 0d be 11 d8 7e cb 7f b2 7f 8c fc 43 f0 d3 e1 df 88 Data Ascii: Yg\>g>h:8?:!N.ZJU11?d'[x\|M=_4G.}?BhR:wKeYmj>Z/M9g_gr+\|b1VU*RkEGJcNE9E>\|Y\|~.]r5BK'7'UTmU${B~C
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: a1 1a 30 75 ab 4e be 26 72 f6 bf ce 2f c5 0f 09 c9 e0 3f 89 5f 10 7c 11 22 3c 6f e1 0f 1b 78 a7 c3 25 24 cf 98 06 87 ad df 69 a9 bf 71 2d 92 96 ca 49 62 49 ce 49 cd 7f a3 7c 2f 9b 47 3e e1 ae 1e ce e3 28 c9 66 f9 26 55 99 de 36 e5 6f 1d 81 a1 89 76 b6 96 4e a3 5a 69 a6 87 f2 8e 71 82 79 6e 6f 9a 65 cd 34 f0 39 86 33 09 67 7b ff 00 b3 e2 2a 52 57 be bb 41 3d 4e 2b c0 fe 3e d2 fe 18 7c 6a f8 7d e3 dd 66 c2 f7 53 d3 3c 31 75 1e a7 77 63 a7 34 2b 7b 3a 2a ea 30 a0 b6 37 12 c1 01 91 25 95 25 0b 2c b1 a3 84 28 cc 03 57 b7 25 78 b5 7b 5f 43 f3 4f 14 38 4b 1f c7 9e 1d 71 67 07 e5 98 bc 2e 03 1f 9f e5 af 03 87 c5 e3 55 57 84 a3 27 5e 85 59 3a fe c6 9d 5a aa 13 a7 4e 74 dc a9 d3 9c e2 e6 a5 18 b6 8f da 2f 87 ff 00 b6 ef ec e5 f1 06 44 b5 87 c7 11 f8 4b 54 7d 80 e9 Data Ascii: 0uN&r/?_\|"<ox%$iq-IbII\|/G>(f&U6ovNZiqynoe493g{RWA=N+>\|j}fS<1uwc4+{:07%%,(W%x{_CO8Kqg.UW'^Y:ZNt/DKT}
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: ad 2f fc 62 be 2a b7 17 97 8f 74 6d 23 43 ac dc ad a5 94 e6 d2 37 4b 5b d9 ad 12 56 17 cf bf e4 a9 f0 d7 0f d4 e2 fa 7c 5d 4b 3a c5 4f 1d 8c ab ed 68 60 63 8b a1 2c be ad 5a 19 3f f6 55 47 46 94 69 7b 59 3f a9 d3 f6 b5 a9 fb 69 46 55 68 c2 b3 82 f6 2b 97 d7 ad 57 88 a8 70 fd 5c 9e be 49 2a 58 2c 24 23 0a f8 ca 98 3a f1 af 4a 15 b3 15 8c a7 ed 6a b9 7b 38 a7 89 9a a5 4a 6e 0b dd aa e9 29 3f 6b af d4 5e 12 ff 00 82 aa fc 5d f0 75 8d b0 b5 f0 bf c2 5d 43 5f 83 4e fb 2d c7 88 f5 5b 0f 11 5c 4f 7f a9 24 51 db c3 e2 3b 8d 3a 2f 14 41 a6 59 6b 71 5b 89 e1 92 4d 12 df 48 b1 bb 5b 96 17 96 13 a5 ae 9c 96 5f 95 e6 ff 00 46 3e 05 ce 2b 55 75 b3 de 26 c3 65 f3 c4 7b 58 65 d8 5c 5e 59 4a 9e 1f 0d 29 4a a4 f2 ea 78 99 e5 73 c4 d6 c0 ca a3 84 e3 1c 75 4c 65 7a 2e 92 74 Data Ascii: /btm#C7K[V\|]K:Oh`c,Z?UGFi{Y?iFUh+Wp\IX,$#:Jj{8Jn)?k^]u]C_N-[\O$Q;:/AYkq[MH[_F>+Uu&e{Xe\^YJ)JxsuLez.t
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: 2a 8d 41 d9 72 f3 43 fe 0a 9d fb 46 7c 33 d1 7c 37 e1 0b ef 08 fc 3c d0 13 c3 9a 2e 93 a5 e9 67 58 d1 bc 59 67 77 71 0e 8f 0c 71 58 dc 35 d7 fc 25 16 97 33 44 b1 fd b2 39 2d 6c ee a2 b0 22 fe f2 33 02 32 41 f6 7e fc 77 d1 53 c3 dc cf 30 cc 73 1c 4e 67 c4 b2 ad 99 63 31 58 bc 44 23 8a ca fd 92 96 32 52 9d 78 d3 a5 3c aa a5 2b b9 7b 19 46 b5 4a 75 2b 27 87 a4 fd a3 bd 45 3e 1e 1d fa 44 63 73 6c bb 0f 1e 1c c5 f0 be 6d 84 c0 52 a3 85 55 70 15 aa e2 e5 4e 58 6b 46 1e de 58 7c c3 da d2 76 53 fd d3 74 a1 28 d6 94 a3 0e 57 4d ae 13 c2 df f0 55 6f 8b fe 19 f0 ff 00 88 34 37 b4 f8 57 ae cf e2 4d 4f c7 1a a5 fe b3 ac 69 fa bb ea 29 2f 8f 2f bf b4 35 0b 7b 7f b0 f8 8a ca dc 5a e9 b7 29 01 d1 c4 d1 4f 71 6b 15 bc 71 49 73 3a 19 03 f7 e6 9f 46 4e 02 cc f3 0c bf 1b 1c Data Ascii: *ArCF\|3\|7<.gXYgwqqX5%3D9-l"32A~wS0sNgc1XD#2Rx<+{FJu+'E>DcslmRUpNXkFX\|vSt(WMUo47WMOi)//5{Z)OqkqIs:FN

Timestamp	Bytes transferred	Direction	Data
2025-01-10 04:22:04 UTC	614	OUT	GET /off/img/disney/disney-170x224.jpg HTTP/1.1 Host: www.cineuserdad.ec Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cineuserdad.ec/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 04:22:04 UTC	931	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 04:22:04 GMT Content-Type: image/jpeg Content-Length: 55313 Connection: close Cache-Control: public, max-age=604800 expires: Fri, 17 Jan 2025 04:02:09 GMT last-modified: Mon, 21 Oct 2024 13:10:35 GMT CF-Cache-Status: HIT Age: 1131 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BYCMl33bfUui%2BMCT%2BnkyJqVIIKJYJmv40htQqvRuPeiTC1E0WwaQx9%2FVZPPs0s4sp8QJfcEU80Qyi3UiKVGwDZp3NDG8RUHVBj%2B8BOiC1nR7IGyFCvipfabZe%2FqUzCD7OvAHens%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff9e2472dde8c3b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1920&min_rtt=1914&rtt_var=729&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1192&delivery_rate=1488277&cwnd=231&unsent_bytes=0&cid=77b01e9fc958ac78&ts=284&x=0"
2025-01-10 04:22:04 UTC	438	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 00 e0 00 aa 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFHHCC}!1AQa"q2
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fe 28 c6 82 3f b8 39 c7 f9 e9 fe 7a f6 35 f4 be c3 c9 fd c7 cc 7b 65 df ee e9 fd 7c 85 1a 07 5f 93 f4 e7 a8 ff 00 39 ef d6 8f 61 e4 27 5d 74 7d 7b ff 00 5b 8e 1a 00 fe e7 a8 e4 76 fc b3 f5 3e ff 00 99 ec 3c bf Data Ascii: w!1AQaq"2B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?(?9z5{e\|_9a']t}{[v><
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: fe 84 77 5a 25 bd 95 9c 97 d7 79 8e 04 62 88 11 37 c9 33 a8 52 c1 10 b2 0d 91 87 4f 35 cb 80 a6 48 d4 07 67 0b 5e 36 6b 9a 61 72 af 67 1a 8a 55 2b d5 4d c6 94 52 bf 2a b2 72 93 6d 24 93 6b 77 ae b6 3d ec 97 25 c5 e7 4a b5 4a 52 85 1c 3d 05 fb dc 45 57 6a 6a 4e f6 82 51 bc a5 26 93 76 4b 44 ae da 29 58 59 d9 6a 68 cf 64 de 60 50 37 ab 28 57 5d d9 c1 20 33 8c 12 08 ca b9 e4 30 38 35 79 5e 63 87 cd 61 37 08 ca 9d 5a 4e d3 a5 24 93 4b a3 56 6d 4a 2f ba 7a 69 a1 cf 9a 60 2b 65 93 84 67 38 d5 a5 51 7b 95 69 dd c5 b4 ec e3 ad 9a 6b 57 e9 f7 1a 03 c3 dc 7f ab f5 fc f8 3d 3a f7 e3 d7 18 1d 2b d3 f6 5e 5f 91 e6 7b 56 fa ff 00 5f d7 fc 11 7f e1 1f c7 f0 64 67 3d 00 ff 00 eb e7 3e bf 5e d9 a4 e9 79 7d fb 2f d3 fa f3 2b da 75 17 fe 11 de e1 38 3d 3a 74 e3 b7 e3 f8 fe Data Ascii: wZ%yb73RO5Hg^6kargU+MR*rm$kw=%JJR=EWjjNQ&vKD)XYjhd`P7(W] 3085y^ca7ZN$KVmJ/zi`+eg8Q{ikW=:+^_{V_dg=>^y}/+u8=:t
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: 88 b6 84 05 89 70 86 4b 89 04 88 c4 00 a3 7e d8 e4 07 e5 c8 e4 72 0f 3e 87 87 98 0a b8 4f ac d1 9d 59 d6 8d 1a 5c 9e d2 69 f3 3e 79 a9 45 36 ef 7b 46 32 56 7b 2d 7a 9f 31 c6 93 a7 1c 2e 12 2a 31 8c aa 56 95 5a 71 49 26 a9 c6 32 52 d3 a2 e6 9c 7d 7e f3 d0 9f c3 d8 c8 f2 fa 1e 49 18 27 d3 fc f5 1f 85 7e 97 28 7e 7f 87 f5 f7 9f 09 4a 49 f4 fe b6 fe bf ab c6 7c 3f c0 22 32 41 cf 38 e3 e5 00 9f cb 20 9e e3 77 d2 a5 a5 6f e9 6f fd 79 74 35 49 b9 f2 da c8 8c 68 bf 36 1a 3c 0c 7f 87 f3 fc 31 59 73 a5 2b 3d 12 3a fe ac f9 39 a3 66 fa 46 c4 bf d8 60 83 f2 fa 76 18 3f fe af 7a e8 84 62 f5 5f 71 e7 54 85 44 ed 28 b8 ef 77 d3 af e6 39 3c 3c 64 c4 6b 13 33 b3 85 50 a0 73 bb e5 0a 17 6e 4b 16 ee 1b db 19 ad b9 22 a2 e7 26 a3 18 c5 cd b9 3f 75 25 7b b3 91 b9 39 28 2f 7a Data Ascii: pK~r>OY\i>yE6{F2V{-z1.*1VZqI&2R}~I'~(~JI\|?"2A8 wooyt5Ih6<1Ys+=:9fF`v?zb_qTD(w9<<dk3PsnK"&?u%{9(/z
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: f8 51 e1 4f 17 78 e2 f7 c5 3e 0b d3 1f c2 5a 0e a5 aa 45 04 fa 8f 89 24 4b db 64 b1 4d 47 4c 9a c7 cb d2 64 d3 5c ea ba 75 ee 95 7d 0d 96 a1 71 67 79 6a fa 95 be 97 ab da e9 fa d5 c5 a5 85 d7 e0 18 aa 9e 34 64 f1 c3 63 f3 ee 20 e0 98 e5 af 17 97 61 f3 0a 18 0c ce b5 4c d2 ae 1f 1d 99 65 b8 0a 98 6a 34 d6 43 87 85 5a b3 ab 8f a1 4e 2a 38 b8 43 9a be 1b 9a ac 1d 65 c9 fd ab 53 8d bf 67 57 14 61 33 ac 87 c3 cf a3 b7 8f 38 7e 31 c5 64 7c 41 2e 14 cc 31 fc 55 86 c6 e5 99 76 71 84 c8 71 f8 fc 1e 71 99 e0 a9 f1 3e 2a 6f 2d ca aa e1 6a e6 19 82 8d 0a ee 39 6e 0b 11 56 50 b7 b4 a7 0f dd 0f 0c ff 00 c1 14 ff 00 66 ff 00 03 fc 2a f8 39 a7 fe d2 bf 07 2f fe 3e f8 d7 5e f8 c3 a8 78 5f 57 d7 fe 19 f8 87 f6 91 f0 cf 86 bc 39 f0 d3 59 f0 5c 56 fe 05 d4 f4 c9 74 cf 03 f8 Data Ascii: QOx>ZE$KdMGLd\u}qgyj4dc aLej4CZN8CeSgWa38~1d\|A.1Uvqqq>o-j9nVPf*9/>^x_W9Y\Vt
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: 16 44 ce 76 3a 8c 32 e1 87 06 bb 3d 87 f7 7f f2 53 c3 96 3b 12 a5 25 f5 7a 7a 49 fc 55 e2 9e fd 57 47 dd 74 7a 1f 66 fc 35 f0 2a de 6b 3a be b5 a9 de 69 bf d9 1a 9c 76 b6 6b 0b 19 2e 3c fb 78 a1 96 1b 88 e4 58 e3 60 55 d2 56 8d 96 01 72 10 6e 59 bc b3 85 3f c8 99 a6 77 38 d1 c2 e1 30 98 6a f5 b1 54 1c aa 39 5b 92 92 77 83 8f 24 fd e9 4d c5 c3 f9 52 6e dc ae d7 6b fa d7 11 c2 30 cd 2b cb 13 8e cd 70 b9 6e 12 51 8f 2c b9 1e 26 b4 95 9f 35 e9 29 d2 8c 23 2b a4 db a9 29 46 ce f0 ba 51 7f 5a 78 3b e1 af 87 a3 d0 64 f0 6f 83 7c 41 a4 68 7a 59 17 22 c3 45 f2 35 3d 2e 36 9e e6 4f 3a 58 ee 3c 45 38 d4 6f d2 2b 99 de 5f b4 cf 1c 51 4d e4 ca 62 86 5b 24 55 96 2f 0e bf 12 63 a1 8a 59 86 6d 92 e2 aa 55 b4 3d ae 31 54 58 87 6a 71 e5 8c a3 85 95 2c 35 38 ca 09 27 0b 55 Data Ascii: Dv:2=S;%zzIUWGtzf5*k:ivk.<xX`UVrnY?w80jT9[w$MRnk0+pnQ,&5)#+)FQZx;do\|AhzY"E5=.6O:X<E8o+_QMb[$U/cYmU=1TXjq,58'U
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: 51 af 4f 11 90 61 6a af 6d 08 d7 e5 5e ef b4 e6 ab 4e 2f 9a a3 52 fe d8 e2 cf da 25 f4 be e2 4c 87 88 78 17 3b c8 bc 2a c1 60 f8 bb 86 b3 cc 8b 30 8e 5f c1 f8 6c 36 61 fd 91 9d e5 f8 ec 9f 31 ab 81 c4 52 e2 0a ca 95 78 e1 b3 1c 5a a7 59 53 a8 a8 ce ac aa 4e 12 84 aa 29 7e 80 78 83 f6 e4 ff 00 82 a4 68 be 20 f8 15 fb 3d e8 5a 67 82 e7 d6 34 8d 13 49 7f 85 9a 5f 88 7c 33 a2 df 2e b9 69 e0 3f 87 be 3d f0 85 ae b5 75 a9 eb 5e 29 b6 f0 c6 a7 aa 58 e9 9a 85 ef 88 75 08 bc 46 4c 47 c4 fe 16 f0 ae a1 75 a4 a2 c3 f6 0d 57 fa 27 2e fa 4d 78 73 2e 05 ce 78 f1 f1 66 0e bf 09 70 95 5c 0e 07 3d cc 29 e5 b9 a5 6c 4e 55 88 c4 d5 c2 60 30 71 c4 e5 94 70 95 33 29 bc 45 6c c7 0b 1a 75 a8 e0 ea d0 aa dc a7 09 b8 50 c4 3a 7f e6 dd 6e 0a ce 7f b4 f0 b9 5c 32 fa f1 c7 e3 e3 52 Data Ascii: QOajm^N/R%Lx;*`0_l6a1RxZYSN)~xh =Zg4I_\|3.i?=u^)XuFLGuW'.Mxs.xfp\=)lNU`0qp3)EluP:n\2R
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: 37 da 55 60 36 a0 b0 13 79 b0 92 db 1c 3a ba 78 aa 38 5c 07 d7 65 ab 6d fb 97 4a f5 67 f0 42 ef 4b 79 bf d4 53 c0 e2 33 2c 74 72 fa 56 9c 55 14 a5 5e 6f 95 aa 14 ac bd a7 f8 ed af 27 5d 2f 63 a7 d7 3e 0d 78 59 e1 ba f0 d6 84 d7 17 bf 13 0c da 5c 9a 3e a1 ad eb 6d 1d 9e ac d3 cc 64 9a c2 d6 4f f4 6d 3a d7 54 16 b1 5c 4e ba 4d ec 62 e9 ad 82 5c 59 cf 73 17 99 24 3d 19 56 61 89 c4 ce 18 89 ce 3f 52 52 71 a8 a9 46 ee 0d ec 9b 7b bd 3a 77 3c 1e 20 c8 70 99 6c a7 83 85 36 f1 8a 14 ea 50 ab 5a b3 7e da 0e ee 4d 28 fb 89 be b1 96 a9 75 6e e7 a2 fc 29 fd 93 ec e7 b9 bd d4 fe 2d 78 96 c2 0b 4d 1d 27 91 7c 39 e1 ed 56 da e6 ef ec f6 f1 5d 5d dd 5f eb 77 b1 a4 9f d9 f6 f3 0b 2b b0 91 24 69 71 27 d9 a6 8c 5d db 49 14 71 bf e8 d4 31 12 9d 3a 6a 8c 24 a9 cb 48 b7 1e 54 Data Ascii: 7U`6y:x8\emJgBKyS3,trVU^o']/c>xY\>mdOm:T\NMb\Ys$=Va?RRqF{:w< pl6PZ~M(un)-xM'\|9V]]_w+$iq']Iq1:j$HT
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: 4b fd 6b 47 d2 ed ee 6e 7c 7d e2 bd 2b 45 d0 b5 3d 7f 44 91 f4 eb 3b a9 b4 ad 41 3f c2 4e 3b 95 6c 93 07 e2 06 5d 8e cf 73 1c 37 0c f8 af e2 36 4f 9a 71 9e 27 fe 21 b6 0b 19 95 64 9c 41 98 57 c2 f1 6d 6c 3d 1e 32 cc 33 37 9d 64 94 f0 f8 5c c7 1a e8 d1 e1 fc b3 30 c7 e3 70 b9 76 2e 9c f1 75 e3 0c 4e 1e 7f b3 64 f8 2a d8 fa b9 26 23 09 81 c3 d7 cc 38 7b 86 b3 08 65 38 4f f5 85 52 c7 e3 30 18 25 57 2d f6 8f 26 a3 49 51 c6 ca a4 f0 f4 67 2f ae 55 c2 c1 42 bc 6a c2 9a a7 19 54 a7 f8 e5 fb 2c 78 a3 c1 df 10 ff 00 65 0f db a7 52 fd ad be 06 fc 6a f1 5f 8a ec ff 00 6a 0f 12 4d 7d f0 73 e1 95 f7 8b 74 5f 8d 1a 78 49 be 14 5b dc 68 fe 02 b9 bb d7 34 3b 2b 7b fd 0e fb 52 d4 b5 8f 11 5a 41 32 6a af e1 f9 75 1b c8 cc 3a 7c ec 97 5f da 7e 33 e0 38 8f 87 3c 5a fa 3e e5 Data Ascii: KkGn\|}+E=D;A?N;l]s76Oq'!dAWml=237d\0pv.uNd*&#8{e8OR0%W-&IQg/UBjT,xeRj_jM}st_xI[h4;+{RZA2ju:\|_~38<Z>
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: dc 4e 57 2c d6 9a c1 cf 0f 5b 07 86 a3 95 d5 75 5d 69 d7 a7 15 1a 14 71 b8 5c 46 0b 1b 4e ba 51 fa e5 39 50 71 9a 9d 29 55 e1 bf 6b fb bf 10 cf f1 7f c4 c9 e2 7d 5f 4c d5 fc 41 61 61 a4 68 ba 8e a1 a6 db df 59 41 75 26 83 a7 43 a2 5a c9 25 a6 a0 b0 5d 43 70 6c ac 2d 8c 8a 74 fd 26 22 0a b4 1a 5d 94 2c 91 d7 57 82 18 7c 04 f8 17 25 a9 94 61 71 58 6c a7 11 5f 30 c7 60 f0 f5 ea d0 c5 4a 97 f6 86 36 ae 3a bc 63 5f 0b 2a b4 6a 53 58 9c 45 78 a6 b1 58 d9 a9 46 51 a9 8c af 51 4a 6b 5e 2b 86 2e 86 75 89 a7 8e 92 96 2e 9c 28 d3 aa fd 94 a8 3b 53 a5 0a 74 b9 a9 4a 34 e5 16 e9 46 12 d6 95 15 24 d4 95 28 26 a2 bf 3a a5 f1 3c 3a 16 b1 7b 63 ac 58 cf a8 e9 97 6d e6 f9 51 dd 45 6f 07 9a a3 62 f9 cf 3b 88 23 8c 06 60 67 91 25 78 43 b7 96 a0 b1 dd fd 5d 42 39 ae 27 27 86 Data Ascii: NW,[u]iq\FNQ9Pq)Uk}_LAaahYAu&CZ%]Cpl-t&"],W\|%aqXl_0`J6:c_*jSXExXFQQJk^+.u.(;StJ4F$(&:<:{cXmQEob;#`g%xC]B9''

Timestamp	Bytes transferred	Direction	Data
2025-01-10 04:22:04 UTC	566	OUT	GET /npm/vanilla-lazyload@17.5.0/dist/lazyload.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cineuserdad.ec/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 04:22:04 UTC	775	IN	HTTP/1.1 200 OK Connection: close Content-Length: 8292 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 17.5.0 X-JSD-Version-Type: version ETag: W/"2064-oi+c7JJTK/ZiiPmw9llPJzhqJ/I" Accept-Ranges: bytes Age: 1994147 Date: Fri, 10 Jan 2025 04:22:04 GMT X-Served-By: cache-fra-etou8220128-FRA, cache-nyc-kteb1890086-NYC X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-01-10 04:22:04 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 28 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 6e 7c 7c 73 65 6c 66 29 2e 4c 61 7a 79 4c 6f 61 64 3d 74 28 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 72 65 74 75 72 6e 20 6e 3d Data Ascii: !function(n,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(n="undefined"!=typeof globalThis?globalThis:n\|\|self).LazyLoad=t()}(this,(function(){"use strict";function n(){return n=
2025-01-10 04:22:04 UTC	1378	IN	Data Raw: 74 29 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 65 2c 69 3d 22 4c 61 7a 79 4c 6f 61 64 3a 3a 49 6e 69 74 69 61 6c 69 7a 65 64 22 2c 6f 3d 6e 65 77 20 6e 28 74 29 3b 74 72 79 7b 65 3d 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 69 2c 7b 64 65 74 61 69 6c 3a 7b 69 6e 73 74 61 6e 63 65 3a 6f 7d 7d 29 7d 63 61 74 63 68 28 6e 29 7b 28 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 29 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 28 69 2c 21 31 2c 21 31 2c 7b 69 6e 73 74 61 6e 63 65 3a 6f 7d 29 7d 77 69 6e 64 6f 77 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 65 29 7d 2c 6c 3d 22 73 72 63 22 2c 73 3d 22 73 72 63 73 65 74 22 2c 66 3d 22 73 69 7a 65 73 22 2c 64 3d 22 70 Data Ascii: t)},u=function(n,t){var e,i="LazyLoad::Initialized",o=new n(t);try{e=new CustomEvent(i,{detail:{instance:o}})}catch(n){(e=document.createEvent("CustomEvent")).initCustomEvent(i,!1,!1,{instance:o})}window.dispatchEvent(e)},l="src",s="srcset",f="sizes",d="p
2025-01-10 04:22:04 UTC	1378	IN	Data Raw: 7b 72 65 74 75 72 6e 21 21 6e 5b 5f 5d 7d 2c 55 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 5b 5f 5d 7d 2c 24 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 64 65 6c 65 74 65 20 6e 5b 5f 5d 7d 2c 71 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 69 66 28 21 53 28 6e 29 29 7b 76 61 72 20 65 3d 7b 7d 3b 74 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 5b 74 5d 3d 6e 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 29 7d 29 29 2c 6e 5b 5f 5d 3d 65 7d 7d 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 69 66 28 53 28 6e 29 29 7b 76 61 72 20 65 3d 55 28 6e 29 3b 74 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 65 3f 6e 2e 73 65 74 41 74 74 Data Ascii: {return!!n[_]},U=function(n){return n[_]},$=function(n){return delete n[_]},q=function(n,t){if(!S(n)){var e={};t.forEach((function(t){e[t]=n.getAttribute(t)})),n[_]=e}},H=function(n,t){if(S(n)){var e=U(n);t.forEach((function(t){!function(n,t,e){e?n.setAtt
2025-01-10 04:22:04 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 6e 6e 28 6e 29 7c 7c 28 6e 2e 6c 6c 45 76 4c 69 73 6e 72 73 3d 7b 7d 29 3b 76 61 72 20 69 3d 22 56 49 44 45 4f 22 3d 3d 3d 6e 2e 74 61 67 4e 61 6d 65 3f 22 6c 6f 61 64 65 64 64 61 74 61 22 3a 22 6c 6f 61 64 22 3b 59 28 6e 2c 69 2c 74 29 2c 59 28 6e 2c 22 65 72 72 6f 72 22 2c 65 29 7d 28 69 2c 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 21 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 2c 69 29 7b 76 61 72 20 6f 3d 77 28 74 29 3b 65 6e 28 74 2c 65 2c 69 29 2c 4e 28 74 2c 65 2e 63 6c 61 73 73 5f 6c 6f 61 64 65 64 29 2c 41 28 74 2c 76 29 2c 4f 28 65 2e 63 61 6c 6c 62 61 63 6b 5f 6c 6f 61 64 65 64 2c 74 2c 69 29 2c 6f 7c 7c 58 28 65 2c 69 29 7d 28 30 2c 6e 2c 74 2c 65 29 2c 74 6e 28 69 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 6f 29 Data Ascii: tion(n,t,e){nn(n)\|\|(n.llEvLisnrs={});var i="VIDEO"===n.tagName?"loadeddata":"load";Y(n,i,t),Y(n,"error",e)}(i,(function(o){!function(n,t,e,i){var o=w(t);en(t,e,i),N(t,e.class_loaded),A(t,v),O(e.callback_loaded,t,i),o\|\|X(e,i)}(0,n,t,e),tn(i)}),(function(o)
2025-01-10 04:22:04 UTC	1378	IN	Data Raw: 6c 6e 5b 6e 2e 74 61 67 4e 61 6d 65 5d 3b 74 3f 74 28 6e 29 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 53 28 6e 29 29 7b 76 61 72 20 74 3d 55 28 6e 29 3b 6e 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 3d 74 2e 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 7d 7d 28 6e 29 7d 29 28 6e 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 4c 28 6e 29 7c 7c 77 28 6e 29 7c 7c 28 43 28 6e 2c 74 2e 63 6c 61 73 73 5f 65 6e 74 65 72 65 64 29 2c 43 28 6e 2c 74 2e 63 6c 61 73 73 5f 65 78 69 74 65 64 29 2c 43 28 6e 2c 74 2e 63 6c 61 73 73 5f 61 70 70 6c 69 65 64 29 2c 43 28 6e 2c 74 2e 63 6c 61 73 73 5f 6c 6f 61 64 69 6e 67 29 2c 43 28 6e 2c 74 2e 63 6c 61 73 73 5f 6c 6f 61 64 65 64 29 2c 43 28 6e 2c 74 2e 63 6c 61 73 73 5f 65 72 72 6f 72 29 29 7d Data Ascii: ln[n.tagName];t?t(n):function(n){if(S(n)){var t=U(n);n.style.backgroundImage=t.backgroundImage}}(n)})(n),function(n,t){L(n)\|\|w(n)\|\|(C(n,t.class_entered),C(n,t.class_exited),C(n,t.class_applied),C(n,t.class_loading),C(n,t.class_loaded),C(n,t.class_error))}
2025-01-10 04:22:04 UTC	1378	IN	Data Raw: 62 73 65 72 76 65 72 3d 6e 65 77 20 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 5f 6e 28 65 2c 6e 2c 74 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 7b 72 6f 6f 74 3a 6e 2e 63 6f 6e 74 61 69 6e 65 72 3d 3d 3d 64 6f 63 75 6d 65 6e 74 3f 6e 75 6c 6c 3a 6e 2e 63 6f 6e 74 61 69 6e 65 72 2c 72 6f 6f 74 4d 61 72 67 69 6e 3a 6e 2e 74 68 72 65 73 68 6f 6c 64 73 7c 7c 6e 2e 74 68 72 65 73 68 6f 6c 64 2b 22 70 78 22 7d 7d 28 6e 29 29 29 7d 28 6f 2c 74 68 69 73 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 29 7b 74 26 26 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6f 6e 6c 69 6e 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 Data Ascii: bserver=new IntersectionObserver((function(e){_n(e,n,t)}),function(n){return{root:n.container===document?null:n.container,rootMargin:n.thresholds\|\|n.threshold+"px"}}(n)))}(o,this),function(n,e){t&&window.addEventListener("online",(function(){!function(n,t
2025-01-10 04:22:04 UTC	24	IN	Data Raw: 61 7a 79 4c 6f 61 64 4f 70 74 69 6f 6e 73 29 2c 68 6e 7d 29 29 3b 0d 0a Data Ascii: azyLoadOptions),hn}));

Timestamp	Bytes transferred	Direction	Data
2025-01-10 04:22:04 UTC	612	OUT	GET /off/img/hbo-max/hbo-220x330.jpg HTTP/1.1 Host: www.cineuserdad.ec Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cineuserdad.ec/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 04:22:04 UTC	923	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 04:22:04 GMT Content-Type: image/jpeg Content-Length: 83535 Connection: close Cache-Control: public, max-age=604800 expires: Fri, 17 Jan 2025 04:02:09 GMT last-modified: Mon, 21 Oct 2024 13:11:36 GMT CF-Cache-Status: HIT Age: 1131 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YQCQ12eoJ5chkJkIG5haixLrofqE3mxq6thP9V03X6KxPmHelMwvkrc9D%2FYkpvR6btaU4VvRakjcWTL6lo071TQBmUW692dnqMvB6Dv2Li2zIG8wKskOYERKSoNkmEKgS2Fn7Sk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff9e2480d30f78d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1611&min_rtt=1603&rtt_var=617&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2834&recv_bytes=1190&delivery_rate=1751649&cwnd=125&unsent_bytes=0&cid=c266ac611838e6c8&ts=142&x=0"
2025-01-10 04:22:04 UTC	446	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 01 4a 00 dc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFHHCCJ}!1AQa"q2
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fc 22 b0 43 21 50 41 07 19 18 75 2a 54 f4 24 75 cb 0e a3 d7 9e 72 2b fd 50 ae d4 53 6b e7 a6 df d3 db b1 f8 64 aa af 85 3d 6d df f3 7e 47 61 69 67 90 37 00 0f 51 c1 23 a7 a0 f7 ea 7b 7e 15 e4 d5 ad 6b db fa fd 4e 3a 95 3f 99 f7 fb bd Data Ascii: w!1AQaq"2B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?"C!PAuT$ur+PSkd=m~Gaig7Q#{~kN:?
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: dc 74 3c 63 e5 19 1d 33 dc 7d 41 cf 38 ec 01 35 e3 56 a8 97 7e d6 bf e5 fd 68 61 2a ae d2 8b 7b af eb 4e bf d5 ee 6e c3 61 81 f3 0c 82 01 fe 12 df 88 e8 07 3d 32 33 90 4f 6c 70 4e be bf d5 bf af e9 1e 75 79 a6 9d e5 7d fa ff 00 c1 ff 00 83 d8 b2 34 b8 87 cd b0 b3 60 f2 02 f0 0f 24 e3 bf 7c e7 3f 4e b8 c9 e2 67 b5 ed ae bb eb 63 c5 af 28 ab dd 2b d9 eb bd bf 13 36 6d 03 ed 24 b2 c9 b0 02 72 18 e0 1f f8 0f 23 a9 c6 78 e7 f3 1d 50 c7 fb 24 93 8d dd 96 da fe 3f 89 f2 f8 c8 fb 4e 6e 59 ec fa bd 3c 8a 13 68 4d 08 11 2c ab 95 00 9d c0 b0 cf b6 30 79 e7 af 18 c6 2b a6 18 ee 77 cc e3 fe 7f e4 7c ce 2a 3c 97 82 9f 77 b6 9f f0 4d cd 17 45 67 94 01 28 6c 63 23 03 07 d3 82 73 f8 63 ad 70 e3 b1 91 50 bf 2d 9e bd 4c 70 d7 73 fe 22 76 df b7 cb fa d3 b1 e8 70 69 0b 10 5c Data Ascii: t<c3}A85V~ha{Nna=23OlpNuy}4`$\|?Ngc(+6m$r#xP$?NnY<hM,0y+w\|<wMEg(lc#scpP-Lps"vpi\
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: 5a 5b 6e 99 7e 4b 8b 38 c3 13 c3 54 f0 33 a1 82 86 31 e2 be b8 a5 19 4b 95 d3 58 6a 11 aa a6 ed 28 de 9d db f6 ae ee 4a 1a c6 32 95 93 f6 f8 3f 84 b0 dc 5b 5b 31 a5 89 cc 27 81 58 3f a8 b8 49 47 9d 55 78 bc 44 a8 ca 0a f1 97 ef 2c bf 74 b4 84 a6 ed 39 c6 37 67 ea c6 a5 ff 00 04 34 f8 4f e1 eb 0f 15 5e ff 00 c3 46 78 97 4a 93 46 f0 be a1 ac 25 b7 88 bc 21 67 65 27 86 a1 b0 f1 07 88 b4 38 7c 73 e3 67 94 d8 5c 59 fc 39 d5 13 48 5d 4a c3 59 1a 7d 86 8d 36 97 a6 78 a6 ff 00 4c f1 66 b2 34 eb 18 35 1f cd a5 e2 ce 65 89 95 08 ff 00 63 50 9a a9 5e 34 f9 a8 e2 65 25 5d ce 8d 1a af 0b 85 4b 9e 32 c6 53 f6 9c 93 a7 cf 3a 8a 73 c3 c2 a6 1e 9f 3c 9c 3f 48 9f 82 f9 5e 1a 9e 2a 7f eb 16 26 93 a3 86 9d 6e 5c 46 12 10 78 68 c2 be 22 8c 71 b8 d6 f9 25 0c be af b1 f6 90 ad Data Ascii: Z[n~K8T31KXj(J2?[[1'X?IGUxD,t97g4O^FxJF%!ge'8\|sg\Y9H]JY}6xLf45ecP^4e%]K2S:s<?H^*&n\Fxh"q%
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: 81 ea 79 ea 07 39 eb 5d d4 6a bd 35 fc 6f e9 ff 00 0f d4 f4 e1 51 34 ba df cf fa e8 73 57 36 0d 28 60 df 28 e8 15 41 5e a7 a1 3f 5f c3 bf 73 5e 95 2a f6 b3 5a be af cc ef a3 27 2d 1b d3 a7 fc 13 0d f4 4c b1 24 64 9f 46 ff 00 03 fe 46 2b b6 38 cb 2d ed e4 7a 10 87 ba af 7f 97 fc 39 8f 65 6a ac 46 57 1c f2 7a 8e 31 8e 33 8c 7e 1f 8e 39 1e b5 7a 8d 27 af e5 fd 6b a1 f9 dd 4a b7 6e fb 7f 5d 7b ff 00 91 db e9 d6 0b b4 1f 28 b7 4f bb 81 fc ff 00 0f cb d4 e6 bc 2c 45 77 aa e6 4b 5d bf 0e 96 30 94 97 66 fd 3f a7 fd 7e 1d be 99 68 aa ca 9b 1b a8 27 82 08 1c 63 9c 9c f4 f7 e7 f1 af 13 13 55 b4 dd d2 d3 d4 e7 75 56 ca ff 00 8d d7 6f f8 36 3d 37 4b b7 fb aa aa 46 47 47 38 27 23 3c 75 e0 76 c6 3f c7 e7 31 35 37 6d df 7d ba 07 b7 b5 ed db af 5f ea fa f9 fc 8e 9a 2b 55 Data Ascii: y9]j5oQ4sW6(`(A^?_s^*Z'-L$dFF+8-z9ejFWz13~9z'kJn]{(O,EwK]0f?~h'cUuVo6=7KFGG8'#<uv?157m}_+U
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: c6 bf a4 0f 11 52 cb 30 1c 3f 9d 60 b1 19 96 5d 97 e5 b8 2c d2 be 45 8d cd e8 61 eb 72 62 16 59 9c e6 75 b2 7c 56 4f 88 c5 73 b5 93 e2 f1 55 e3 2c 54 b0 af 10 fe 1f 82 fe 8c 1c 19 87 f1 4f c6 bc bb 8d b3 bc 76 6b e1 7f 83 99 2c f1 f8 fc eb 2c c4 d2 c1 63 31 38 cc 5e 5f 4b 39 c2 e0 2b d6 a6 a7 4b eb b9 66 5b 4b 32 86 67 43 0e 93 fe d1 c3 50 a5 28 d1 58 85 49 6a 78 9f f6 7f f0 1e 9d f1 97 e0 fd 96 8b 6d 7b 71 f0 b7 e2 ad 9d ad ed 9c 12 ea 33 c9 74 af 05 a0 9b 50 b6 4b d5 76 ba 44 6b 7b cd 1e f8 48 66 95 84 97 f3 43 14 a1 22 08 93 e1 ff 00 d3 0b c4 fc f7 e8 d3 f4 8a cf b8 9a 39 26 5f e3 bf 80 58 fc cf 2e cd f0 d4 b2 95 4b 2b 5c d8 e9 61 b2 ac 55 6c ae 55 dc 26 e3 8a c0 e7 d9 5d 68 42 74 a3 27 96 53 ae d4 67 5d b7 cf c6 5f 47 2e 05 ca 7c 74 f0 53 26 c8 e5 9a Data Ascii: R0?`],EarbYu\|VOsU,TOvk,,c18^_K9+Kf[K2gCP(XIjxm{q3tPKvDk{HfC"9&_X.K+\aUlU&]hBt'Sg]_G.\|tS&
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: 56 6f c4 12 a3 88 c6 e1 a7 88 c5 66 18 fc 1e 3f 2f c3 e2 21 2c 14 2a e3 e8 d1 a9 82 8e 15 63 b0 f4 70 b8 5c 74 29 d5 c5 3f 8c 97 d1 93 c3 8f 0f f8 7b 86 33 2c 5f 02 78 8b e3 0e 63 9f 61 be bb 8f cc 38 37 31 a5 0c b7 28 a7 52 96 1a bc 21 86 c2 61 b1 78 3c 56 22 85 48 e2 5c 70 55 a7 f5 8f ad 2c 35 5a b5 ab e1 79 e1 40 f8 ff 00 c2 ff 00 b2 07 ec c1 f1 07 e2 b6 bf a3 ea 9e 09 f8 f5 e1 0b 9b 9f 02 58 78 b7 4f f0 3f c4 3b 0d 5b c2 10 69 37 b6 da b5 95 ae bb fd 89 ad 27 95 71 e2 0b 1b 27 d5 f4 cb 39 85 c2 cb 6f 05 e2 b4 f6 1a be af 15 db 43 a6 79 5e 21 fd 32 3e 93 fc 0f e1 97 0d f1 17 f6 ff 00 82 79 f5 7a dc 65 9a 70 ed 7e 2e e0 4c cf 28 e2 fa 19 be 1a 96 5e b1 58 18 e6 99 4e 0b 15 88 c1 64 58 d9 7b 0a f8 aa 32 a1 5a 95 5c 5e 16 b4 69 e2 72 ac b2 a6 11 4f 1d f4 Data Ascii: Vof?/!,*cp\t)?{3,_xca871(R!ax<V"H\pU,5Zy@XxO?;[i7'q'9oCy^!2>yzep~.L(^XNdX{2Z\^irO
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: f5 69 ad c4 e3 6c b1 db dc 5c aa 3e d9 18 1e 9f a4 3f d1 23 80 f8 8b c1 8e 3a e1 ef 06 3c 27 f0 ef 87 fc 42 ce b0 b9 2e 13 27 cc 32 ec 9f 26 e1 ca ea 85 0e 28 c8 b3 2c ce 8c f3 6a 58 7a 4e 8d 1a b9 76 03 13 cf 09 4f 96 b4 a3 0a 76 72 94 4f 17 c1 9f a4 e7 18 64 9e 28 70 ae 6b e2 7f 88 dc 61 99 f0 46 5f 5b 33 ab 9c 60 b1 38 dc 7e 71 4a 72 a9 91 e6 98 6c 04 bf b3 e3 29 ca b4 a9 e6 35 f0 b3 8b 51 6e 9b 5e d5 d9 41 b3 d0 3e 1d 7e d0 9e 3e d1 fe 23 5e ea de 2b f1 2e bb af f8 12 7f 19 f8 e4 c3 a2 5c 45 61 21 83 c1 3a 8f 89 35 c3 e1 04 58 22 86 1c df 69 1e 1c 9b 44 0f 1c 97 2e f2 c9 6b 34 37 33 cd 2c 92 cc df 87 f1 47 ec f1 e0 5c d7 e8 e1 81 ca b2 3e 0b ca b8 7b e9 07 85 e0 fe 1d af 5f 3e a5 c4 19 b5 7c 16 3b 8c b2 ea 38 2a b9 f6 0e b7 b6 cd 2b e4 b0 c1 e7 75 29 Data Ascii: il\>?#:<'B.'2&(,jXzNvOvrOd(pkaF_[3`8~qJrl)5Qn^A>~>#^+.\Ea!:5X"iD.k473,G\>{_>\|;8*+u)
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: 30 8f 41 d7 35 9f 0e 59 5d df 5b 68 9e 1a b0 b7 58 ee 34 9d 56 19 75 58 6d e7 d3 35 13 6e d7 a0 b4 02 e1 8c 7c dc 4a 5b 97 c0 af a1 c6 0f 2f f1 73 e9 25 c5 9e 3a 78 7d c0 fc 69 90 f1 e7 1d cf 3e f0 e3 15 9f 61 f2 5e 25 c5 d3 c0 62 f8 8f 8d 33 1c c6 bc f0 b3 c3 49 64 f5 f1 b8 4c cf 22 9e 26 94 69 d1 55 a7 46 30 f6 71 fa b2 8c 7d 1f 18 be 95 75 f1 7e 1d 78 1b 90 78 3b c6 dc 51 c3 19 b7 0a f0 9a ca 78 eb 0d 95 bc cb 24 a1 2c 66 1f 25 e1 6c 16 02 84 31 15 27 ff 00 0a 34 70 98 9c 0e 71 0a 35 23 52 af b3 84 dc dc e5 ed d4 a5 d1 f8 23 e3 de 93 a2 db 7c 1b 3e 2e d4 7c 5d af ea be 11 d3 be 22 5a f8 b7 56 d4 24 93 5a d4 2e 25 f1 1d dc 57 1a 21 4d 43 51 d4 e4 bd d4 d2 0b 78 22 b4 2d 34 9b ed a2 8e 08 95 4c 68 36 7f 2f 78 a1 f4 00 f1 93 39 e2 1f 1a 9f 00 70 9f 06 e5 Data Ascii: 0A5Y][hX4VuXm5n\|J[/s%:x}i>a^%b3IdL"&iUF0q}u~xx;Qx$,f%l1'4pq5#R#\|>.\|]"ZV$Z.%W!MCQx"-4Lh6/x9p
2025-01-10 04:22:04 UTC	1369	IN	Data Raw: e5 6e eb ef d5 fc 8c 1e 29 af 8e 3c d6 ea b4 6f fa fc 0e b2 df 61 da 46 4e 40 e0 8c e3 a0 c1 3d f8 c7 4e 47 23 8e fe 4c d4 b6 fe bd 7f 33 cf c4 62 d7 46 ff 00 af 53 7a d5 17 23 92 4f 1f c3 fa f4 1d b3 9c 71 f9 d7 1d 56 ec fa 7a bf e9 6f dc f1 aa 62 92 be bb bf eb cc e9 6d 09 42 a4 6e 52 08 ed f5 ec 73 9f 5e 9f 4a f2 ab 59 de f6 7a 6f 73 86 a6 31 2d 9b 5f 3d 57 9f e1 eb 73 ac b1 96 43 b7 71 cf 4c 16 c6 79 1e 98 e3 1e bf fe b3 e4 56 8a 57 b6 9e 5a ff 00 5a fd fa 1c d2 c6 36 9e b7 e9 e7 fd 79 1d cd 85 b4 92 44 0f 96 49 20 e1 87 cc 79 18 eb cf 1d 3d 7b f6 e2 bc 3c 45 45 19 3b 3b 77 5d 3f 2f f2 33 95 77 28 fa fd ff 00 e5 f8 99 7a be bb e1 7d 02 43 1e b5 ac db 5a dc 22 79 8d 00 2d 34 d1 02 32 8d 2c 50 a4 8d 0a c8 3e e9 97 62 b7 de 5c 8e 4f 9d 5b 32 a5 46 f1 72 Data Ascii: n)<oaFN@=NG#L3bFSz#OqVzobmBnRs^JYzos1-_=WsCqLyVWZZ6yDI y={<EE;;w]?/3w(z}CZ"y-42,P>b\O[2Fr

Timestamp	Bytes transferred	Direction	Data
2025-01-10 04:22:04 UTC	617	OUT	GET /t/p/w342//3yELRp1h8ngfTgWdeiozaiaMBnV.jpg HTTP/1.1 Host: image.tmdb.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cineuserdad.ec/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 04:22:05 UTC	683	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 04:22:04 GMT Content-Type: image/jpeg Content-Length: 41727 Connection: close Server: BunnyCDN-DE1-752 CDN-PullZone: 775336 CDN-Uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf CDN-RequestCountryCode: US Cache-Control: public, max-age=31919000 ETag: "66e6cd29-a2ff" Last-Modified: Sun, 15 Sep 2024 12:03:53 GMT CDN-StorageServer: NY-427 CDN-RequestPullSuccess: True CDN-FileServer: 857 Perma-Cache: HIT CDN-ProxyVer: 1.06 CDN-RequestPullCode: 200 CDN-CachedAt: 01/10/2025 03:25:23 CDN-EdgeStorageId: 1047 CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: e666cc6ec2e917b45ae47a7d63baf6cd CDN-Cache: HIT Accept-Ranges: bytes
2025-01-10 04:22:05 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 07 07 07 07 07 07 08 08 08 08 0b 0b 0a 0b 0b 10 0e 0d 0d 0e 10 18 11 12 11 12 11 18 24 16 1a 16 16 1a 16 24 20 26 1f 1d 1f 26 20 39 2d 27 27 2d 39 42 37 34 37 42 4f 47 47 4f 64 5f 64 83 83 b0 01 07 07 07 07 07 07 08 08 08 08 0b 0b 0a 0b 0b 10 0e 0d 0d 0e 10 18 11 12 11 12 11 18 24 16 1a 16 16 1a 16 24 20 26 1f 1d 1f 26 20 39 2d 27 27 2d 39 42 37 34 37 42 4f 47 47 4f 64 5f 64 83 83 b0 ff c2 00 11 08 02 01 01 56 03 01 22 00 02 11 01 03 11 01 ff c4 00 35 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 05 06 03 04 00 02 07 01 08 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 03 04 01 02 05 00 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 e7 d2 d4 cf 6f e1 ed e1 13 68 32 a9 ac Data Ascii: JFIF$$ && 9-''-9B747BOGGOd_d$$ && 9-''-9B747BOGGOd_dV"5oh2
2025-01-10 04:22:05 UTC	16384	IN	Data Raw: 80 fe d9 2b 17 37 e8 bb b2 b0 70 85 ff 00 b7 73 af 9f c4 72 1d 36 13 e8 9a fb 43 90 c5 59 7b 9b 30 44 07 50 9f 04 67 dc f0 fe 44 55 26 a8 ed 31 bb f6 87 af 67 f5 5d da 78 99 47 8a b1 9a e3 d7 09 fd d1 dd 9a fe 13 af ea 8f ff 00 4b 8f 2e c2 c1 c6 1b d1 62 ea ec 14 46 02 c3 6e 4b c9 52 1c 13 66 f1 24 ca d4 85 d8 c3 a9 5e 28 70 c7 ea 8f 5e ab b4 d8 5d 96 bd de 9b 70 36 4e bc 8a 65 cf 7b c6 06 05 5f 75 ac 6e b9 d9 21 81 54 b2 6b cd b3 9c 68 3d d9 38 a6 b1 be ce c6 c9 6f 7b ba bd 9e fd a5 3d d8 10 09 07 bb f8 82 b3 67 bf b3 06 2e d2 24 54 1d 55 9d 95 9f b4 7b a7 b9 8c 7c 17 53 42 85 2e 86 78 cc ec 3b 31 79 9f d1 56 e3 49 8e 68 11 6b 79 c1 f3 8c e2 ac 89 ba e0 6b 4a 26 87 5a db 38 fd a3 fc ff 00 f0 13 37 ec 4e fc 60 e0 7e ab 07 82 d7 75 08 91 65 63 0e 73 be 88 Data Ascii: +7psr6CY{0DPgDU&1g]xGK.bFnKRf$^(p^]p6Ne{_un!Tkh=8o{=g.$TU{\|SB.x;1yVIhkykJ&Z87N`~uecs
2025-01-10 04:22:05 UTC	8959	IN	Data Raw: e5 8a 20 bc b3 3d 44 28 56 6a 28 38 3a 97 70 af c1 32 b6 45 d1 c7 82 69 e2 01 a6 fc c3 af 1d d3 32 52 d1 e3 3e 73 34 9f b9 fb 27 3f 99 a7 c9 3f 0e 7f 1c 9b 61 f9 84 fc 27 f1 df 97 fb 4d 71 f9 1f d9 3f ea 3a 7f 8c fe 97 ea 7e 34 7e 2b f9 97 fe ff 00 b7 f8 df b7 3f 31 9b 93 f0 1f b6 6a fc 7f 0f 5f e5 6f f5 37 fe 0f e1 7f 08 46 e9 fb 59 f9 6f ea 7e 3b f8 9f a7 3f ff c4 00 2d 11 00 03 00 02 02 01 02 05 04 02 02 03 00 00 00 00 01 02 03 00 04 05 11 12 13 21 06 10 14 22 31 15 20 33 41 32 34 23 51 16 42 61 ff da 00 08 01 02 01 01 08 00 0d 9b 3c d7 1b a7 65 85 de d3 49 1a 92 bb db 04 55 40 fc 76 3d b1 b3 af 6f 90 c1 fb 7b c2 72 b5 48 cd a9 49 fc 55 af b1 46 9e bb b9 77 67 6f 60 0f 43 b3 9b df 14 72 ab bf 59 42 8f 7b 03 7a fc 37 b1 b7 c8 eb 18 5d 16 a2 9e 4c 3f 60 Data Ascii: =D(Vj(8:p2Ei2R>s4'??a'Mq?:~4~+?1j_o7FYo~;?-!"1 3A24#QBa<eIU@v=o{rHIUFwgo`CrYB{z7]L?`

Timestamp	Bytes transferred	Direction	Data
2025-01-10 04:22:04 UTC	527	OUT	GET /a1fbae7b.js HTTP/1.1 Host: cdn.dj2550.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cineuserdad.ec/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 04:22:05 UTC	382	IN	HTTP/1.1 200 Date: Fri, 10 Jan 2025 04:22:04 GMT Content-Type: text/javascript Content-Length: 37528 Connection: close etag: "0027037ef3ef78c7940701e2eaccc5030" X-77-NZT: EggBqZb/tgFBDAElE8IuAbcCFwsA X-77-NZT-Ray: 15b3c7114fcb8e636ca08067df2c6238 X-77-Cache: HIT X-77-Age: 726786 Vary: Accept-Encoding Server: CDN77-Turbo X-77-POP: frankfurtDE Accept-Ranges: bytes
2025-01-10 04:22:05 UTC	16002	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 78 2c 61 75 2c 71 29 7b 76 61 72 20 61 6f 3d 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2d 5f 22 3b 76 61 72 20 59 3d 22 3d 22 3b 66 75 6e 63 74 69 6f 6e 20 49 28 61 4c 2c 61 49 2c 61 4a 29 7b 76 61 72 20 61 4d 3d 22 22 3b 76 61 72 20 61 4b 3b 66 6f 72 28 61 4b 3d 30 3b 61 4b 3c 3d 61 49 2d 33 3b 61 4b 2b 3d 33 29 7b 61 4d 2b 3d 61 4a 2e 63 68 61 72 41 74 28 61 4c 2e 63 68 61 72 43 6f 64 65 41 74 28 61 4b 29 3e 3e 3e 32 29 3b 61 4d 2b 3d 61 4a 2e 63 68 61 72 41 74 28 28 28 61 4c 2e 63 68 61 72 43 6f 64 65 41 74 28 61 4b 29 26 33 29 3c 3c 34 29 7c 28 61 4c 2e 63 68 61 72 43 6f 64 65 Data Ascii: (function(x,au,q){var ao="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";var Y="=";function I(aL,aI,aJ){var aM="";var aK;for(aK=0;aK<=aI-3;aK+=3){aM+=aJ.charAt(aL.charCodeAt(aK)>>>2);aM+=aJ.charAt(((aL.charCodeAt(aK)&3)<<4)\|(aL.charCode
2025-01-10 04:22:05 UTC	16384	IN	Data Raw: 72 20 61 4c 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 69 66 28 61 4f 2e 73 62 29 7b 61 4c 2e 73 61 6e 64 62 6f 78 3d 61 4f 2e 73 62 7d 69 66 28 61 4f 2e 66 63 29 7b 61 4c 2e 77 69 64 74 68 3d 22 31 30 30 25 22 3b 61 4c 2e 68 65 69 67 68 74 3d 22 31 30 30 25 22 7d 65 6c 73 65 7b 61 4c 2e 77 69 64 74 68 3d 28 61 4f 2e 77 26 26 28 61 4f 2e 77 3e 30 29 29 3f 28 61 4f 2e 77 2b 22 70 78 22 29 3a 22 31 30 30 25 22 3b 69 66 28 61 4f 2e 68 3e 3d 30 29 7b 61 4c 2e 68 65 69 67 68 74 3d 61 4f 2e 68 2b 22 70 78 22 7d 7d 61 4c 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 62 6c 6f 63 6b 22 3b 61 4c 2e 66 72 61 6d 65 42 6f 72 64 65 72 3d 22 30 22 3b 61 4c 2e 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3b 44 28 Data Ascii: r aL=document.createElement("iframe");if(aO.sb){aL.sandbox=aO.sb}if(aO.fc){aL.width="100%";aL.height="100%"}else{aL.width=(aO.w&&(aO.w>0))?(aO.w+"px"):"100%";if(aO.h>=0){aL.height=aO.h+"px"}}aL.style.display="block";aL.frameBorder="0";aL.scrolling="no";D(
2025-01-10 04:22:05 UTC	5142	IN	Data Raw: 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 3b 6b 2e 63 6f 6d 6d 65 6e 74 3d 67 2c 6b 2e 63 68 61 72 73 3d 66 2c 6b 2e 73 74 61 72 74 54 61 67 3d 6a 2c 6b 2e 61 74 6f 6d 69 63 54 61 67 3d 70 2c 6b 2e 65 6e 64 54 61 67 3d 77 3b 76 61 72 20 6d 3d 64 28 34 29 2c 68 3d 7b 73 74 61 72 74 54 61 67 3a 2f 5e 3c 28 5b 5c 2d 41 2d 5a 61 2d 7a 30 2d 39 5f 5d 2b 29 28 28 3f 3a 5c 73 Data Ascii: tor?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e};k.comment=g,k.chars=f,k.startTag=j,k.atomicTag=p,k.endTag=w;var m=d(4),h={startTag:/^<([\-A-Za-z0-9_]+)((?:\s

Timestamp	Bytes transferred	Direction	Data
2025-01-10 04:22:05 UTC	590	OUT	GET /wp-content/litespeed/js/b92a77939bf9a123197a8d9290e15281.js?ver=0b536 HTTP/1.1 Host: www.cineuserdad.ec Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cineuserdad.ec/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 04:22:05 UTC	854	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 04:22:05 GMT Content-Type: text/javascript Content-Length: 29 Connection: close last-modified: Fri, 10 Jan 2025 04:02:09 GMT CF-Cache-Status: HIT Age: 1194 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U0trqpbyyM%2BezmhnWRUey8sxGz5JHXI0e%2BYPNuyEIMDyN8wXDM0jmcs9FvPpKEUxEuK5e9HqU%2FRMfwMQt8ifXI2fBPrNX%2Ffg83Hp5t6gHLOJylee3R8smg2ZBjredYLI1Es%2B7pc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff9e24c1a7a7c9c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2093&min_rtt=2055&rtt_var=798&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1168&delivery_rate=1420924&cwnd=252&unsent_bytes=0&cid=64776739ca663684&ts=156&x=0"
2025-01-10 04:22:05 UTC	29	IN	Data Raw: 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 6e 6f 20 74 6f 72 6f 6e 69 74 65 73 22 29 0a 3b Data Ascii: console.log("no toronites");

Timestamp	Bytes transferred	Direction	Data
2025-01-10 04:22:05 UTC	590	OUT	GET /wp-content/litespeed/js/69d5dfdc9296314e6c46fda59887838f.js?ver=50836 HTTP/1.1 Host: www.cineuserdad.ec Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cineuserdad.ec/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 04:22:05 UTC	861	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 04:22:05 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close last-modified: Fri, 10 Jan 2025 02:58:29 GMT vary: Accept-Encoding CF-Cache-Status: HIT Age: 1131 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IRRyCs87eWtnAtUWC199l7g4kN08ezK8CCg9MlMP%2Fwb%2F5j3Eym1dCeatuGrMUcjL2yw%2Be9IzNhIBvaoSPU1Kdhp0blmwVTHf%2BnxPw3kwGmDV6r43UpsOM4qEsRRjKP80ryTo7ow%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff9e24d5fcd4239-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1745&min_rtt=1741&rtt_var=662&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1168&delivery_rate=1643218&cwnd=232&unsent_bytes=0&cid=78f2029618d8a220&ts=160&x=0"
2025-01-10 04:22:05 UTC	508	IN	Data Raw: 62 30 33 0d 0a 63 6f 6e 73 74 20 67 65 74 3d 65 3d 3e 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 29 3b 63 6f 6e 73 74 20 67 65 74 41 6c 6c 3d 65 3d 3e 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 67 65 74 28 22 23 6f 70 65 6e 5f 6d 65 6e 75 22 29 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 65 3d 3e 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 67 65 74 28 22 23 6d 65 6e 75 5f 63 6f 6e 74 61 69 6e 65 72 22 29 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 6f 70 65 6e 22 29 7d 2c 21 31 29 3b 67 65 74 28 22 23 63 6c 6f 73 65 5f 6d 65 6e 75 22 29 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 65 3d 3e 7b 65 2e Data Ascii: b03const get=e=>document.querySelector(e);const getAll=e=>document.querySelectorAll(e);get("#open_menu").addEventListener("click",e=>{e.preventDefault();get("#menu_container").classList.add("open")},!1);get("#close_menu").addEventListener("click",e=>{e.
2025-01-10 04:22:05 UTC	1369	IN	Data Raw: 6f 6e 20 73 65 74 43 6f 6f 6b 69 65 28 6e 61 6d 65 2c 76 61 6c 75 65 2c 6d 69 6e 73 29 7b 76 61 72 20 65 78 70 69 72 65 73 3d 22 22 3b 69 66 28 6d 69 6e 73 29 7b 76 61 72 20 64 61 74 65 3d 6e 65 77 20 44 61 74 65 28 29 3b 64 61 74 65 2e 73 65 74 54 69 6d 65 28 64 61 74 65 2e 67 65 74 54 69 6d 65 28 29 2b 28 6d 69 6e 73 2a 36 30 2a 31 30 30 30 29 29 3b 65 78 70 69 72 65 73 3d 22 3b 20 65 78 70 69 72 65 73 3d 22 2b 64 61 74 65 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 7d 0a 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 6e 61 6d 65 2b 22 3d 22 2b 28 76 61 6c 75 65 7c 7c 22 22 29 2b 65 78 70 69 72 65 73 2b 22 3b 20 70 61 74 68 3d 2f 22 7d 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 43 6f 6f 6b 69 65 28 6e 61 6d 65 29 7b 76 61 72 20 6e 61 6d 65 45 51 3d 6e 61 6d Data Ascii: on setCookie(name,value,mins){var expires="";if(mins){var date=new Date();date.setTime(date.getTime()+(mins601000));expires="; expires="+date.toUTCString()}document.cookie=name+"="+(value\|\|"")+expires+"; path=/"}function getCookie(name){var nameEQ=nam
2025-01-10 04:22:05 UTC	949	IN	Data Raw: 6e 65 6c 5f 6f 6e 6c 69 6e 65 22 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 27 6e 6f 6e 65 27 3b 67 65 74 28 22 23 70 61 6e 65 6c 5f 64 65 73 63 61 72 67 61 22 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 27 6e 6f 6e 65 27 7d 0a 67 65 74 41 6c 6c 28 22 2e 64 6f 6f 70 6c 61 79 5f 70 6c 61 79 65 72 5f 6f 70 74 69 6f 6e 22 29 2e 66 6f 72 45 61 63 68 28 61 3d 3e 7b 69 66 28 21 61 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 72 65 61 64 79 22 29 29 7b 61 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 72 65 61 64 79 22 29 3b 61 2e 6f 6e 63 6c 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 74 68 69 73 2e 69 6e 6e 65 72 48 54 4d 4c 29 3b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 67 65 Data Ascii: nel_online").style.display='none';get("#panel_descarga").style.display='none'}getAll(".dooplay_player_option").forEach(a=>{if(!a.classList.contains("ready")){a.classList.add("ready");a.onclick=function(e){console.log(this.innerHTML);e.preventDefault();ge
2025-01-10 04:22:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-01-10 04:22:05 UTC	349	OUT	GET /a1fbae7b.js HTTP/1.1 Host: cdn.dj2550.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 04:22:06 UTC	382	IN	HTTP/1.1 200 Date: Fri, 10 Jan 2025 04:22:06 GMT Content-Type: text/javascript Content-Length: 37528 Connection: close etag: "0027037ef3ef78c7940701e2eaccc5030" X-77-NZT: EggBqZb/tgFBDAElE8IuAbcEFwsA X-77-NZT-Ray: 15b3c7111ecbee766ea080671005e600 X-77-Cache: HIT X-77-Age: 726788 Vary: Accept-Encoding Server: CDN77-Turbo X-77-POP: frankfurtDE Accept-Ranges: bytes
2025-01-10 04:22:06 UTC	16002	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 78 2c 61 75 2c 71 29 7b 76 61 72 20 61 6f 3d 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2d 5f 22 3b 76 61 72 20 59 3d 22 3d 22 3b 66 75 6e 63 74 69 6f 6e 20 49 28 61 4c 2c 61 49 2c 61 4a 29 7b 76 61 72 20 61 4d 3d 22 22 3b 76 61 72 20 61 4b 3b 66 6f 72 28 61 4b 3d 30 3b 61 4b 3c 3d 61 49 2d 33 3b 61 4b 2b 3d 33 29 7b 61 4d 2b 3d 61 4a 2e 63 68 61 72 41 74 28 61 4c 2e 63 68 61 72 43 6f 64 65 41 74 28 61 4b 29 3e 3e 3e 32 29 3b 61 4d 2b 3d 61 4a 2e 63 68 61 72 41 74 28 28 28 61 4c 2e 63 68 61 72 43 6f 64 65 41 74 28 61 4b 29 26 33 29 3c 3c 34 29 7c 28 61 4c 2e 63 68 61 72 43 6f 64 65 Data Ascii: (function(x,au,q){var ao="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";var Y="=";function I(aL,aI,aJ){var aM="";var aK;for(aK=0;aK<=aI-3;aK+=3){aM+=aJ.charAt(aL.charCodeAt(aK)>>>2);aM+=aJ.charAt(((aL.charCodeAt(aK)&3)<<4)\|(aL.charCode
2025-01-10 04:22:06 UTC	16384	IN	Data Raw: 72 20 61 4c 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 69 66 28 61 4f 2e 73 62 29 7b 61 4c 2e 73 61 6e 64 62 6f 78 3d 61 4f 2e 73 62 7d 69 66 28 61 4f 2e 66 63 29 7b 61 4c 2e 77 69 64 74 68 3d 22 31 30 30 25 22 3b 61 4c 2e 68 65 69 67 68 74 3d 22 31 30 30 25 22 7d 65 6c 73 65 7b 61 4c 2e 77 69 64 74 68 3d 28 61 4f 2e 77 26 26 28 61 4f 2e 77 3e 30 29 29 3f 28 61 4f 2e 77 2b 22 70 78 22 29 3a 22 31 30 30 25 22 3b 69 66 28 61 4f 2e 68 3e 3d 30 29 7b 61 4c 2e 68 65 69 67 68 74 3d 61 4f 2e 68 2b 22 70 78 22 7d 7d 61 4c 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 62 6c 6f 63 6b 22 3b 61 4c 2e 66 72 61 6d 65 42 6f 72 64 65 72 3d 22 30 22 3b 61 4c 2e 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3b 44 28 Data Ascii: r aL=document.createElement("iframe");if(aO.sb){aL.sandbox=aO.sb}if(aO.fc){aL.width="100%";aL.height="100%"}else{aL.width=(aO.w&&(aO.w>0))?(aO.w+"px"):"100%";if(aO.h>=0){aL.height=aO.h+"px"}}aL.style.display="block";aL.frameBorder="0";aL.scrolling="no";D(
2025-01-10 04:22:06 UTC	5142	IN	Data Raw: 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 3b 6b 2e 63 6f 6d 6d 65 6e 74 3d 67 2c 6b 2e 63 68 61 72 73 3d 66 2c 6b 2e 73 74 61 72 74 54 61 67 3d 6a 2c 6b 2e 61 74 6f 6d 69 63 54 61 67 3d 70 2c 6b 2e 65 6e 64 54 61 67 3d 77 3b 76 61 72 20 6d 3d 64 28 34 29 2c 68 3d 7b 73 74 61 72 74 54 61 67 3a 2f 5e 3c 28 5b 5c 2d 41 2d 5a 61 2d 7a 30 2d 39 5f 5d 2b 29 28 28 3f 3a 5c 73 Data Ascii: tor?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e};k.comment=g,k.chars=f,k.startTag=j,k.atomicTag=p,k.endTag=w;var m=d(4),h={startTag:/^<([\-A-Za-z0-9_]+)((?:\s