| primeflix.lol/_next/static/media/8888a3826f4a3af4-s.p.woff2 |  76.76.21.21 | 200 OK | 7.7 kB |
URL GET HTTP/2primeflix.lol/_next/static/media/8888a3826f4a3af4-s.p.woff2 IP76.76.21.21:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subject*.primeflix.lol Fingerprint34:44:5E:C4:CE:25:48:19:29:42:B3:84:2F:3F:70:0C:9E:E8:DE:41 ValidityFri, 19 Apr 2024 06:26:37 GMT - Thu, 18 Jul 2024 06:26:36 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7740, version 1.0 Hash792477d09826b11d1e5a611162c9797a bba020c0fd0426079872fdd7929a260b414845cd 289e0afc8be731a86822349e54557296f145926496bd2138db1bac0db77f77a2
GET /_next/static/media/8888a3826f4a3af4-s.p.woff2 HTTP/1.1
Host: primeflix.lol
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://primeflix.lol/movie/560016/stream
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 456128
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="8888a3826f4a3af4-s.p.woff2"
content-type: font/woff2
date: Wed, 24 Apr 2024 19:31:53 GMT
etag: "792477d09826b11d1e5a611162c9797a"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/media/8888a3826f4a3af4-s.p.woff2
x-vercel-cache: HIT
x-vercel-id: arn1::2trsg-1713987113026-29075f97919d
content-length: 7740
X-Firefox-Spdy: h2
|
|
| primeflix.lol/_next/static/media/eafabf029ad39a43-s.p.woff2 | 76.76.21.21 | 200 OK | 7.9 kB |
URL GET HTTP/2primeflix.lol/_next/static/media/eafabf029ad39a43-s.p.woff2 IP76.76.21.21:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subject*.primeflix.lol Fingerprint34:44:5E:C4:CE:25:48:19:29:42:B3:84:2F:3F:70:0C:9E:E8:DE:41 ValidityFri, 19 Apr 2024 06:26:37 GMT - Thu, 18 Jul 2024 06:26:36 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7900, version 1.0 Hash43751174b6b810eb169101a20d8c26f8 7e48d54b1df1d3f657fc90227590308183ff9ddc 3dc5d0c52428fe1696264907a1054ebbaac07f8cbe45832c105f819c2ae397c0
GET /_next/static/media/eafabf029ad39a43-s.p.woff2 HTTP/1.1
Host: primeflix.lol
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://primeflix.lol/movie/560016/stream
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 456128
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="eafabf029ad39a43-s.p.woff2"
content-type: font/woff2
date: Wed, 24 Apr 2024 19:31:53 GMT
etag: "43751174b6b810eb169101a20d8c26f8"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/media/eafabf029ad39a43-s.p.woff2
x-vercel-cache: HIT
x-vercel-id: arn1::h4t4n-1713987113028-0bf86bf31765
content-length: 7900
X-Firefox-Spdy: h2
|
|
| primeflix.lol/_next/static/media/7108afb8b1381ad1-s.p.woff2 | 76.76.21.21 | 200 OK | 7.5 kB |
URL GET HTTP/2primeflix.lol/_next/static/media/7108afb8b1381ad1-s.p.woff2 IP76.76.21.21:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subject*.primeflix.lol Fingerprint34:44:5E:C4:CE:25:48:19:29:42:B3:84:2F:3F:70:0C:9E:E8:DE:41 ValidityFri, 19 Apr 2024 06:26:37 GMT - Thu, 18 Jul 2024 06:26:36 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7496, version 1.0 Hashd5a9cbc34d22ffd5c4eb636dcca02f5d bdaae7fd3c0796641336aeaf79c59de984f231a4 ba433c0e3e2ccac378976ceb97c0c25dcbc81ec0989a0e111c504000bbf14fd2
GET /_next/static/media/7108afb8b1381ad1-s.p.woff2 HTTP/1.1
Host: primeflix.lol
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://primeflix.lol/movie/560016/stream
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 456128
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="7108afb8b1381ad1-s.p.woff2"
content-type: font/woff2
date: Wed, 24 Apr 2024 19:31:53 GMT
etag: "d5a9cbc34d22ffd5c4eb636dcca02f5d"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/media/7108afb8b1381ad1-s.p.woff2
x-vercel-cache: HIT
x-vercel-id: arn1::pjdv6-1713987113026-3e87340c3c69
content-length: 7496
X-Firefox-Spdy: h2
|
|
| primeflix.lol/_next/static/chunks/main-app-89dfec3aa10af464.js | 76.76.21.21 | 200 OK | 462 B |
URL GET HTTP/2primeflix.lol/_next/static/chunks/main-app-89dfec3aa10af464.js IP76.76.21.21:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subject*.primeflix.lol Fingerprint34:44:5E:C4:CE:25:48:19:29:42:B3:84:2F:3F:70:0C:9E:E8:DE:41 ValidityFri, 19 Apr 2024 06:26:37 GMT - Thu, 18 Jul 2024 06:26:36 GMT
File typeASCII text, with very long lines (462), with no line terminators Hash26e3e343f4ddbeea4deb04831427fc30 7b93dbcdf8e534b0c8e3cc40fc0951e13968e69f 599208d876cc41134ee1402e37c8b37c4f730763f9cfd12d3b05811e5551e869
GET /_next/static/chunks/main-app-89dfec3aa10af464.js HTTP/1.1
Host: primeflix.lol
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/movie/560016/stream
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 456128
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="main-app-89dfec3aa10af464.js"
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 19:31:53 GMT
etag: "26e3e343f4ddbeea4deb04831427fc30"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/main-app-89dfec3aa10af464.js
x-vercel-cache: HIT
x-vercel-id: arn1::x4lfd-1713987113036-69e02c39f545
content-length: 462
X-Firefox-Spdy: h2
|
|
| primeflix.lol/_next/static/media/9e82d62334b205f4-s.p.woff2 | 76.76.21.21 | 200 OK | 7.9 kB |
URL GET HTTP/2primeflix.lol/_next/static/media/9e82d62334b205f4-s.p.woff2 IP76.76.21.21:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subject*.primeflix.lol Fingerprint34:44:5E:C4:CE:25:48:19:29:42:B3:84:2F:3F:70:0C:9E:E8:DE:41 ValidityFri, 19 Apr 2024 06:26:37 GMT - Thu, 18 Jul 2024 06:26:36 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7896, version 1.0 Hash1c2ea932e7620e3a752301d0e54d3d91 371d31b930b895d8c45757a63e7ae4924106d1d4 244dd57da310b3fe9a789ef87179bb433b8628016354c4ce80896fd7e4e53968
GET /_next/static/media/9e82d62334b205f4-s.p.woff2 HTTP/1.1
Host: primeflix.lol
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://primeflix.lol/movie/560016/stream
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 456128
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="9e82d62334b205f4-s.p.woff2"
content-type: font/woff2
date: Wed, 24 Apr 2024 19:31:53 GMT
etag: "1c2ea932e7620e3a752301d0e54d3d91"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/media/9e82d62334b205f4-s.p.woff2
x-vercel-cache: HIT
x-vercel-id: arn1::wgjkx-1713987113028-fc1e1630865c
content-length: 7896
X-Firefox-Spdy: h2
|
|
| primeflix.lol/_next/static/media/4c285fdca692ea22-s.p.woff2 | 76.76.21.21 | 200 OK | 7.8 kB |
URL GET HTTP/2primeflix.lol/_next/static/media/4c285fdca692ea22-s.p.woff2 IP76.76.21.21:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subject*.primeflix.lol Fingerprint34:44:5E:C4:CE:25:48:19:29:42:B3:84:2F:3F:70:0C:9E:E8:DE:41 ValidityFri, 19 Apr 2024 06:26:37 GMT - Thu, 18 Jul 2024 06:26:36 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7844, version 1.0 Hash42d3308e3aca8742731f63154187bdd7 69002807427be874f7b46a98f8a611d2c5c5f52b 643e38d8c288a1da34a14a68a5012441929108d50054414ce8cc33fad36a2354
GET /_next/static/media/4c285fdca692ea22-s.p.woff2 HTTP/1.1
Host: primeflix.lol
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://primeflix.lol/movie/560016/stream
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 456128
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="4c285fdca692ea22-s.p.woff2"
content-type: font/woff2
date: Wed, 24 Apr 2024 19:31:53 GMT
etag: "42d3308e3aca8742731f63154187bdd7"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/media/4c285fdca692ea22-s.p.woff2
x-vercel-cache: HIT
x-vercel-id: arn1::47gw5-1713987113025-17d3fffcb170
content-length: 7844
X-Firefox-Spdy: h2
|
|
| primeflix.lol/_next/static/chunks/8dc5345f-59ab206b15081b67.js | 76.76.21.21 | 200 OK | 684 B |
URL GET HTTP/2primeflix.lol/_next/static/chunks/8dc5345f-59ab206b15081b67.js IP76.76.21.21:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subject*.primeflix.lol Fingerprint34:44:5E:C4:CE:25:48:19:29:42:B3:84:2F:3F:70:0C:9E:E8:DE:41 ValidityFri, 19 Apr 2024 06:26:37 GMT - Thu, 18 Jul 2024 06:26:36 GMT
File typeJavaScript source, ASCII text, with very long lines (684), with no line terminators Hash511ba7411ca41c0d40e0556923192ca0 d08930312e8f3c542aa6a8b780a016df8557792f afbe8383bf057257dd46e88c07df6ac29113846d21a0e94d0ad86b417982c980
GET /_next/static/chunks/8dc5345f-59ab206b15081b67.js HTTP/1.1
Host: primeflix.lol
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/movie/560016/stream
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 456128
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="8dc5345f-59ab206b15081b67.js"
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 19:31:53 GMT
etag: "511ba7411ca41c0d40e0556923192ca0"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/8dc5345f-59ab206b15081b67.js
x-vercel-cache: HIT
x-vercel-id: arn1::q8hd7-1713987113564-13ae1fc9c4f8
content-length: 684
X-Firefox-Spdy: h2
|
|
| primeflix.lol/movie/560016?_rsc=1qrqq | 76.76.21.21 | 200 OK | 626 B |
URL GET HTTP/2primeflix.lol/movie/560016?_rsc=1qrqq IP76.76.21.21:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subject*.primeflix.lol Fingerprint34:44:5E:C4:CE:25:48:19:29:42:B3:84:2F:3F:70:0C:9E:E8:DE:41 ValidityFri, 19 Apr 2024 06:26:37 GMT - Thu, 18 Jul 2024 06:26:36 GMT
File typegzip compressed data, from Unix Hash6674847d23907759faa2b30971823ce5 adc3df0c0f91880fc43f9a0965575537962604c6 4e97ecb6a0d9b5519d961007c42bed1c56ec51bb85b20ba0b882d60dc8006dc9
GET /movie/560016?_rsc=1qrqq HTTP/1.1
Host: primeflix.lol
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://primeflix.lol/movie/560016/stream
RSC: 1
Next-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22movie%22%2C%7B%22children%22%3A%5B%5B%22slug%22%2C%22560016%22%2C%22d%22%5D%2C%7B%22children%22%3A%5B%22stream%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%5D%7D%5D%7D%5D%7D%5D%7D%2Cnull%2Cnull%2Ctrue%5D
Next-Router-Prefetch: 1
Next-Url: /movie/560016/stream
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
age: 0
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
content-encoding: gzip
content-type: text/x-component
date: Wed, 24 Apr 2024 19:31:53 GMT
server: Vercel
strict-transport-security: max-age=63072000
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Url
x-matched-path: /movie/[slug].rsc
x-powered-by: Next.js
x-vercel-cache: MISS
x-vercel-execution-region: iad1
x-vercel-id: arn1::iad1::rgzg7-1713987113483-ae2e4e09cc3c
X-Firefox-Spdy: h2
|
|
| vidsrc.pro/static/uwu.png?v2.3.06 | 172.67.177.66 | 200 OK | 24 kB |
URL GET HTTP/3vidsrc.pro/static/uwu.png?v2.3.06 IP172.67.177.66:443
Requested byhttps://vidsrc.pro/embed/movie/560016 CertificateIssuerGoogle Trust Services LLC Subjectvidsrc.pro Fingerprint5C:93:BF:68:D8:2F:29:AA:01:0A:36:62:7E:52:D9:9E:C7:7A:0C:E6 ValidityFri, 05 Apr 2024 20:55:57 GMT - Thu, 04 Jul 2024 20:55:56 GMT
File typeJavaScript source, ASCII text, with very long lines (14801), with CRLF line terminators Hash9ced79c10617f995523173e460dc7d18 24c313846942d5379de6b9f15395281ccc5fca3b eff500ba82158498297f679c9456b2d3428a16f78e67d75d5bc84852a86a832f
GET /static/uwu.png?v2.3.06 HTTP/1.1
Host: vidsrc.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vidsrc.pro/embed/movie/560016
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 19:31:53 GMT
content-type: image/png
content-length: 24274
cache-control: public, max-age=2678400
last-modified: Wed, 24 Apr 2024 09:19:51 GMT
etag: W/"5ed2-18f0f677ad8"
cf-cache-status: HIT
age: 20080
accept-ranges: bytes
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879884245df9b517-OSL
alt-svc: h3=":443"; ma=86400
|
|
| vidsrc.pro/static/SpaceGrotesk.woff2 | 172.67.177.66 | 200 OK | 49 kB |
URL GET HTTP/3vidsrc.pro/static/SpaceGrotesk.woff2 IP172.67.177.66:443
Requested byhttps://vidsrc.pro/embed/movie/560016 CertificateIssuerGoogle Trust Services LLC Subjectvidsrc.pro Fingerprint5C:93:BF:68:D8:2F:29:AA:01:0A:36:62:7E:52:D9:9E:C7:7A:0C:E6 ValidityFri, 05 Apr 2024 20:55:57 GMT - Thu, 04 Jul 2024 20:55:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 49256, version 2.0 Hash0c62a8f36c27538912ccbbd5de747927 b4509f04a2bed1ec04e7f9ff4dc33c69e8e263ec 8e085aa438094f11487a836652edd5c054fa6a96f63fc7c282105ee3a4b08c07
GET /static/SpaceGrotesk.woff2 HTTP/1.1
Host: vidsrc.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://vidsrc.pro/static/embed.css?v2.3.06
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 19:31:53 GMT
content-type: font/woff2
content-length: 49256
cache-control: public, max-age=2678400
last-modified: Sun, 28 Jan 2024 15:13:51 GMT
etag: W/"c068-18d50a24f98"
cf-cache-status: HIT
age: 268264
accept-ranges: bytes
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879884246dfdb517-OSL
alt-svc: h3=":443"; ma=86400
|
|
| vidsrc.pro/static/player.ui.js?v2.3.06 | 172.67.177.66 | 200 OK | 20 kB |
URL GET HTTP/3vidsrc.pro/static/player.ui.js?v2.3.06 IP172.67.177.66:443
Requested byhttps://vidsrc.pro/embed/movie/560016 CertificateIssuerGoogle Trust Services LLC Subjectvidsrc.pro Fingerprint5C:93:BF:68:D8:2F:29:AA:01:0A:36:62:7E:52:D9:9E:C7:7A:0C:E6 ValidityFri, 05 Apr 2024 20:55:57 GMT - Thu, 04 Jul 2024 20:55:56 GMT
File typeJavaScript source, ASCII text, with very long lines (62289), with no line terminators Hash7f8b87cd2c33bf0e17953bb989c78845 2d6779e2cfd11716be74e5433dbc05ad92cf3907 54c3b85d75ef4bd378d6c12c421b1609b700f75534add05f41d9dbbf7d1898a5
GET /static/player.ui.js?v2.3.06 HTTP/1.1
Host: vidsrc.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vidsrc.pro/embed/movie/560016
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 19:31:53 GMT
content-type: application/javascript; charset=UTF-8
cf-bgj: minify
cf-polished: origSize=62291
cache-control: public, max-age=2678400
etag: W/"f353-18f10611548"
last-modified: Wed, 24 Apr 2024 13:52:29 GMT
cf-cache-status: HIT
age: 20081
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879884235c55b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| acrasiatickles.com/rrh2nLs7Tkiis/77110 |  23.109.170.77 | 200 OK | 20 B |
URL GET HTTP/1.1acrasiatickles.com/rrh2nLs7Tkiis/77110 IP23.109.170.77:443
Requested byhttps://vidsrc.pro/embed/movie/560016 CertificateIssuerLet's Encrypt Subjectacrasiatickles.com Fingerprint5E:40:0D:6A:1D:CE:F7:AF:44:B2:B1:1F:34:19:80:40:37:F7:93:99 ValidityThu, 21 Mar 2024 00:30:40 GMT - Wed, 19 Jun 2024 00:30:39 GMT
File typegzip compressed data, from Unix Hash7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /rrh2nLs7Tkiis/77110 HTTP/1.1
Host: acrasiatickles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vidsrc.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 19:31:53 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://vidsrc.pro
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9jUtug0AQRPljJ4akJQ7gIxgUjL3MJivfAQ0zDZ4Ypq1mjJ3bZxIp2dUrPVV5nhcUL%2BAvyRrCm6hhe1R9s5dYojyUVVW%2BHSrZ151o%2BlJVTVnvYK3n1opuRBvBap4E29YuEWwGNMhatpIUZvDqrL%2FmYuhuIog7FkZlEE%2FOGDNIO6b7jFyEEBkxIaQfmrGnhzPEJzEEx72L2rjo7yCguQjzJ4hP2twe%2BSbx8jzx4Pk6CtsTT61WDuOBhULw32ElhcWB%2BAtShfPF0hWARtX%2B%2B7%2Bf8fizBonCRUuHZM%2FI38wATrY%3D; expires=Thu, 25-Apr-2024 19:31:53 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Thu, 25-Apr-2024 19:31:53 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| moonoafy.net/zone?pub=0&zone_id=7134626&is_mobile=false&domain=primeflix.lol&var=&ymid=&var_3=&tg=0&sw=3.1.503 |  139.45.197.250 | 200 OK | 880 B |
URL GET HTTP/2moonoafy.net/zone?pub=0&zone_id=7134626&is_mobile=false&domain=primeflix.lol&var=&ymid=&var_3=&tg=0&sw=3.1.503 IP139.45.197.250:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
Hash63a204daaa1ae68c38b5a6d8cf0f0758 b8f7b8880d278da896ae5dc2951278b06a877cb3 60eebe5c5150cf279fb6532b36bf2e1126c70bda3a7bec2af2ccbc12e2d3dc51
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /zone?pub=0&zone_id=7134626&is_mobile=false&domain=primeflix.lol&var=&ymid=&var_3=&tg=0&sw=3.1.503 HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://primeflix.lol/
Origin: https://primeflix.lol
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:53 GMT
content-type: application/json; charset=utf-8
content-length: 880
x-trace-id: f62eb01e817e398c430ab97ffa1ea046
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://primeflix.lol
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| cameesse.net/1?z=7134624&oo=1&oaid=008048578a544489e5e3e53da05cb7e8 | 139.45.197.242 | 200 OK | 967 B |
URL GET HTTP/2cameesse.net/1?z=7134624&oo=1&oaid=008048578a544489e5e3e53da05cb7e8 IP139.45.197.242:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectcameesse.net Fingerprint40:09:71:B1:17:F8:74:15:9B:3D:0A:95:73:15:74:D6:05:A5:5B:44 ValidityFri, 22 Mar 2024 19:24:17 GMT - Thu, 20 Jun 2024 19:24:16 GMT
Hash0744e801f879b29ff25ad7b140c8f4e6 3f665fcde5c80f6a532841f5767e98974301bf49 5f713e09bce5d36e56ac3165a18c7fc6d1766b9ceb041ca614e72b7879ca7b85
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /1?z=7134624&oo=1&oaid=008048578a544489e5e3e53da05cb7e8 HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://primeflix.lol
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/
Cookie: scm=1; OAID=04004820f427400de4952e1dfe748cca; oaidts=1713987113
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:53 GMT
content-type: application/json
content-length: 967
access-control-allow-credentials: true
access-control-allow-origin: https://primeflix.lol
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: 8bd4b6d5fd922bd3f7c9759f0c006aa6
access-control-expose-headers: X-Sc
set-cookie: OAID=008048578a544489e5e3e53da05cb7e8; expires=Thu, 24 Apr 2025 19:31:53 GMT; secure; SameSite=None
oaidts=1713987113; expires=Thu, 24 Apr 2025 19:31:53 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| tzegilo.com/stattag.js | 172.67.193.52 | 200 OK | 7.9 kB |
IP172.67.193.52:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerGoogle Trust Services LLC Subjecttzegilo.com Fingerprint28:2E:D0:DF:04:78:60:5A:D2:5B:1F:EA:59:80:9C:2F:89:C1:9D:D1 ValiditySat, 30 Mar 2024 15:54:48 GMT - Fri, 28 Jun 2024 15:54:47 GMT
File typeJavaScript source, ASCII text, with very long lines (18486) Hash70ebd404c2e1e7bad13998538b56887c 86e57af8ba3cfc2c004da3311835f6b54ba6d848 d71ea61938136a384e4c53c5a7a3c36e68fcc70a68bae691e270987d5d2eb11f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 19:31:53 GMT
content-type: application/javascript
last-modified: Wed, 07 Feb 2024 12:51:13 GMT
etag: W/"65c37cc1-4ac0"
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 4949
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FhhjbYDYM%2B7XkxFD%2FV0%2BEk4i5VmDCvfWIUeAjN%2FrKGO0h9XO%2BbdkfGjI5im3j4PXn%2FqyetRDpSbi75RovT7xXDYnHhtb067p0Xy8JPUmbTzV807pq6OT5JfXiJgiqQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87988426496a56ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| moonoafy.net/custom | 139.45.197.250 | 200 OK | 0 B |
IP139.45.197.250:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /custom HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://primeflix.lol/
Origin: https://primeflix.lol
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:54 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://primeflix.lol
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| moonoafy.net/custom | 139.45.197.250 | 200 OK | 39 B |
IP139.45.197.250:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /custom HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://primeflix.lol/
Content-Type: application/json
Content-Length: 382
Origin: https://primeflix.lol
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:54 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 50339e947863fee6bcf4045555f883be
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://primeflix.lol
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=b20f16d7-4858-4dc7-a9f8-4c2349a35ec5 | 139.45.195.254 | 200 OK | 12 B |
URL POST HTTP/1.1fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=b20f16d7-4858-4dc7-a9f8-4c2349a35ec5 IP139.45.195.254:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerSectigo Limited Subjectfleraprt.com Fingerprint32:DB:C5:24:21:ED:1D:C3:40:C3:46:9F:CF:EE:98:4D:72:29:4C:3C ValidityTue, 09 Jan 2024 00:00:00 GMT - Mon, 13 Jan 2025 23:59:59 GMT
Hashadb4650bfc9d2a73d4dd69583b0ceb14 1ce399d6e936232aaf2192cd7903a279c5015f22 21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=b20f16d7-4858-4dc7-a9f8-4c2349a35ec5 HTTP/1.1
Host: fleraprt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1754
Origin: https://primeflix.lol
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Wed, 24 Apr 2024 19:31:54 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://primeflix.lol
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
|
|
| amunfezanttor.com/event | 139.45.197.250 | 200 OK | 0 B |
IP139.45.197.250:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectamunfezanttor.com FingerprintAB:2C:60:54:FF:D7:D6:23:0E:87:1A:98:EC:94:B3:9B:29:1A:F3:AA ValidityWed, 10 Apr 2024 19:04:12 GMT - Tue, 09 Jul 2024 19:04:11 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://primeflix.lol/
Origin: https://primeflix.lol
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:54 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://primeflix.lol
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| cameesse.net/9?z=7134624&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&sah=1024&drf=&hil=1&ist=0&oaid=008048578a544489e5e3e53da05cb7e8 | 139.45.197.242 | 200 OK | 0 B |
URL POST HTTP/2cameesse.net/9?z=7134624&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&sah=1024&drf=&hil=1&ist=0&oaid=008048578a544489e5e3e53da05cb7e8 IP139.45.197.242:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectcameesse.net Fingerprint40:09:71:B1:17:F8:74:15:9B:3D:0A:95:73:15:74:D6:05:A5:5B:44 ValidityFri, 22 Mar 2024 19:24:17 GMT - Thu, 20 Jun 2024 19:24:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /9?z=7134624&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&sah=1024&drf=&hil=1&ist=0&oaid=008048578a544489e5e3e53da05cb7e8 HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://primeflix.lol/
Origin: https://primeflix.lol
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Wed, 24 Apr 2024 19:31:54 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://primeflix.lol
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| moonoafy.net/custom | 139.45.197.250 | 200 OK | 0 B |
IP139.45.197.250:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /custom HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://primeflix.lol/
Origin: https://primeflix.lol
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:54 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://primeflix.lol
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| moonoafy.net/event | 139.45.197.250 | 200 OK | 0 B |
IP139.45.197.250:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /event HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://primeflix.lol/
Origin: https://primeflix.lol
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:54 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://primeflix.lol
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| gishejuy.com/500/7134623?excludes=&oaid=008048578a544489e5e3e53da05cb7e8&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 | 139.45.197.242 | 200 OK | 0 B |
URL GET HTTP/2gishejuy.com/500/7134623?excludes=&oaid=008048578a544489e5e3e53da05cb7e8&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 IP139.45.197.242:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectgishejuy.com Fingerprint0E:1A:AC:78:15:75:C8:D7:77:E9:9F:1E:8F:A6:05:8C:F6:CA:AC:80 ValidityTue, 02 Apr 2024 05:15:48 GMT - Mon, 01 Jul 2024 05:15:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /500/7134623?excludes=&oaid=008048578a544489e5e3e53da05cb7e8&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://primeflix.lol/
Origin: https://primeflix.lol
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:54 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://primeflix.lol
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-allow-credentials: true
access-control-max-age: 600
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| moonoafy.net/pfe/current/universal.min.js?v=3.1.503 | 139.45.197.250 | 200 OK | 34 kB |
URL GET HTTP/2moonoafy.net/pfe/current/universal.min.js?v=3.1.503 IP139.45.197.250:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashc477f1ea9593fa9326d6fc8e20994228 8ae5d43b84f54ee3e6d274f8044216508f760353 c65624592aa8d64c535088860e5748bc4cc3f79b4fa929ff39d623e117acd6c6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pfe/current/universal.min.js?v=3.1.503 HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://primeflix.lol/
Origin: https://primeflix.lol
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:53 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 14:40:04 GMT
etag: W/"662919c4-15efa"
access-control-allow-origin: https://primeflix.lol
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| amunfezanttor.com/event | 139.45.197.250 | 200 OK | 94 B |
IP139.45.197.250:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectamunfezanttor.com FingerprintAB:2C:60:54:FF:D7:D6:23:0E:87:1A:98:EC:94:B3:9B:29:1A:F3:AA ValidityWed, 10 Apr 2024 19:04:12 GMT - Tue, 09 Jul 2024 19:04:11 GMT
Hash4bfcfcd3d1ef54b1a2a454e6c959e8bd 474a029cbca93d3fcad7566ed4e8ec62ce06cbde 4d700d115fc6679b6d115e5e0690ab2acbec141244d1d29808557687943985d7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://primeflix.lol/
Content-Type: application/json
Content-Length: 517
Origin: https://primeflix.lol
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:54 GMT
content-type: application/json; charset=utf-8
content-length: 94
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://primeflix.lol
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| moonoafy.net/custom | 139.45.197.250 | 200 OK | 39 B |
IP139.45.197.250:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /custom HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://primeflix.lol/
Content-Type: application/json
Content-Length: 736
Origin: https://primeflix.lol
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:54 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: fd77161e54ac52744e8dc4c1c6d707c0
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://primeflix.lol
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| moonoafy.net/event | 139.45.197.250 | 200 OK | 94 B |
IP139.45.197.250:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
Hash3abefe6a9cdb4d3fc0e805388bc8a4e6 aa8af6cf2bc715278d0822011b1ff647476d9594 c726172be02be134ad9b98081b8112468124093a4c9f00587a99896729d79632
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /event HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://primeflix.lol/
Content-Type: application/json
Content-Length: 1655
Origin: https://primeflix.lol
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:54 GMT
content-type: application/json; charset=utf-8
content-length: 94
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://primeflix.lol
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| cameesse.net/9?z=7134624&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&sah=1024&drf=&hil=1&ist=0&oaid=008048578a544489e5e3e53da05cb7e8 | 139.45.197.242 | 200 OK | 2.7 kB |
URL POST HTTP/2cameesse.net/9?z=7134624&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&sah=1024&drf=&hil=1&ist=0&oaid=008048578a544489e5e3e53da05cb7e8 IP139.45.197.242:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectcameesse.net Fingerprint40:09:71:B1:17:F8:74:15:9B:3D:0A:95:73:15:74:D6:05:A5:5B:44 ValidityFri, 22 Mar 2024 19:24:17 GMT - Thu, 20 Jun 2024 19:24:16 GMT
Hashe32ab7525e484f2d70406d219bdb6511 9bd9a3edd4ef0cc7807100a767ef291f11976250 ffcb581cea24f11f389951db3295bf5bc9c91b35df3363278f97085a051da7b4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /9?z=7134624&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&sah=1024&drf=&hil=1&ist=0&oaid=008048578a544489e5e3e53da05cb7e8 HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 84
Origin: https://primeflix.lol
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/
Cookie: scm=1; OAID=008048578a544489e5e3e53da05cb7e8; oaidts=1713987113
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:54 GMT
content-type: application/json
access-control-allow-credentials: true
access-control-allow-origin: https://primeflix.lol
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: 42c3ffa8db7b80acd573bd9120affbb5
access-control-expose-headers: X-Sc
set-cookie: OAID=008048578a544489e5e3e53da05cb7e8; expires=Thu, 24 Apr 2025 19:31:54 GMT; secure; SameSite=None
oaidts=1713987113; expires=Thu, 24 Apr 2025 19:31:54 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cameesse.net/121?rnd=992785903&z=7134624&b=20830638&c=8121703&var=&varid=0&d=https%3A%2F%2Fsecuredpeacomm.com%2Fin%2F%3Ftg%3Dhttps%3A%2F%2Ftrack.jefytrack.com%2F145f6684-c379-407a-a2eb-922622a713e1%26zoneid%3D7134624%26campaignid%3D8121703%26carrier%3D%7Bcarrier%7D%26connectiontype%3D%7Bconnection.type%7D%26isp%3D%7Bisp%7D%26cost%3D%7Bcost%7D%26visitor_id%3D807083059812769792&cln={CELL_NUMBER}&btp=7&rb=E0tRc3FJ0H7KuRZ-ptmcxM2Zz0Y3kloS2ZpbZTRLS1BxGcs6LqYU_vTbDpjOVoL5lw01yS--doBm_Wp-nNLDSFx6RET7bcK4GdVyfDBUD2EXNeDurJ99v5uDIC28IesHvhb2sfCgr__T70osWOR5OKcBLd-C-DsBTvDspp8u9NnDWI36Yjss-TiCwyqrIxZdkRkjep2C9dZSiNhb6rZINAGpapZ5C0FPgfDAofPkz4Y6OVBvNfi4IKVaHkCeeu9pHHUTJqChLaIC8x0JzNgTING__85uFE_O94glfRGZDc852VvAvk1oWsmbObcZ9dyonN1beOxFHKG5zKio8qpzwwI4IFScd1oeocXhBLe1jI2-pI3TWzS4xA1YQYGU6qwFK5JKeEIB5PLPK4jRAd1TRy8EkF4pxHa1RNUXCAdtI1aV9nEjvA7ycUshMxXOcqR9aOOxhx6m67pxgwdMXtivRx05Lkq1s1qlP3Iq_tx-5PAxCWKQj-htJ0G-eQdBj1WzunmEAKyk27VZ7edlb1t2ooMgslHtS54MVDPzW9IhD-8cRnOMolr0wVk-pdxUvBqyjVvk7bsQxGPvp35Ul0vTaXyGujfozH3-0emJDtEGrDZxTaW7l98iag==&bag=ydU9kaAfa6I=&ruid=12499f02-3156-4e72-8426-027d2d30a4eb&subid=807083059812769792 | 139.45.197.242 | 302 Found | 0 B |
URL GET HTTP/2cameesse.net/121?rnd=992785903&z=7134624&b=20830638&c=8121703&var=&varid=0&d=https%3A%2F%2Fsecuredpeacomm.com%2Fin%2F%3Ftg%3Dhttps%3A%2F%2Ftrack.jefytrack.com%2F145f6684-c379-407a-a2eb-922622a713e1%26zoneid%3D7134624%26campaignid%3D8121703%26carrier%3D%7Bcarrier%7D%26connectiontype%3D%7Bconnection.type%7D%26isp%3D%7Bisp%7D%26cost%3D%7Bcost%7D%26visitor_id%3D807083059812769792&cln={CELL_NUMBER}&btp=7&rb=E0tRc3FJ0H7KuRZ-ptmcxM2Zz0Y3kloS2ZpbZTRLS1BxGcs6LqYU_vTbDpjOVoL5lw01yS--doBm_Wp-nNLDSFx6RET7bcK4GdVyfDBUD2EXNeDurJ99v5uDIC28IesHvhb2sfCgr__T70osWOR5OKcBLd-C-DsBTvDspp8u9NnDWI36Yjss-TiCwyqrIxZdkRkjep2C9dZSiNhb6rZINAGpapZ5C0FPgfDAofPkz4Y6OVBvNfi4IKVaHkCeeu9pHHUTJqChLaIC8x0JzNgTING__85uFE_O94glfRGZDc852VvAvk1oWsmbObcZ9dyonN1beOxFHKG5zKio8qpzwwI4IFScd1oeocXhBLe1jI2-pI3TWzS4xA1YQYGU6qwFK5JKeEIB5PLPK4jRAd1TRy8EkF4pxHa1RNUXCAdtI1aV9nEjvA7ycUshMxXOcqR9aOOxhx6m67pxgwdMXtivRx05Lkq1s1qlP3Iq_tx-5PAxCWKQj-htJ0G-eQdBj1WzunmEAKyk27VZ7edlb1t2ooMgslHtS54MVDPzW9IhD-8cRnOMolr0wVk-pdxUvBqyjVvk7bsQxGPvp35Ul0vTaXyGujfozH3-0emJDtEGrDZxTaW7l98iag==&bag=ydU9kaAfa6I=&ruid=12499f02-3156-4e72-8426-027d2d30a4eb&subid=807083059812769792 IP139.45.197.242:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectcameesse.net Fingerprint40:09:71:B1:17:F8:74:15:9B:3D:0A:95:73:15:74:D6:05:A5:5B:44 ValidityFri, 22 Mar 2024 19:24:17 GMT - Thu, 20 Jun 2024 19:24:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /121?rnd=992785903&z=7134624&b=20830638&c=8121703&var=&varid=0&d=https%3A%2F%2Fsecuredpeacomm.com%2Fin%2F%3Ftg%3Dhttps%3A%2F%2Ftrack.jefytrack.com%2F145f6684-c379-407a-a2eb-922622a713e1%26zoneid%3D7134624%26campaignid%3D8121703%26carrier%3D%7Bcarrier%7D%26connectiontype%3D%7Bconnection.type%7D%26isp%3D%7Bisp%7D%26cost%3D%7Bcost%7D%26visitor_id%3D807083059812769792&cln={CELL_NUMBER}&btp=7&rb=E0tRc3FJ0H7KuRZ-ptmcxM2Zz0Y3kloS2ZpbZTRLS1BxGcs6LqYU_vTbDpjOVoL5lw01yS--doBm_Wp-nNLDSFx6RET7bcK4GdVyfDBUD2EXNeDurJ99v5uDIC28IesHvhb2sfCgr__T70osWOR5OKcBLd-C-DsBTvDspp8u9NnDWI36Yjss-TiCwyqrIxZdkRkjep2C9dZSiNhb6rZINAGpapZ5C0FPgfDAofPkz4Y6OVBvNfi4IKVaHkCeeu9pHHUTJqChLaIC8x0JzNgTING__85uFE_O94glfRGZDc852VvAvk1oWsmbObcZ9dyonN1beOxFHKG5zKio8qpzwwI4IFScd1oeocXhBLe1jI2-pI3TWzS4xA1YQYGU6qwFK5JKeEIB5PLPK4jRAd1TRy8EkF4pxHa1RNUXCAdtI1aV9nEjvA7ycUshMxXOcqR9aOOxhx6m67pxgwdMXtivRx05Lkq1s1qlP3Iq_tx-5PAxCWKQj-htJ0G-eQdBj1WzunmEAKyk27VZ7edlb1t2ooMgslHtS54MVDPzW9IhD-8cRnOMolr0wVk-pdxUvBqyjVvk7bsQxGPvp35Ul0vTaXyGujfozH3-0emJDtEGrDZxTaW7l98iag==&bag=ydU9kaAfa6I=&ruid=12499f02-3156-4e72-8426-027d2d30a4eb&subid=807083059812769792 HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: scm=1; OAID=008048578a544489e5e3e53da05cb7e8; oaidts=1713987113
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 24 Apr 2024 19:31:54 GMT
content-length: 0
location: https://securedpeacomm.com/in/?tg=https://track.jefytrack.com/145f6684-c379-407a-a2eb-922622a713e1&zoneid=7134624&campaignid=8121703&carrier={carrier}&connectiontype={connection.type}&isp={isp}&cost=&visitor_id=807083059812769792
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: 8e13c25b8d7b34d1d5fd08ca3f93c440
access-control-expose-headers: X-Sc
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| my.rtmark.net/gid.js?pub=0&userId=891ff85b688045879b2e0677bab0382e&zoneId=7134626&checkDuplicate=true&ymid=&var=&source=pusher | 139.45.195.8 | 200 OK | 65 B |
URL GET HTTP/2my.rtmark.net/gid.js?pub=0&userId=891ff85b688045879b2e0677bab0382e&zoneId=7134626&checkDuplicate=true&ymid=&var=&source=pusher IP139.45.195.8:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectrtmark.net FingerprintDB:C0:8B:64:1C:E3:2A:9C:B9:04:0D:F3:6F:5A:E0:35:F4:C7:75:CC ValiditySat, 02 Mar 2024 21:53:43 GMT - Fri, 31 May 2024 21:53:42 GMT
Hashaabf5f6cea0c1cbfcd4cd4e0c39e7518 d8df89d31875f39b9c1558dd675fa2ada1e0ae69 b0d6b3fd6d7a2c4542d224440d99f48815aaa9d1a995e51b76c3168601dfaaca
GET /gid.js?pub=0&userId=891ff85b688045879b2e0677bab0382e&zoneId=7134626&checkDuplicate=true&ymid=&var=&source=pusher HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://primeflix.lol/
Origin: https://primeflix.lol
DNT: 1
Connection: keep-alive
Cookie: ID=008048578a544489e5e3e53da05cb7e8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:54 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://primeflix.lol
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=008048578a544489e5e3e53da05cb7e8; expires=Thu, 24 Apr 2025 19:31:54 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| amunfezanttor.com/event | 139.45.197.250 | 200 OK | 0 B |
IP139.45.197.250:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectamunfezanttor.com FingerprintAB:2C:60:54:FF:D7:D6:23:0E:87:1A:98:EC:94:B3:9B:29:1A:F3:AA ValidityWed, 10 Apr 2024 19:04:12 GMT - Tue, 09 Jul 2024 19:04:11 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://primeflix.lol/
Origin: https://primeflix.lol
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:54 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://primeflix.lol
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| amunfezanttor.com/event | 139.45.197.250 | 200 OK | 94 B |
IP139.45.197.250:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectamunfezanttor.com FingerprintAB:2C:60:54:FF:D7:D6:23:0E:87:1A:98:EC:94:B3:9B:29:1A:F3:AA ValidityWed, 10 Apr 2024 19:04:12 GMT - Tue, 09 Jul 2024 19:04:11 GMT
Hash56c82710c9bdfcffe53bdf0ae9d72ad1 200eb486de5c847d52bedb9cf1788ccde998d121 ad8c56d7cdda1491bf9417634ad28c4d8e82b8439757e349cb8c46297b258a0e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://primeflix.lol/
Content-Type: application/json
Content-Length: 517
Origin: https://primeflix.lol
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:54 GMT
content-type: application/json; charset=utf-8
content-length: 94
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://primeflix.lol
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| offerimage.com/www/images/c41479298347dc5e044b6453cedc93e0.jpg | 172.67.22.216 | 200 OK | 14 kB |
URL GET HTTP/2offerimage.com/www/images/c41479298347dc5e044b6453cedc93e0.jpg IP172.67.22.216:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerGoogle Trust Services LLC Subjectofferimage.com Fingerprint5C:87:DE:3A:1B:66:15:11:B1:75:B6:AC:AF:F9:A6:EF:5E:7F:80:72 ValidityFri, 05 Apr 2024 23:50:04 GMT - Thu, 04 Jul 2024 23:50:03 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3 Hashc41479298347dc5e044b6453cedc93e0 6614e54a248f131bcde21e8debf93d0d39cc1b21 73e812ffaa3b42c59e4fe1d523656a100679322ae616350ae6c24d0db8c02d00
GET /www/images/c41479298347dc5e044b6453cedc93e0.jpg HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 19:31:54 GMT
content-type: image/jpeg
content-length: 13521
cache-control: max-age=86400
cf-bgj: h2pri
etag: "6486d956-34d1"
expires: Wed, 24 Apr 2024 20:09:02 GMT
last-modified: Mon, 12 Jun 2023 08:37:42 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 84169
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87988429ac131c02-OSL
X-Firefox-Spdy: h2
|
|
| vidsrc.pro/api/e/eGR2RndgHwcrNCADE2VvAXVidEV_YnRPIw | 172.67.177.66 | 200 OK | 18 kB |
URL GET HTTP/3vidsrc.pro/api/e/eGR2RndgHwcrNCADE2VvAXVidEV_YnRPIw IP172.67.177.66:443
Requested byhttps://vidsrc.pro/embed/movie/560016 CertificateIssuerGoogle Trust Services LLC Subjectvidsrc.pro Fingerprint5C:93:BF:68:D8:2F:29:AA:01:0A:36:62:7E:52:D9:9E:C7:7A:0C:E6 ValidityFri, 05 Apr 2024 20:55:57 GMT - Thu, 04 Jul 2024 20:55:56 GMT
Hash0225e6df1bce6615e8b6866c56055ab9 eca47bc810bd3281992ae04611782c39b100a22d 42d9957fc5e94aa31d3f78cb44dc1305ddc3e624d6eeefb253a013e58483d01f
GET /api/e/eGR2RndgHwcrNCADE2VvAXVidEV_YnRPIw HTTP/1.1
Host: vidsrc.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vidsrc.pro/embed/movie/560016
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 19:31:54 GMT
content-type: application/json; charset=utf-8
last-modified: Wed, 24 Apr 2024 19:31:54 GMT
cache-control: max-age=2678400
cf-cache-status: MISS
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879884285b7db517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| moonoafy.net/custom | 139.45.197.250 | 200 OK | 39 B |
IP139.45.197.250:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /custom HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://primeflix.lol/
Content-Type: application/json
Content-Length: 379
Origin: https://primeflix.lol
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:54 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 83bbeb1f4188e24dbb6e6c34b4236ff1
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://primeflix.lol
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| up.vidstream.cloud/_v11/bb9d360a0dfed8bca1a0f9e64ed9664c718ca9d5da7dc71640405fc271f78b201a7fbb4b4917503b3e75f2988a4ccbe30308ec733796ea273446a92d4101ccfe6812f69f004bcdc3fc6af4898fed1d451340363e08ae4476d4326f9958ab52c5554f7957188cb8900b128802d6b7ecb026e8b8ea166a994547a18910441a2d8c/1080/seg-1-v1-a1.jpg |  104.21.55.231 | 200 OK | 3.7 MB |
URL GET HTTP/2up.vidstream.cloud/_v11/bb9d360a0dfed8bca1a0f9e64ed9664c718ca9d5da7dc71640405fc271f78b201a7fbb4b4917503b3e75f2988a4ccbe30308ec733796ea273446a92d4101ccfe6812f69f004bcdc3fc6af4898fed1d451340363e08ae4476d4326f9958ab52c5554f7957188cb8900b128802d6b7ecb026e8b8ea166a994547a18910441a2d8c/1080/seg-1-v1-a1.jpg IP104.21.55.231:443
Requested byhttps://vidsrc.pro/embed/movie/560016 CertificateIssuerLet's Encrypt Subjectvidstream.cloud Fingerprint0C:AE:07:CE:71:1D:67:FE:FC:EE:8F:A1:E5:6A:91:E9:FE:CF:50:B4 ValidityFri, 05 Apr 2024 19:30:26 GMT - Thu, 04 Jul 2024 19:30:25 GMT
File typeMPEG transport stream data Size3.7 MB (3676152 bytes) Hashd7ee88f64282af305c805387139897fd 15bee54d83c3c0cdffdebad0879ef30783418ca1 31a8fe554806b23c5f924e73069ab2de70292377ee1153401586f6a7a94564af
GET /_v11/bb9d360a0dfed8bca1a0f9e64ed9664c718ca9d5da7dc71640405fc271f78b201a7fbb4b4917503b3e75f2988a4ccbe30308ec733796ea273446a92d4101ccfe6812f69f004bcdc3fc6af4898fed1d451340363e08ae4476d4326f9958ab52c5554f7957188cb8900b128802d6b7ecb026e8b8ea166a994547a18910441a2d8c/1080/seg-1-v1-a1.jpg HTTP/1.1
Host: up.vidstream.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vidsrc.pro
DNT: 1
Connection: keep-alive
Referer: https://vidsrc.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 19:31:54 GMT
content-type: image/jpg
content-length: 3676152
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: If-Modified-Since,Range
access-control-expose-headers: Accept-Ranges,Content-Encoding,Content-Length,Content-Range
last-modified: Sun, 19 Nov 2000 08:52:00 GMT
expires: Thu, 24 Apr 2025 03:56:43 GMT
cache-control: max-age=31536000
x-cache: HIT
cf-cache-status: HIT
age: 31320
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 8798842a9e4eb4f4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| offerimage.com/www/images/9c6355bcf96815c755fbba83f9fd8f64.jpg | 172.67.22.216 | 200 OK | 17 kB |
URL GET HTTP/2offerimage.com/www/images/9c6355bcf96815c755fbba83f9fd8f64.jpg IP172.67.22.216:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerGoogle Trust Services LLC Subjectofferimage.com Fingerprint5C:87:DE:3A:1B:66:15:11:B1:75:B6:AC:AF:F9:A6:EF:5E:7F:80:72 ValidityFri, 05 Apr 2024 23:50:04 GMT - Thu, 04 Jul 2024 23:50:03 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3 Hash9c6355bcf96815c755fbba83f9fd8f64 ce698b45fb51ef1494f80f432b7aff0985247724 2cd74e866757767cd5c88d066a0bc057aded1e6c07171e091dd87f56ffd4a906
GET /www/images/9c6355bcf96815c755fbba83f9fd8f64.jpg HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 19:31:54 GMT
content-type: image/jpeg
content-length: 17173
cache-control: max-age=86400
cf-bgj: h2pri
etag: "642af881-4315"
expires: Thu, 25 Apr 2024 18:52:22 GMT
last-modified: Mon, 03 Apr 2023 16:02:09 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 2372
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 8798842b2da61c02-OSL
X-Firefox-Spdy: h2
|
|
| securedpeacomm.com/in/?tg=https://track.jefytrack.com/145f6684-c379-407a-a2eb-922622a713e1&zoneid=7134624&campaignid=8121703&carrier={carrier}&connectiontype={connection.type}&isp={isp}&cost=&visitor_id=807083059812769792 | 104.21.64.36 | 302 Found | 0 B |
URL GET HTTP/2securedpeacomm.com/in/?tg=https://track.jefytrack.com/145f6684-c379-407a-a2eb-922622a713e1&zoneid=7134624&campaignid=8121703&carrier={carrier}&connectiontype={connection.type}&isp={isp}&cost=&visitor_id=807083059812769792 IP104.21.64.36:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerGoogle Trust Services LLC Subjectsecuredpeacomm.com FingerprintE2:58:9B:FC:54:26:CA:CC:89:05:0D:28:D6:2E:28:9E:39:7E:5F:D6 ValidityMon, 15 Apr 2024 19:27:34 GMT - Sun, 14 Jul 2024 19:27:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/?tg=https://track.jefytrack.com/145f6684-c379-407a-a2eb-922622a713e1&zoneid=7134624&campaignid=8121703&carrier={carrier}&connectiontype={connection.type}&isp={isp}&cost=&visitor_id=807083059812769792 HTTP/1.1
Host: securedpeacomm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 24 Apr 2024 19:31:54 GMT
content-type: text/html; charset=UTF-8
location: https://track.jefytrack.com/145f6684-c379-407a-a2eb-922622a713e1?zoneid=7134624&campaignid=8121703&carrier=%7Bcarrier%7D&connectiontype=%7Bconnection.type%7D&isp=%7Bisp%7D&cost=&visitor_id=807083059812769792&ctrl_fetch_dest=iframe&ctrl_id=66295e2a802ce136407803&ctrl_ts=1713987114.525&ctrl_ab=burp
referrer-policy: no-referrer
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o9RhF%2Bxfs2zNK8LDmaN5lG1ZbkQAssz09oyBvjT4L30%2FOnGv%2BsfSFkoaJRORVMhvXc31C%2FVUn8LOdtPUFIb8Qdtr%2BfTrsuGJYwfEzKy9jEuqCT7%2FtpY0jQFsjFQuP2ZrfLUufd8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879884294d92b512-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| moonoafy.net/pfe/current/defaultSkin.min.js | 139.45.197.250 | 200 OK | 3.7 MB |
URL GET HTTP/2moonoafy.net/pfe/current/defaultSkin.min.js IP139.45.197.250:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
File typegzip compressed data, max speed, from Unix Size3.7 MB (3709780 bytes) Hash44f9b148cc8fb9e7839e7fc58e8f8914 8dfb6fef9a4cf0750180ef9921182dbbb459c0b3 57a3b29a5bca21e78d645d80daf521c2df5571b57510d03969f5553c06cd1f76
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pfe/current/defaultSkin.min.js HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://primeflix.lol/
Origin: https://primeflix.lol
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:54 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 14:40:04 GMT
etag: W/"662919c4-df63"
access-control-allow-origin: https://primeflix.lol
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| gishejuy.com/impression/Za3ONHjQqL4R8kbj23PsGb3WCMZdufGmOH8O327sRPrsoMYyTuMyYpY2mjtlQUJ28tgxXJ1muukiUGJj-lPd71Jk5PPaQKIDq23SnOFXS8dr379yvpxjfreY20ZGI6BlydNXToxb0VKti36qGQdkG2wmTr-XBUoEo_RYy4GRsGpjs8fQ3V1NEOd8LlbXaZEqtcKlITb24YLiPRIJzlBdTu20-hiC8jKFrEzOW3HXtY3fyrRSxJ922VgLqS_PKqBC_2PevuZmPOAwPb2Vmas3GDAFxTmjElpH7XW_-iU-UZ4q-43thSQ5fS8k6eb8ThGy0oXLgXr7CJU-19GQfK5KYDX3e1KvJQEUQXiQs6HLw3_j2wa5DxOqXtkBTOjjZXRRDlm4kPm8VwxkzMftg1pXCuyKlZFWTXKuaa0onPL88WyXHETd6VmvC7U-DxbM0TUq41rWNqeHqXZ-S03lUOhPW1cTElJ6jA8Tyv_gWgZewCcRQ2m2K61tD_N2kBAW4pzq0pc3DzwxH6CnmhKEtXSzhxWnTK0nPPKxLw4UlV5wYNNABN4mCh_1inDg51v1xgEadkzt7NLxf_-4_l8h8tSBcjgOyoE=?_z=7134623&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 | 139.45.197.242 | 200 OK | 43 B |
URL GET HTTP/2gishejuy.com/impression/Za3ONHjQqL4R8kbj23PsGb3WCMZdufGmOH8O327sRPrsoMYyTuMyYpY2mjtlQUJ28tgxXJ1muukiUGJj-lPd71Jk5PPaQKIDq23SnOFXS8dr379yvpxjfreY20ZGI6BlydNXToxb0VKti36qGQdkG2wmTr-XBUoEo_RYy4GRsGpjs8fQ3V1NEOd8LlbXaZEqtcKlITb24YLiPRIJzlBdTu20-hiC8jKFrEzOW3HXtY3fyrRSxJ922VgLqS_PKqBC_2PevuZmPOAwPb2Vmas3GDAFxTmjElpH7XW_-iU-UZ4q-43thSQ5fS8k6eb8ThGy0oXLgXr7CJU-19GQfK5KYDX3e1KvJQEUQXiQs6HLw3_j2wa5DxOqXtkBTOjjZXRRDlm4kPm8VwxkzMftg1pXCuyKlZFWTXKuaa0onPL88WyXHETd6VmvC7U-DxbM0TUq41rWNqeHqXZ-S03lUOhPW1cTElJ6jA8Tyv_gWgZewCcRQ2m2K61tD_N2kBAW4pzq0pc3DzwxH6CnmhKEtXSzhxWnTK0nPPKxLw4UlV5wYNNABN4mCh_1inDg51v1xgEadkzt7NLxf_-4_l8h8tSBcjgOyoE=?_z=7134623&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 IP139.45.197.242:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectgishejuy.com Fingerprint0E:1A:AC:78:15:75:C8:D7:77:E9:9F:1E:8F:A6:05:8C:F6:CA:AC:80 ValidityTue, 02 Apr 2024 05:15:48 GMT - Mon, 01 Jul 2024 05:15:47 GMT
File typeGIF image data, version 89a, 1 x 1 Hashb4491705564909da7f9eaf749dbbfbb1 279315d507855c6a4351e1e2c2f39dd9cd2fccd8 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /impression/Za3ONHjQqL4R8kbj23PsGb3WCMZdufGmOH8O327sRPrsoMYyTuMyYpY2mjtlQUJ28tgxXJ1muukiUGJj-lPd71Jk5PPaQKIDq23SnOFXS8dr379yvpxjfreY20ZGI6BlydNXToxb0VKti36qGQdkG2wmTr-XBUoEo_RYy4GRsGpjs8fQ3V1NEOd8LlbXaZEqtcKlITb24YLiPRIJzlBdTu20-hiC8jKFrEzOW3HXtY3fyrRSxJ922VgLqS_PKqBC_2PevuZmPOAwPb2Vmas3GDAFxTmjElpH7XW_-iU-UZ4q-43thSQ5fS8k6eb8ThGy0oXLgXr7CJU-19GQfK5KYDX3e1KvJQEUQXiQs6HLw3_j2wa5DxOqXtkBTOjjZXRRDlm4kPm8VwxkzMftg1pXCuyKlZFWTXKuaa0onPL88WyXHETd6VmvC7U-DxbM0TUq41rWNqeHqXZ-S03lUOhPW1cTElJ6jA8Tyv_gWgZewCcRQ2m2K61tD_N2kBAW4pzq0pc3DzwxH6CnmhKEtXSzhxWnTK0nPPKxLw4UlV5wYNNABN4mCh_1inDg51v1xgEadkzt7NLxf_-4_l8h8tSBcjgOyoE=?_z=7134623&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/
Cookie: OAID=008048578a544489e5e3e53da05cb7e8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:58 GMT
content-type: image/gif
content-length: 43
x-trace-id: af0727ae4c0ae977c59a5e741b6ffbbf
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| aistekso.net/401/7134625 | 139.45.197.244 | 200 OK | 34 kB |
IP139.45.197.244:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectaistekso.net Fingerprint3E:A5:CE:35:F4:D9:45:6B:A1:3B:2E:9C:B3:9E:78:4D:8A:4B:51:BB ValiditySun, 24 Mar 2024 05:08:27 GMT - Sat, 22 Jun 2024 05:08:26 GMT
File typegzip compressed data, max speed, from Unix Hash884c447322ce51b572507623c16a3035 de668fcda50da20dd5053689086e39e581d700e9 da19f6866057604a823ecd943f06fa8e023102de53da8c12d4b035c976ceef92
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /401/7134625 HTTP/1.1
Host: aistekso.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:53 GMT
content-type: application/javascript
x-trace-id: 7ada069006ac9397e621b0d20ae3101d
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
set-cookie: OAID=030048119f8f4927f58f5e9dfae598cb; expires=Thu, 24 Apr 2025 19:31:53 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| offerimage.com/www/images/c41479298347dc5e044b6453cedc93e0.jpg | 172.67.22.216 | 200 OK | 14 kB |
URL GET HTTP/2offerimage.com/www/images/c41479298347dc5e044b6453cedc93e0.jpg IP172.67.22.216:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerGoogle Trust Services LLC Subjectofferimage.com Fingerprint5C:87:DE:3A:1B:66:15:11:B1:75:B6:AC:AF:F9:A6:EF:5E:7F:80:72 ValidityFri, 05 Apr 2024 23:50:04 GMT - Thu, 04 Jul 2024 23:50:03 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3 Hashc41479298347dc5e044b6453cedc93e0 6614e54a248f131bcde21e8debf93d0d39cc1b21 73e812ffaa3b42c59e4fe1d523656a100679322ae616350ae6c24d0db8c02d00
GET /www/images/c41479298347dc5e044b6453cedc93e0.jpg HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 19:31:58 GMT
content-type: image/jpeg
content-length: 13521
cache-control: max-age=86400
cf-bgj: h2pri
etag: "6486d956-34d1"
expires: Wed, 24 Apr 2024 20:09:02 GMT
last-modified: Mon, 12 Jun 2023 08:37:42 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 84173
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 879884459d391c02-OSL
X-Firefox-Spdy: h2
|
|
| offerimage.com/www/images/9c6355bcf96815c755fbba83f9fd8f64.jpg | 172.67.22.216 | 200 OK | 17 kB |
URL GET HTTP/2offerimage.com/www/images/9c6355bcf96815c755fbba83f9fd8f64.jpg IP172.67.22.216:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerGoogle Trust Services LLC Subjectofferimage.com Fingerprint5C:87:DE:3A:1B:66:15:11:B1:75:B6:AC:AF:F9:A6:EF:5E:7F:80:72 ValidityFri, 05 Apr 2024 23:50:04 GMT - Thu, 04 Jul 2024 23:50:03 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3 Hash9c6355bcf96815c755fbba83f9fd8f64 ce698b45fb51ef1494f80f432b7aff0985247724 2cd74e866757767cd5c88d066a0bc057aded1e6c07171e091dd87f56ffd4a906
GET /www/images/9c6355bcf96815c755fbba83f9fd8f64.jpg HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 19:31:59 GMT
content-type: image/jpeg
content-length: 17173
cache-control: max-age=86400
cf-bgj: h2pri
etag: "642af881-4315"
expires: Thu, 25 Apr 2024 18:52:22 GMT
last-modified: Mon, 03 Apr 2023 16:02:09 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 2377
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87988445dd611c02-OSL
X-Firefox-Spdy: h2
|
|
| gishejuy.com/500/7134623?excludes=20579803&oaid=008048578a544489e5e3e53da05cb7e8&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=5&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 | 139.45.197.242 | 200 OK | 0 B |
URL OPTIONS HTTP/2gishejuy.com/500/7134623?excludes=20579803&oaid=008048578a544489e5e3e53da05cb7e8&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=5&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 IP139.45.197.242:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectgishejuy.com Fingerprint0E:1A:AC:78:15:75:C8:D7:77:E9:9F:1E:8F:A6:05:8C:F6:CA:AC:80 ValidityTue, 02 Apr 2024 05:15:48 GMT - Mon, 01 Jul 2024 05:15:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /500/7134623?excludes=20579803&oaid=008048578a544489e5e3e53da05cb7e8&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=5&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://primeflix.lol/
Origin: https://primeflix.lol
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:59 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://primeflix.lol
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-allow-credentials: true
access-control-max-age: 600
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| offerimage.com/www/images/32b78c2759c80ea2fa71d39c90b7f18e.jpg | 172.67.22.216 | 200 OK | 17 kB |
URL GET HTTP/2offerimage.com/www/images/32b78c2759c80ea2fa71d39c90b7f18e.jpg IP172.67.22.216:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerGoogle Trust Services LLC Subjectofferimage.com Fingerprint5C:87:DE:3A:1B:66:15:11:B1:75:B6:AC:AF:F9:A6:EF:5E:7F:80:72 ValidityFri, 05 Apr 2024 23:50:04 GMT - Thu, 04 Jul 2024 23:50:03 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3 Hash32b78c2759c80ea2fa71d39c90b7f18e e95efbc5ab43d25e51c80ad6ac23f3c640c47d33 7feaa8853f597976cebef4e98ebc4f5a76a12802a6d87d93c6c7fb84be689b37
GET /www/images/32b78c2759c80ea2fa71d39c90b7f18e.jpg HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 19:31:59 GMT
content-type: image/jpeg
content-length: 17128
cache-control: max-age=86400
cf-bgj: h2pri
etag: "64c8d74e-42e8"
expires: Thu, 25 Apr 2024 18:26:24 GMT
last-modified: Tue, 01 Aug 2023 09:58:38 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 3935
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 879884474e591c02-OSL
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 216.58.207.227 | | 16 kB |
URL fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0 Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://primeflix.lol
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 01:54:31 GMT
expires: Wed, 23 Apr 2025 01:54:31 GMT
cache-control: public, max-age=31536000
age: 149848
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | | 16 kB |
URL fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://primeflix.lol
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 16:27:38 GMT
expires: Wed, 23 Apr 2025 16:27:38 GMT
cache-control: public, max-age=31536000
age: 97461
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| vidsrc.pro/api/proxy/viper/_v11/bb9d360a0dfed8bca1a0f9e64ed9664c718ca9d5da7dc71640405fc271f78b20b28b5fd0046d0b4976626b36b8d48189a58b3e34a858c6ad56d48979ac7ab92050ea26f0a30869023ccf0f7254354b7f9a2051ddbf0fc3b919a3b91b0b6aefb5688449f2f35ccdc2315e0203fe9c1fcc93a76f221b6574285243f6c65afae5c3/720/index.m3u8.png?base=y.pollllop.com | 172.67.177.66 | 200 OK | 2.3 MB |
URL GET HTTP/3vidsrc.pro/api/proxy/viper/_v11/bb9d360a0dfed8bca1a0f9e64ed9664c718ca9d5da7dc71640405fc271f78b20b28b5fd0046d0b4976626b36b8d48189a58b3e34a858c6ad56d48979ac7ab92050ea26f0a30869023ccf0f7254354b7f9a2051ddbf0fc3b919a3b91b0b6aefb5688449f2f35ccdc2315e0203fe9c1fcc93a76f221b6574285243f6c65afae5c3/720/index.m3u8.png?base=y.pollllop.com IP172.67.177.66:443
Requested byhttps://vidsrc.pro/embed/movie/560016 CertificateIssuerGoogle Trust Services LLC Subjectvidsrc.pro Fingerprint5C:93:BF:68:D8:2F:29:AA:01:0A:36:62:7E:52:D9:9E:C7:7A:0C:E6 ValidityFri, 05 Apr 2024 20:55:57 GMT - Thu, 04 Jul 2024 20:55:56 GMT
File typeM3U playlist, ASCII text, with very long lines (311) Size2.3 MB (2311196 bytes) Hash324d7c309d8cd131851fd2e24abd837d 50a2dd742896c7e8b7aaf552abe057dd948add24 3773b0c066d3883e03df00ef54faea932b9b32139e3499d778b52963e6293f65
GET /api/proxy/viper/_v11/bb9d360a0dfed8bca1a0f9e64ed9664c718ca9d5da7dc71640405fc271f78b20b28b5fd0046d0b4976626b36b8d48189a58b3e34a858c6ad56d48979ac7ab92050ea26f0a30869023ccf0f7254354b7f9a2051ddbf0fc3b919a3b91b0b6aefb5688449f2f35ccdc2315e0203fe9c1fcc93a76f221b6574285243f6c65afae5c3/720/index.m3u8.png?base=y.pollllop.com HTTP/1.1
Host: vidsrc.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vidsrc.pro/embed/movie/560016
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 19:31:55 GMT
content-type: application/vnd.apple.mpegurl
last-modified: Wed, 24 Apr 2024 07:03:02 GMT
cache-control: max-age=2678400
cf-cache-status: HIT
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87988430eeb5b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| gishejuy.com/500/7134623?excludes=20579803&oaid=008048578a544489e5e3e53da05cb7e8&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=5&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 | 139.45.197.242 | 200 OK | 5.1 kB |
URL OPTIONS HTTP/2gishejuy.com/500/7134623?excludes=20579803&oaid=008048578a544489e5e3e53da05cb7e8&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=5&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 IP139.45.197.242:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectgishejuy.com Fingerprint0E:1A:AC:78:15:75:C8:D7:77:E9:9F:1E:8F:A6:05:8C:F6:CA:AC:80 ValidityTue, 02 Apr 2024 05:15:48 GMT - Mon, 01 Jul 2024 05:15:47 GMT
File typegzip compressed data, max speed, from Unix Hash4c670bbda817c5738b9fc5dca303c9b8 da83f816ff7a32538fe45bab9bf1f1aa01090bda 3089bbe55b1d82fefec2cef6fd64dd3273efa65b4bfb148b70ba21efe952da6b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /500/7134623?excludes=20579803&oaid=008048578a544489e5e3e53da05cb7e8&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=5&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://primeflix.lol
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/
Cookie: OAID=008048578a544489e5e3e53da05cb7e8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:59 GMT
content-type: application/javascript
x-trace-id: 75ddb5a031cc72a0c25306bc75e8d4a7
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
vary: Origin
access-control-allow-origin: https://primeflix.lol
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
set-cookie: OAID=008048578a544489e5e3e53da05cb7e8; expires=Thu, 24 Apr 2025 19:31:59 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| gishejuy.com/impression/AeetiAa7qK3VoKHAS0LcnwfsI81sq3Ol6C7xiDuDvlUY1Hr61SpmnSCBoDOay9BPhoO-9sRwIBpIYyeSp8v0HErMDyc4bQ1evwKqDR1K6SKMfAoLjfimuYpmm3QE0lq0o5VloxLrnHMYeWVRL62PDsQru49zVW_FgIbTWfwjQ36km4uFF8YqEkDMOuI6nkJyCB9et84Cd9JShbUpcl6sYA2jWbS0w5ii0ECYSAkXud0zNz64_7sf-LqzqhW_rbqoi99lR0451gIzPD_6hQaFjMJifZKeTq6Ywf9jUiBYbux32RBF_sDHy4BuahSsGRa98ig9WbVcftaD8_-xSeOzQ8p1A7AIo3PwyJ-WM8ZEkNu3ftCnafHPWIXbK0rE8QoWWhKPVP3tIllk20cgMSsBl-LGFo1Lrdta_W1SEI49scbanJo-Sk15wuA2o3JRN4x0DaCx5eiIujARxU8ScC_s5SVdiXgeWh6y9X1_QIAcWR-b3ZnOl8dybBOj4Rel_eBCpqh_CYj0Fv_sieEgang-VJMTX0ZA2xZiU07t5iYSqxkI3Ko3dmOBxH1Y_MbLApqcy6YrXGt_0Gv1fCx7soBcf865s7c=?_z=7134623&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=4&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 | 139.45.197.242 | 200 OK | 43 B |
URL GET HTTP/2gishejuy.com/impression/AeetiAa7qK3VoKHAS0LcnwfsI81sq3Ol6C7xiDuDvlUY1Hr61SpmnSCBoDOay9BPhoO-9sRwIBpIYyeSp8v0HErMDyc4bQ1evwKqDR1K6SKMfAoLjfimuYpmm3QE0lq0o5VloxLrnHMYeWVRL62PDsQru49zVW_FgIbTWfwjQ36km4uFF8YqEkDMOuI6nkJyCB9et84Cd9JShbUpcl6sYA2jWbS0w5ii0ECYSAkXud0zNz64_7sf-LqzqhW_rbqoi99lR0451gIzPD_6hQaFjMJifZKeTq6Ywf9jUiBYbux32RBF_sDHy4BuahSsGRa98ig9WbVcftaD8_-xSeOzQ8p1A7AIo3PwyJ-WM8ZEkNu3ftCnafHPWIXbK0rE8QoWWhKPVP3tIllk20cgMSsBl-LGFo1Lrdta_W1SEI49scbanJo-Sk15wuA2o3JRN4x0DaCx5eiIujARxU8ScC_s5SVdiXgeWh6y9X1_QIAcWR-b3ZnOl8dybBOj4Rel_eBCpqh_CYj0Fv_sieEgang-VJMTX0ZA2xZiU07t5iYSqxkI3Ko3dmOBxH1Y_MbLApqcy6YrXGt_0Gv1fCx7soBcf865s7c=?_z=7134623&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=4&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 IP139.45.197.242:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectgishejuy.com Fingerprint0E:1A:AC:78:15:75:C8:D7:77:E9:9F:1E:8F:A6:05:8C:F6:CA:AC:80 ValidityTue, 02 Apr 2024 05:15:48 GMT - Mon, 01 Jul 2024 05:15:47 GMT
File typeGIF image data, version 89a, 1 x 1 Hashb4491705564909da7f9eaf749dbbfbb1 279315d507855c6a4351e1e2c2f39dd9cd2fccd8 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /impression/AeetiAa7qK3VoKHAS0LcnwfsI81sq3Ol6C7xiDuDvlUY1Hr61SpmnSCBoDOay9BPhoO-9sRwIBpIYyeSp8v0HErMDyc4bQ1evwKqDR1K6SKMfAoLjfimuYpmm3QE0lq0o5VloxLrnHMYeWVRL62PDsQru49zVW_FgIbTWfwjQ36km4uFF8YqEkDMOuI6nkJyCB9et84Cd9JShbUpcl6sYA2jWbS0w5ii0ECYSAkXud0zNz64_7sf-LqzqhW_rbqoi99lR0451gIzPD_6hQaFjMJifZKeTq6Ywf9jUiBYbux32RBF_sDHy4BuahSsGRa98ig9WbVcftaD8_-xSeOzQ8p1A7AIo3PwyJ-WM8ZEkNu3ftCnafHPWIXbK0rE8QoWWhKPVP3tIllk20cgMSsBl-LGFo1Lrdta_W1SEI49scbanJo-Sk15wuA2o3JRN4x0DaCx5eiIujARxU8ScC_s5SVdiXgeWh6y9X1_QIAcWR-b3ZnOl8dybBOj4Rel_eBCpqh_CYj0Fv_sieEgang-VJMTX0ZA2xZiU07t5iYSqxkI3Ko3dmOBxH1Y_MbLApqcy6YrXGt_0Gv1fCx7soBcf865s7c=?_z=7134623&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=4&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/
Cookie: OAID=008048578a544489e5e3e53da05cb7e8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:32:01 GMT
content-type: image/gif
content-length: 43
x-trace-id: 38335569a39bf9bb9807d48c1b6c7f1a
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| cameesse.net/11?rnd=1729872184&z=7134624&b=20830638&var=&varid=0&rqtdbc=0&rcvdbc=0&btp=7&rb=E0tRc3FJ0H7KuRZ-ptmcxM2Zz0Y3kloS2ZpbZTRLS1BxGcs6LqYU_vTbDpjOVoL5lw01yS--doBm_Wp-nNLDSFx6RET7bcK4GdVyfDBUD2EXNeDurJ99v5uDIC28IesHvhb2sfCgr__T70osWOR5OKcBLd-C-DsBTvDspp8u9NnDWI36Yjss-TiCwyqrIxZdkRkjep2C9dZSiNhb6rZINAGpapZ5C0FPgfDAofPkz4Y6OVBvNfi4IKVaHkCeeu9pHHUTJqChLaIC8x0JzNgTING__85uFE_O94glfRGZDc852VvAvk1oWsmbObcZ9dyonN1beOxFHKG5zKio8qpzwwI4IFScd1oeocXhBLe1jI2-pI3TWzS4xA1YQYGU6qwFK5JKeEIB5PLPK4jRAd1TRy8EkF4pxHa1RNUXCAdtI1aV9nEjvA7ycUshMxXOcqR9aOOxhx6m67pxgwdMXtivRx05Lkq1s1qlP3Iq_tx-5PAxCWKQj-htJ0G-eQdBj1WzunmEAKyk27VZ7edlb1t2ooMgslHtS54MVDPzW9IhD-8cRnOMolr0wVk-pdxUvBqyjVvk7bsQxGPvp35Ul0vTaXyGujfozH3-0emJDtEGrDZxTaW7l98iag==&ruid=12499f02-3156-4e72-8426-027d2d30a4eb&subid=807083059812769792&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&sah=1024&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1 | 139.45.197.242 | 200 OK | 0 B |
URL GET HTTP/2cameesse.net/11?rnd=1729872184&z=7134624&b=20830638&var=&varid=0&rqtdbc=0&rcvdbc=0&btp=7&rb=E0tRc3FJ0H7KuRZ-ptmcxM2Zz0Y3kloS2ZpbZTRLS1BxGcs6LqYU_vTbDpjOVoL5lw01yS--doBm_Wp-nNLDSFx6RET7bcK4GdVyfDBUD2EXNeDurJ99v5uDIC28IesHvhb2sfCgr__T70osWOR5OKcBLd-C-DsBTvDspp8u9NnDWI36Yjss-TiCwyqrIxZdkRkjep2C9dZSiNhb6rZINAGpapZ5C0FPgfDAofPkz4Y6OVBvNfi4IKVaHkCeeu9pHHUTJqChLaIC8x0JzNgTING__85uFE_O94glfRGZDc852VvAvk1oWsmbObcZ9dyonN1beOxFHKG5zKio8qpzwwI4IFScd1oeocXhBLe1jI2-pI3TWzS4xA1YQYGU6qwFK5JKeEIB5PLPK4jRAd1TRy8EkF4pxHa1RNUXCAdtI1aV9nEjvA7ycUshMxXOcqR9aOOxhx6m67pxgwdMXtivRx05Lkq1s1qlP3Iq_tx-5PAxCWKQj-htJ0G-eQdBj1WzunmEAKyk27VZ7edlb1t2ooMgslHtS54MVDPzW9IhD-8cRnOMolr0wVk-pdxUvBqyjVvk7bsQxGPvp35Ul0vTaXyGujfozH3-0emJDtEGrDZxTaW7l98iag==&ruid=12499f02-3156-4e72-8426-027d2d30a4eb&subid=807083059812769792&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&sah=1024&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1 IP139.45.197.242:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectcameesse.net Fingerprint40:09:71:B1:17:F8:74:15:9B:3D:0A:95:73:15:74:D6:05:A5:5B:44 ValidityFri, 22 Mar 2024 19:24:17 GMT - Thu, 20 Jun 2024 19:24:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /11?rnd=1729872184&z=7134624&b=20830638&var=&varid=0&rqtdbc=0&rcvdbc=0&btp=7&rb=E0tRc3FJ0H7KuRZ-ptmcxM2Zz0Y3kloS2ZpbZTRLS1BxGcs6LqYU_vTbDpjOVoL5lw01yS--doBm_Wp-nNLDSFx6RET7bcK4GdVyfDBUD2EXNeDurJ99v5uDIC28IesHvhb2sfCgr__T70osWOR5OKcBLd-C-DsBTvDspp8u9NnDWI36Yjss-TiCwyqrIxZdkRkjep2C9dZSiNhb6rZINAGpapZ5C0FPgfDAofPkz4Y6OVBvNfi4IKVaHkCeeu9pHHUTJqChLaIC8x0JzNgTING__85uFE_O94glfRGZDc852VvAvk1oWsmbObcZ9dyonN1beOxFHKG5zKio8qpzwwI4IFScd1oeocXhBLe1jI2-pI3TWzS4xA1YQYGU6qwFK5JKeEIB5PLPK4jRAd1TRy8EkF4pxHa1RNUXCAdtI1aV9nEjvA7ycUshMxXOcqR9aOOxhx6m67pxgwdMXtivRx05Lkq1s1qlP3Iq_tx-5PAxCWKQj-htJ0G-eQdBj1WzunmEAKyk27VZ7edlb1t2ooMgslHtS54MVDPzW9IhD-8cRnOMolr0wVk-pdxUvBqyjVvk7bsQxGPvp35Ul0vTaXyGujfozH3-0emJDtEGrDZxTaW7l98iag==&ruid=12499f02-3156-4e72-8426-027d2d30a4eb&subid=807083059812769792&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&sah=1024&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1 HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://primeflix.lol
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/
Cookie: scm=1; OAID=008048578a544489e5e3e53da05cb7e8; oaidts=1713987113
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:32:14 GMT
content-type: image/jpeg
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: https://primeflix.lol
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: 2d9ebb807eb44ff8eaca4c919c955fbd
access-control-expose-headers: X-Sc
set-cookie: OAID=008048578a544489e5e3e53da05cb7e8; expires=Thu, 24 Apr 2025 19:32:14 GMT; secure; SameSite=None
oaidts=1713987113; expires=Thu, 24 Apr 2025 19:32:14 GMT; secure; SameSite=None
oaidvc=1; expires=Thu, 24 Apr 2025 19:32:14 GMT; secure; SameSite=None
CNT=1_v1_rtk9AQEAAAB9TQAA; expires=Wed, 24 Apr 2024 20:32:14 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| externalde.com/out/xyhkxckud/?ctrl_id=66295e2a802ce136407803&ctrl_ab=burp&ctrl_ts=1713987114.525&ctrl_vol_oid=0b046699-9de5-41eb-a62f-5035b56e631b&tg=https://lkbx.me/4KqY7&uid=w8jopbuhcbj66rq03m9ur3gg | 104.21.9.15 | 302 Found | 1.1 kB |
URL GET HTTP/2externalde.com/out/xyhkxckud/?ctrl_id=66295e2a802ce136407803&ctrl_ab=burp&ctrl_ts=1713987114.525&ctrl_vol_oid=0b046699-9de5-41eb-a62f-5035b56e631b&tg=https://lkbx.me/4KqY7&uid=w8jopbuhcbj66rq03m9ur3gg IP104.21.9.15:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerGoogle Trust Services LLC Subjectexternalde.com Fingerprint79:24:9D:C1:87:2E:2E:74:56:2B:08:78:0D:03:42:70:D2:45:87:61 ValidityWed, 28 Feb 2024 13:09:48 GMT - Tue, 28 May 2024 13:09:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /out/xyhkxckud/?ctrl_id=66295e2a802ce136407803&ctrl_ab=burp&ctrl_ts=1713987114.525&ctrl_vol_oid=0b046699-9de5-41eb-a62f-5035b56e631b&tg=https://lkbx.me/4KqY7&uid=w8jopbuhcbj66rq03m9ur3gg HTTP/1.1
Host: externalde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 24 Apr 2024 19:31:55 GMT
content-type: text/html; charset=UTF-8
location: https://lkbx.me/4KqY7?uid=w8jopbuhcbj66rq03m9ur3gg
referrer-policy: no-referrer
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uKxidy7JuRbUVXoV5qsJjaSI0dxz3YHgkZn5Jfhw4kQNaldfxdihlyOkvKEcCx1o3vzmODi%2BRRmVs9C8F8oORSmsT%2F9v4c3bqaNhhqx8Z4vbRZxy2BZlCLRF8IBqcs7DTQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8798842c7e235689-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| veepteero.com/?rb=TE6Nx0qzEWEsnk-m9hnLtL0ClbUmQS9Czc3Hndlg0IgBbKOAAKsN3CPqa244tqtZ3S0czgx9SDyd_bBqL5QLepTX5RXXAMn8qhaJHX2n62EeHa9jtLpsELea5ZezL--AbCVdRtN-n1XEnt3X_V06WLnEF4cWaCXgkIj6NFskFwsEmuzEmsi9p9cK8KIQQb0wMn9mkyCCzzMmZSkDj1mgXb-C5WPR249-FTjJ247sCzcl9mcnlHDi8_OQ9fIaSKcsJMNRRdOhHdk%3D&request_ab2=0&zoneid=7134622&js_build=iclick-v1.779.2-auto&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=1&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.779.2-auto&navlng=en-US&pnt=0&pnrc=0&wasm=-1&bs=f81bf6ff-ba07-4c9f-9e7a-e21f4796ea38&userId=008048578a544489e5e3e53da05cb7e8&m=link | 139.45.197.242 | 200 OK | 2.3 kB |
URL GET HTTP/2veepteero.com/?rb=TE6Nx0qzEWEsnk-m9hnLtL0ClbUmQS9Czc3Hndlg0IgBbKOAAKsN3CPqa244tqtZ3S0czgx9SDyd_bBqL5QLepTX5RXXAMn8qhaJHX2n62EeHa9jtLpsELea5ZezL--AbCVdRtN-n1XEnt3X_V06WLnEF4cWaCXgkIj6NFskFwsEmuzEmsi9p9cK8KIQQb0wMn9mkyCCzzMmZSkDj1mgXb-C5WPR249-FTjJ247sCzcl9mcnlHDi8_OQ9fIaSKcsJMNRRdOhHdk%3D&request_ab2=0&zoneid=7134622&js_build=iclick-v1.779.2-auto&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=1&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.779.2-auto&navlng=en-US&pnt=0&pnrc=0&wasm=-1&bs=f81bf6ff-ba07-4c9f-9e7a-e21f4796ea38&userId=008048578a544489e5e3e53da05cb7e8&m=link IP139.45.197.242:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectveepteero.com Fingerprint13:68:56:48:EC:67:A6:93:BE:E0:36:BC:FA:04:75:6D:6E:D2:C1:91 ValiditySat, 23 Mar 2024 05:18:36 GMT - Fri, 21 Jun 2024 05:18:35 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (2341), with no line terminators Hash4bfd43bbf671ba113eb7ae62f42b5bf3 aed422bf7c5e9790d2a49575826ad617b316322f 3fe63b24d651a76db649a81361f244e708b44a9e2a4484421221b3b00d07bf11
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /?rb=TE6Nx0qzEWEsnk-m9hnLtL0ClbUmQS9Czc3Hndlg0IgBbKOAAKsN3CPqa244tqtZ3S0czgx9SDyd_bBqL5QLepTX5RXXAMn8qhaJHX2n62EeHa9jtLpsELea5ZezL--AbCVdRtN-n1XEnt3X_V06WLnEF4cWaCXgkIj6NFskFwsEmuzEmsi9p9cK8KIQQb0wMn9mkyCCzzMmZSkDj1mgXb-C5WPR249-FTjJ247sCzcl9mcnlHDi8_OQ9fIaSKcsJMNRRdOhHdk%3D&request_ab2=0&zoneid=7134622&js_build=iclick-v1.779.2-auto&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=1&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.779.2-auto&navlng=en-US&pnt=0&pnrc=0&wasm=-1&bs=f81bf6ff-ba07-4c9f-9e7a-e21f4796ea38&userId=008048578a544489e5e3e53da05cb7e8&m=link HTTP/1.1
Host: veepteero.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://primeflix.lol/
Origin: https://primeflix.lol
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:53 GMT
content-type: application/json
x-trace-id: 44b9ebf03bb2a10a5fdf1c0bd40b4ddb
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://primeflix.lol
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=008048578a544489e5e3e53da05cb7e8; expires=Thu, 24 Apr 2025 19:31:53 GMT; path=/; secure; SameSite=None
oaidts=1713987113; expires=Thu, 24 Apr 2025 19:31:53 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Wed, 01 May 2024 19:31:53 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| vidsrc.pro/static/hls.js?v2.3.06 | 172.67.177.66 | 200 OK | 415 kB |
URL GET HTTP/3vidsrc.pro/static/hls.js?v2.3.06 IP172.67.177.66:443
Requested byhttps://vidsrc.pro/embed/movie/560016 CertificateIssuerGoogle Trust Services LLC Subjectvidsrc.pro Fingerprint5C:93:BF:68:D8:2F:29:AA:01:0A:36:62:7E:52:D9:9E:C7:7A:0C:E6 ValidityFri, 05 Apr 2024 20:55:57 GMT - Thu, 04 Jul 2024 20:55:56 GMT
Size415 kB (415439 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/hls.js?v2.3.06 HTTP/1.1
Host: vidsrc.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vidsrc.pro/embed/movie/560016
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 19:31:53 GMT
content-type: application/javascript; charset=UTF-8
cf-bgj: minify
cf-polished: origSize=415440
cache-control: public, max-age=2678400
etag: W/"656d0-18e62b74de0"
last-modified: Thu, 21 Mar 2024 20:32:44 GMT
cf-cache-status: HIT
age: 20081
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879884234c4eb517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| my.rtmark.net/gid.js?userId=008048578a544489e5e3e53da05cb7e8 | 139.45.195.8 | 200 OK | 65 B |
URL GET HTTP/2my.rtmark.net/gid.js?userId=008048578a544489e5e3e53da05cb7e8 IP139.45.195.8:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectrtmark.net FingerprintDB:C0:8B:64:1C:E3:2A:9C:B9:04:0D:F3:6F:5A:E0:35:F4:C7:75:CC ValiditySat, 02 Mar 2024 21:53:43 GMT - Fri, 31 May 2024 21:53:42 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash9b544f780d75f42b8909ad2a6b65e111 12983fc933aa6b9a54fb24223176b04b10935121 a0923c9c8da55b2fd14e096c0a499b84dba50e913a997f041501154653df8ec6
GET /gid.js?userId=008048578a544489e5e3e53da05cb7e8 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://primeflix.lol
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:53 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://primeflix.lol
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=008048578a544489e5e3e53da05cb7e8; expires=Thu, 24 Apr 2025 19:31:53 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| primeflix.lol/_next/static/css/d6bae7cb8463c96e.css | 76.76.21.21 | 200 OK | 173 kB |
URL GET HTTP/2primeflix.lol/_next/static/css/d6bae7cb8463c96e.css IP76.76.21.21:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subject*.primeflix.lol Fingerprint34:44:5E:C4:CE:25:48:19:29:42:B3:84:2F:3F:70:0C:9E:E8:DE:41 ValidityFri, 19 Apr 2024 06:26:37 GMT - Thu, 18 Jul 2024 06:26:36 GMT
File typeASCII text, with very long lines (62078) Size173 kB (173256 bytes) Hash07a15e1ba3979f1ead3330cc1583c520 67fbddf7f9555f9e74d12408de2d043723b8e58d b172dc69389816bf77456d1d47c5e4e061233ff5c9e2b80c39124d08ed794daf
GET /_next/static/css/d6bae7cb8463c96e.css HTTP/1.1
Host: primeflix.lol
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/movie/560016/stream
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 456128
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="d6bae7cb8463c96e.css"
content-encoding: br
content-type: text/css; charset=utf-8
date: Wed, 24 Apr 2024 19:31:53 GMT
etag: W/"07a15e1ba3979f1ead3330cc1583c520"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/css/d6bae7cb8463c96e.css
x-vercel-cache: HIT
x-vercel-id: arn1::rtjdb-1713987113066-011e95c21c0e
X-Firefox-Spdy: h2
|
|
| track.jefytrack.com/145f6684-c379-407a-a2eb-922622a713e1?zoneid=7134624&campaignid=8121703&carrier=%7Bcarrier%7D&connectiontype=%7Bconnection.type%7D&isp=%7Bisp%7D&cost=&visitor_id=807083059812769792&ctrl_fetch_dest=iframe&ctrl_id=66295e2a802ce136407803&ctrl_ts=1713987114.525&ctrl_ab=burp | 143.204.55.41 | 302 Found | 1.1 kB |
URL GET HTTP/2track.jefytrack.com/145f6684-c379-407a-a2eb-922622a713e1?zoneid=7134624&campaignid=8121703&carrier=%7Bcarrier%7D&connectiontype=%7Bconnection.type%7D&isp=%7Bisp%7D&cost=&visitor_id=807083059812769792&ctrl_fetch_dest=iframe&ctrl_id=66295e2a802ce136407803&ctrl_ts=1713987114.525&ctrl_ab=burp IP143.204.55.41:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerAmazon Subjecttrack.jefytrack.com FingerprintD9:FC:91:D1:FD:F0:F4:2D:48:E9:47:EE:31:A0:1C:23:D3:9A:29:D8 ValiditySun, 21 Apr 2024 00:00:00 GMT - Tue, 20 May 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /145f6684-c379-407a-a2eb-922622a713e1?zoneid=7134624&campaignid=8121703&carrier=%7Bcarrier%7D&connectiontype=%7Bconnection.type%7D&isp=%7Bisp%7D&cost=&visitor_id=807083059812769792&ctrl_fetch_dest=iframe&ctrl_id=66295e2a802ce136407803&ctrl_ts=1713987114.525&ctrl_ab=burp HTTP/1.1
Host: track.jefytrack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-length: 0
location: https://externalde.com/out/xyhkxckud/?ctrl_id=66295e2a802ce136407803&ctrl_ab=burp&ctrl_ts=1713987114.525&ctrl_vol_oid=0b046699-9de5-41eb-a62f-5035b56e631b&tg=https://lkbx.me/4KqY7&uid=w8jopbuhcbj66rq03m9ur3gg
date: Wed, 24 Apr 2024 19:31:54 GMT
cache-control: no-store, no-cache, pre-check=0, post-check=0
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
set-cookie: 145f6684-c379-407a-a2eb-922622a713e1-v4=FICGNKDyDT71gldy8AVAdXM5oPX6kzZ-jqCteBg1vDI; Max-Age=86400; Expires=Thu, 25-Apr-2024 19:31:54 GMT; Domain=track.jefytrack.com; Path=/; Secure; HttpOnly;SameSite=None
voluum-cid-v4=%7B%22cid%22%3A%22w8jopbuhcbj66rq03m9ur3gg%22%2C%22caid%22%3A%22145f6684-c379-407a-a2eb-922622a713e1%22%7D; Max-Age=31536000; Expires=Thu, 24-Apr-2025 19:31:54 GMT; Domain=track.jefytrack.com; Path=/; Secure; HttpOnly;SameSite=None
server: nginx
x-cache: Miss from cloudfront
via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: QbOjRchecrP0xLO_hXEYJTJI5x3c6m0N92ifAeMEj8f5ivbF-8f0CA==
X-Firefox-Spdy: h2
|
|
| up.vidstream.cloud/_v11/bb9d360a0dfed8bca1a0f9e64ed9664c718ca9d5da7dc71640405fc271f78b201a7fbb4b4917503b3e75f2988a4ccbe30308ec733796ea273446a92d4101ccfe6812f69f004bcdc3fc6af4898fed1d451340363e08ae4476d4326f9958ab52c5554f7957188cb8900b128802d6b7ecb026e8b8ea166a994547a18910441a2d8c/1080/seg-5-v1-a1.html | 104.21.55.231 | 200 OK | 2.6 MB |
URL GET HTTP/3up.vidstream.cloud/_v11/bb9d360a0dfed8bca1a0f9e64ed9664c718ca9d5da7dc71640405fc271f78b201a7fbb4b4917503b3e75f2988a4ccbe30308ec733796ea273446a92d4101ccfe6812f69f004bcdc3fc6af4898fed1d451340363e08ae4476d4326f9958ab52c5554f7957188cb8900b128802d6b7ecb026e8b8ea166a994547a18910441a2d8c/1080/seg-5-v1-a1.html IP104.21.55.231:443
Requested byhttps://vidsrc.pro/embed/movie/560016 CertificateIssuerLet's Encrypt Subjectvidstream.cloud Fingerprint0C:AE:07:CE:71:1D:67:FE:FC:EE:8F:A1:E5:6A:91:E9:FE:CF:50:B4 ValidityFri, 05 Apr 2024 19:30:26 GMT - Thu, 04 Jul 2024 19:30:25 GMT
Size2.6 MB (2644408 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_v11/bb9d360a0dfed8bca1a0f9e64ed9664c718ca9d5da7dc71640405fc271f78b201a7fbb4b4917503b3e75f2988a4ccbe30308ec733796ea273446a92d4101ccfe6812f69f004bcdc3fc6af4898fed1d451340363e08ae4476d4326f9958ab52c5554f7957188cb8900b128802d6b7ecb026e8b8ea166a994547a18910441a2d8c/1080/seg-5-v1-a1.html HTTP/1.1
Host: up.vidstream.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vidsrc.pro
DNT: 1
Connection: keep-alive
Referer: https://vidsrc.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 19:31:55 GMT
content-type: text/html
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: If-Modified-Since,Range
access-control-expose-headers: Accept-Ranges,Content-Encoding,Content-Length,Content-Range
last-modified: Sun, 19 Nov 2000 08:52:00 GMT
expires: Thu, 24 Apr 2025 03:56:44 GMT
cache-control: max-age=31536000
x-cache: HIT
cf-cache-status: HIT
age: 31303
vary: Accept-Encoding
server: cloudflare
cf-ray: 8798842ffa9d56bf-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| primeflix.lol/_next/static/chunks/webpack-543f49f6e9e187d0.js | 76.76.21.21 | 200 OK | 3.9 kB |
URL GET HTTP/2primeflix.lol/_next/static/chunks/webpack-543f49f6e9e187d0.js IP76.76.21.21:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subject*.primeflix.lol Fingerprint34:44:5E:C4:CE:25:48:19:29:42:B3:84:2F:3F:70:0C:9E:E8:DE:41 ValidityFri, 19 Apr 2024 06:26:37 GMT - Thu, 18 Jul 2024 06:26:36 GMT
File typeJavaScript source, ASCII text, with very long lines (3932), with no line terminators Hash15a93078eec45a60368c685fdcebe9eb a25399244b2d90f789f3dd85a32deb24d8238c54 1527e717577f0ca94323fca52f93fa8dea68e80b74354f046951fd5b26f1eb18
GET /_next/static/chunks/webpack-543f49f6e9e187d0.js HTTP/1.1
Host: primeflix.lol
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/movie/560016/stream
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 373563
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="webpack-543f49f6e9e187d0.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 19:31:53 GMT
etag: W/"072667d8f4d23fdca15aa274bd4dc408"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/webpack-543f49f6e9e187d0.js
x-vercel-cache: HIT
x-vercel-id: arn1::stqkv-1713987113030-3ce3dcbab22f
X-Firefox-Spdy: h2
|
|
| primeflix.lol/_next/static/chunks/858-2ee8c30d686ac6a6.js | 76.76.21.21 | 200 OK | 280 kB |
URL GET HTTP/2primeflix.lol/_next/static/chunks/858-2ee8c30d686ac6a6.js IP76.76.21.21:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subject*.primeflix.lol Fingerprint34:44:5E:C4:CE:25:48:19:29:42:B3:84:2F:3F:70:0C:9E:E8:DE:41 ValidityFri, 19 Apr 2024 06:26:37 GMT - Thu, 18 Jul 2024 06:26:36 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size280 kB (280003 bytes) Hashfa0fc89d352b429a5dbf64140b5a10c7 c59939b9820472cde1c4560438b8b6b801d0648f 9c79b287a161187ffa4d51f6f776701e68c24cb14f5f3408f79ed12370e390e5
GET /_next/static/chunks/858-2ee8c30d686ac6a6.js HTTP/1.1
Host: primeflix.lol
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/movie/560016/stream
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 456128
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="858-2ee8c30d686ac6a6.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 19:31:53 GMT
etag: W/"fa0fc89d352b429a5dbf64140b5a10c7"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/858-2ee8c30d686ac6a6.js
x-vercel-cache: HIT
x-vercel-id: arn1::h4t4n-1713987113039-9677a29f31b7
X-Firefox-Spdy: h2
|
|
| primeflix.lol/_next/static/chunks/465-c13a1673cd976902.js | 76.76.21.21 | 200 OK | 400 kB |
URL GET HTTP/2primeflix.lol/_next/static/chunks/465-c13a1673cd976902.js IP76.76.21.21:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subject*.primeflix.lol Fingerprint34:44:5E:C4:CE:25:48:19:29:42:B3:84:2F:3F:70:0C:9E:E8:DE:41 ValidityFri, 19 Apr 2024 06:26:37 GMT - Thu, 18 Jul 2024 06:26:36 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size400 kB (399687 bytes) Hash97acbd9cfdfabb64a923d6ee6f86ca33 a184b3f6adf98c59cc4f7286e4b590146dda5c3e b61120e0221eb048d7851bcef315bbd6a9c4232a79c662181e31225f8a7afaea
GET /_next/static/chunks/465-c13a1673cd976902.js HTTP/1.1
Host: primeflix.lol
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/movie/560016/stream
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 456128
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="465-c13a1673cd976902.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 19:31:53 GMT
etag: W/"97acbd9cfdfabb64a923d6ee6f86ca33"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/465-c13a1673cd976902.js
x-vercel-cache: HIT
x-vercel-id: arn1::pjdv6-1713987113039-a5bcde7d2f6f
X-Firefox-Spdy: h2
|
|
| primeflix.lol/_next/static/chunks/app/page-35b7cd2e7b3fd8bc.js | 76.76.21.21 | 200 OK | 9.0 kB |
URL GET HTTP/2primeflix.lol/_next/static/chunks/app/page-35b7cd2e7b3fd8bc.js IP76.76.21.21:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subject*.primeflix.lol Fingerprint34:44:5E:C4:CE:25:48:19:29:42:B3:84:2F:3F:70:0C:9E:E8:DE:41 ValidityFri, 19 Apr 2024 06:26:37 GMT - Thu, 18 Jul 2024 06:26:36 GMT
File typeUnicode text, UTF-8 text, with very long lines (9253), with no line terminators Hashfcf990066fafcf03dfa256cf39613d98 b963d4cd2c51cc9db616048c1744d6558746dcfa 4945c92e0ffd46d39a24be3bb1b16308fad3a5890e3c52d6373f353718c20886
GET /_next/static/chunks/app/page-35b7cd2e7b3fd8bc.js HTTP/1.1
Host: primeflix.lol
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/movie/560016/stream
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 456128
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="page-35b7cd2e7b3fd8bc.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 19:31:53 GMT
etag: W/"06758a67417c66261af6a64858f47145"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/app/page-35b7cd2e7b3fd8bc.js
x-vercel-cache: HIT
x-vercel-id: arn1::q8hd7-1713987113567-576bf48451cb
X-Firefox-Spdy: h2
|
|
| mc.vidstreams.site/_v2-gxnd/12a3c523fb105800ed8c394685aeeb0bc62efa5c03bdf7ef4f0d7baea93ece832257df1a4b6125fcfa38c35da05dee86aad28d46d73fc4e9d4e5a23d5276f4d6749544f85e0db85f4dc5f6ec3b127e12632686271c567ac99b85fb09cbf62fcb2c43f21c042ba10eabbb/h/thumbnails.vtt | 188.114.97.1 | 200 OK | 17 kB |
URL GET HTTP/2mc.vidstreams.site/_v2-gxnd/12a3c523fb105800ed8c394685aeeb0bc62efa5c03bdf7ef4f0d7baea93ece832257df1a4b6125fcfa38c35da05dee86aad28d46d73fc4e9d4e5a23d5276f4d6749544f85e0db85f4dc5f6ec3b127e12632686271c567ac99b85fb09cbf62fcb2c43f21c042ba10eabbb/h/thumbnails.vtt IP188.114.97.1:443
Requested byhttps://vidsrc.pro/embed/movie/560016 CertificateIssuerLet's Encrypt Subjectvidstreams.site Fingerprint52:E8:68:49:5C:F8:D3:4A:B6:62:BC:E3:74:A0:4A:8B:4E:42:2F:1A ValiditySun, 07 Apr 2024 04:10:47 GMT - Sat, 06 Jul 2024 04:10:46 GMT
File typeWebVTT subtitles, ASCII text Hash03d6c057083d025cd57ff8b28ac615f8 86d517203b8b6fbf2cc92b7cc3616c9121cf2975 0523832efb03bd184b4da6227bdef1513d8c4b6ae59c71caf5a875d90ad5e2c6
GET /_v2-gxnd/12a3c523fb105800ed8c394685aeeb0bc62efa5c03bdf7ef4f0d7baea93ece832257df1a4b6125fcfa38c35da05dee86aad28d46d73fc4e9d4e5a23d5276f4d6749544f85e0db85f4dc5f6ec3b127e12632686271c567ac99b85fb09cbf62fcb2c43f21c042ba10eabbb/h/thumbnails.vtt HTTP/1.1
Host: mc.vidstreams.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vidsrc.pro/
Origin: https://vidsrc.pro
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 19:31:54 GMT
content-type: text/vtt
last-modified: Tue, 23 Apr 2024 08:48:07 GMT
etag: W/"662775c7-423d"
x-cache: HIT
x-proxy-cache: MISS
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-cache-status: HIT
age: 91403
vary: Accept-Encoding
server: cloudflare
cf-ray: 87988429c88756a5-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| primeflix.lol/_next/static/chunks/69-c6458cf49e249670.js | 76.76.21.21 | 200 OK | 113 kB |
URL GET HTTP/2primeflix.lol/_next/static/chunks/69-c6458cf49e249670.js IP76.76.21.21:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subject*.primeflix.lol Fingerprint34:44:5E:C4:CE:25:48:19:29:42:B3:84:2F:3F:70:0C:9E:E8:DE:41 ValidityFri, 19 Apr 2024 06:26:37 GMT - Thu, 18 Jul 2024 06:26:36 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size113 kB (112604 bytes) Hash0f09430e5361b0b2892a70c436032138 b580ce9182ae5bc908ecc3c41bac4b1ee7de9913 a7ac5c57282e7158016e8aa140e56bf410dcc61dda1cfb6e046631668354aeef
GET /_next/static/chunks/69-c6458cf49e249670.js HTTP/1.1
Host: primeflix.lol
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/movie/560016/stream
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 456128
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="69-c6458cf49e249670.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 19:31:53 GMT
etag: W/"0f09430e5361b0b2892a70c436032138"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/69-c6458cf49e249670.js
x-vercel-cache: HIT
x-vercel-id: arn1::ghpkd-1713987113034-c0c427fda7d3
X-Firefox-Spdy: h2
|
|
| primeflix.lol/movie/560016/stream | 76.76.21.21 | 200 OK | 28 kB |
URL User Request GET HTTP/2primeflix.lol/movie/560016/stream IP76.76.21.21:443
CertificateIssuerLet's Encrypt Subject*.primeflix.lol Fingerprint34:44:5E:C4:CE:25:48:19:29:42:B3:84:2F:3F:70:0C:9E:E8:DE:41 ValidityFri, 19 Apr 2024 06:26:37 GMT - Thu, 18 Jul 2024 06:26:36 GMT
File typeHTML document, ASCII text, with very long lines (18729) Hash856ab19ed5e74492f6fc0359a93a951b 0c5a4317625bbfee6e0fd7f32f53d4f796ce1aa4 94b4fbc4d06a907337bd908bd471e1a91c0ffcc287f5116d71cbcbd5bf64140a
GET /movie/560016/stream HTTP/1.1
Host: primeflix.lol
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
age: 0
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
content-encoding: br
content-type: text/html; charset=utf-8
date: Wed, 24 Apr 2024 19:31:52 GMT
server: Vercel
strict-transport-security: max-age=63072000
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Url
x-matched-path: /movie/[slug]/stream
x-powered-by: Next.js
x-vercel-cache: MISS
x-vercel-execution-region: iad1
x-vercel-id: arn1::iad1::stqkv-1713987112579-9c79b2093491
X-Firefox-Spdy: h2
|
|
| aistekso.net/impression/Y2FcpFRbQmtRoSEV3fJe1EkS0ipZwqamV6jUai7R4wfCf8NYsCeYijNTQ4B8H7YtUMkJ-7FY9p_Bmk0gV1WxRoYAvsOJu-mr4Edz8wMV6dKKwFuNbV7h-7O1j-8yscEWmeXI1BCxdh2v-jDaB261wnGNnvoC2bww9x0CikgHnKAXK0m-UDbo5eN3w9X5qp2ToT19Bn8Yf0s8LYPmSFh6JsAHAgKbmO0STEYlPwtf8eU3TZoRBJkrguREqFG5IrVqY0j5QnoV6Mhx9Vt76HSCS_q6bVkqMy3QtI8d5HzUKqeurts6gcQBAKPB47j3ztUifQKUCWV-FcCdb_NjJkzrAjitCS7F06ZCZk1fu9WKWZ8yr7AK20Yz1P3R0g3G_xyS6qYZfr-DMoUwuJnODGw9OEoa80fJAGu-erzO3yJuwf_zVL9MX6MtkvkqDotfp2v60wRAy0iF84JeyjJuyFilI_lXw3-wdRaHkjwleD5zBbVE_Z3SnkTO8KlnFRSc5khyT48vJ-uO67AkfkbjBb0b4U2w6cNCIFrVPVP7IjmkYiQUliG5-Ha9DwnrwzleLE8R7BxL9X4OPQYqIPXWNw8W5R5-dfVOnKK8UM2oVCqsSVHHbmQnaC_OpuW3e8Il4MgT6EVNmih81LXZowSlKgwsRzUdwnSEtAVzfoT6rbKX3EbIB7cX5SHP0Ukj-CXAusJY8by10XvY-dHkl0wEpg7qgFq_bXJ92Hlm8jZ0uJUf62cXvsjKf9I3S8SLsfxk4UiGCHiuvftOHcEVX4bUbbmwRmQws90eoSa1LvkHbLQAb3ajOa78SEwVszdnDjiynOfAOeLcdw==?_z=7134625&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=4&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 | 139.45.197.244 | 200 OK | 43 B |
URL GET HTTP/2aistekso.net/impression/Y2FcpFRbQmtRoSEV3fJe1EkS0ipZwqamV6jUai7R4wfCf8NYsCeYijNTQ4B8H7YtUMkJ-7FY9p_Bmk0gV1WxRoYAvsOJu-mr4Edz8wMV6dKKwFuNbV7h-7O1j-8yscEWmeXI1BCxdh2v-jDaB261wnGNnvoC2bww9x0CikgHnKAXK0m-UDbo5eN3w9X5qp2ToT19Bn8Yf0s8LYPmSFh6JsAHAgKbmO0STEYlPwtf8eU3TZoRBJkrguREqFG5IrVqY0j5QnoV6Mhx9Vt76HSCS_q6bVkqMy3QtI8d5HzUKqeurts6gcQBAKPB47j3ztUifQKUCWV-FcCdb_NjJkzrAjitCS7F06ZCZk1fu9WKWZ8yr7AK20Yz1P3R0g3G_xyS6qYZfr-DMoUwuJnODGw9OEoa80fJAGu-erzO3yJuwf_zVL9MX6MtkvkqDotfp2v60wRAy0iF84JeyjJuyFilI_lXw3-wdRaHkjwleD5zBbVE_Z3SnkTO8KlnFRSc5khyT48vJ-uO67AkfkbjBb0b4U2w6cNCIFrVPVP7IjmkYiQUliG5-Ha9DwnrwzleLE8R7BxL9X4OPQYqIPXWNw8W5R5-dfVOnKK8UM2oVCqsSVHHbmQnaC_OpuW3e8Il4MgT6EVNmih81LXZowSlKgwsRzUdwnSEtAVzfoT6rbKX3EbIB7cX5SHP0Ukj-CXAusJY8by10XvY-dHkl0wEpg7qgFq_bXJ92Hlm8jZ0uJUf62cXvsjKf9I3S8SLsfxk4UiGCHiuvftOHcEVX4bUbbmwRmQws90eoSa1LvkHbLQAb3ajOa78SEwVszdnDjiynOfAOeLcdw==?_z=7134625&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=4&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 IP139.45.197.244:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectaistekso.net Fingerprint3E:A5:CE:35:F4:D9:45:6B:A1:3B:2E:9C:B3:9E:78:4D:8A:4B:51:BB ValiditySun, 24 Mar 2024 05:08:27 GMT - Sat, 22 Jun 2024 05:08:26 GMT
File typeGIF image data, version 89a, 1 x 1 Hashb4491705564909da7f9eaf749dbbfbb1 279315d507855c6a4351e1e2c2f39dd9cd2fccd8 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /impression/Y2FcpFRbQmtRoSEV3fJe1EkS0ipZwqamV6jUai7R4wfCf8NYsCeYijNTQ4B8H7YtUMkJ-7FY9p_Bmk0gV1WxRoYAvsOJu-mr4Edz8wMV6dKKwFuNbV7h-7O1j-8yscEWmeXI1BCxdh2v-jDaB261wnGNnvoC2bww9x0CikgHnKAXK0m-UDbo5eN3w9X5qp2ToT19Bn8Yf0s8LYPmSFh6JsAHAgKbmO0STEYlPwtf8eU3TZoRBJkrguREqFG5IrVqY0j5QnoV6Mhx9Vt76HSCS_q6bVkqMy3QtI8d5HzUKqeurts6gcQBAKPB47j3ztUifQKUCWV-FcCdb_NjJkzrAjitCS7F06ZCZk1fu9WKWZ8yr7AK20Yz1P3R0g3G_xyS6qYZfr-DMoUwuJnODGw9OEoa80fJAGu-erzO3yJuwf_zVL9MX6MtkvkqDotfp2v60wRAy0iF84JeyjJuyFilI_lXw3-wdRaHkjwleD5zBbVE_Z3SnkTO8KlnFRSc5khyT48vJ-uO67AkfkbjBb0b4U2w6cNCIFrVPVP7IjmkYiQUliG5-Ha9DwnrwzleLE8R7BxL9X4OPQYqIPXWNw8W5R5-dfVOnKK8UM2oVCqsSVHHbmQnaC_OpuW3e8Il4MgT6EVNmih81LXZowSlKgwsRzUdwnSEtAVzfoT6rbKX3EbIB7cX5SHP0Ukj-CXAusJY8by10XvY-dHkl0wEpg7qgFq_bXJ92Hlm8jZ0uJUf62cXvsjKf9I3S8SLsfxk4UiGCHiuvftOHcEVX4bUbbmwRmQws90eoSa1LvkHbLQAb3ajOa78SEwVszdnDjiynOfAOeLcdw==?_z=7134625&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=4&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 HTTP/1.1
Host: aistekso.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/
Cookie: OAID=008048578a544489e5e3e53da05cb7e8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:58 GMT
content-type: image/gif
content-length: 43
x-trace-id: 6b2df16bc6b8b55d87ce1fd152ecc27f
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| aistekso.net/500/7134625?excludes=&oaid=008048578a544489e5e3e53da05cb7e8&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 | 139.45.197.244 | 200 OK | 0 B |
URL OPTIONS HTTP/2aistekso.net/500/7134625?excludes=&oaid=008048578a544489e5e3e53da05cb7e8&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 IP139.45.197.244:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectaistekso.net Fingerprint3E:A5:CE:35:F4:D9:45:6B:A1:3B:2E:9C:B3:9E:78:4D:8A:4B:51:BB ValiditySun, 24 Mar 2024 05:08:27 GMT - Sat, 22 Jun 2024 05:08:26 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /500/7134625?excludes=&oaid=008048578a544489e5e3e53da05cb7e8&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 HTTP/1.1
Host: aistekso.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://primeflix.lol/
Origin: https://primeflix.lol
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:54 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://primeflix.lol
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-allow-credentials: true
access-control-max-age: 600
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| vidsrc.pro/api/proxy/viper/_v11/bb9d360a0dfed8bca1a0f9e64ed9664c718ca9d5da7dc71640405fc271f78b20b28b5fd0046d0b4976626b36b8d48189a58b3e34a858c6ad56d48979ac7ab92050ea26f0a30869023ccf0f7254354b7f9a2051ddbf0fc3b919a3b91b0b6aefb5688449f2f35ccdc2315e0203fe9c1fcc93a76f221b6574285243f6c65afae5c3/1080/index.m3u8.png?base=y.pollllop.com | 172.67.177.66 | 200 OK | 618 kB |
URL GET HTTP/3vidsrc.pro/api/proxy/viper/_v11/bb9d360a0dfed8bca1a0f9e64ed9664c718ca9d5da7dc71640405fc271f78b20b28b5fd0046d0b4976626b36b8d48189a58b3e34a858c6ad56d48979ac7ab92050ea26f0a30869023ccf0f7254354b7f9a2051ddbf0fc3b919a3b91b0b6aefb5688449f2f35ccdc2315e0203fe9c1fcc93a76f221b6574285243f6c65afae5c3/1080/index.m3u8.png?base=y.pollllop.com IP172.67.177.66:443
Requested byhttps://vidsrc.pro/embed/movie/560016 CertificateIssuerGoogle Trust Services LLC Subjectvidsrc.pro Fingerprint5C:93:BF:68:D8:2F:29:AA:01:0A:36:62:7E:52:D9:9E:C7:7A:0C:E6 ValidityFri, 05 Apr 2024 20:55:57 GMT - Thu, 04 Jul 2024 20:55:56 GMT
File typeM3U playlist, ASCII text, with very long lines (312) Size618 kB (617476 bytes) Hash4e135bdea6a37de61fc7378c9bb086b1 f6e25dd56045d411ab15aeec0dfe014f86fcb83f 525e7e50ca55a43da76916d851eba812e960898c976757dc34559f9ecb447629
GET /api/proxy/viper/_v11/bb9d360a0dfed8bca1a0f9e64ed9664c718ca9d5da7dc71640405fc271f78b20b28b5fd0046d0b4976626b36b8d48189a58b3e34a858c6ad56d48979ac7ab92050ea26f0a30869023ccf0f7254354b7f9a2051ddbf0fc3b919a3b91b0b6aefb5688449f2f35ccdc2315e0203fe9c1fcc93a76f221b6574285243f6c65afae5c3/1080/index.m3u8.png?base=y.pollllop.com HTTP/1.1
Host: vidsrc.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vidsrc.pro/embed/movie/560016
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 19:31:54 GMT
content-type: application/vnd.apple.mpegurl
last-modified: Wed, 24 Apr 2024 07:01:28 GMT
cache-control: max-age=2678400
cf-cache-status: HIT
age: 4538
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8798842a2ddab517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vidsrc.pro/static/embed.css?v2.3.06 | 172.67.177.66 | 200 OK | 3.0 kB |
URL GET HTTP/3vidsrc.pro/static/embed.css?v2.3.06 IP172.67.177.66:443
Requested byhttps://vidsrc.pro/embed/movie/560016 CertificateIssuerGoogle Trust Services LLC Subjectvidsrc.pro Fingerprint5C:93:BF:68:D8:2F:29:AA:01:0A:36:62:7E:52:D9:9E:C7:7A:0C:E6 ValidityFri, 05 Apr 2024 20:55:57 GMT - Thu, 04 Jul 2024 20:55:56 GMT
File typeASCII text, with very long lines (2954), with no line terminators Hashed056bdb3803e4b5c4fe839588e906e0 0cc5cfa0244c3efb5392534b4cacbdd48acefbd7 b1a5bf2b8c5c34e7b954686b525c490dd9a9f35f1c80b97d68badc416566c69c
GET /static/embed.css?v2.3.06 HTTP/1.1
Host: vidsrc.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vidsrc.pro/embed/movie/560016
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 19:31:53 GMT
content-type: text/css; charset=UTF-8
cf-bgj: minify
cache-control: public, max-age=2678400
etag: W/"b88-18f10645d20"
last-modified: Wed, 24 Apr 2024 13:56:04 GMT
cf-cache-status: HIT
age: 20081
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879884235c56b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| count.vidsrc.pro/count?p=/embed/movie/560016&r=primeflix.lol&t=Monkey%20Man | 0.0.0.0 | | 0 B |
URL GET count.vidsrc.pro/count?p=/embed/movie/560016&r=primeflix.lol&t=Monkey%20Man IP0.0.0.0:0
Requested byhttps://vidsrc.pro/embed/movie/560016 CertificateIssuerLet's Encrypt Subjectcount.vidsrc.pro Fingerprint73:E3:07:3A:64:B6:08:21:25:0D:89:55:4E:96:6B:ED:ED:50:C7:F9 ValidityThu, 11 Apr 2024 21:37:48 GMT - Wed, 10 Jul 2024 21:37:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /count?p=/embed/movie/560016&r=primeflix.lol&t=Monkey%20Man HTTP/1.1
Host: count.vidsrc.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vidsrc.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: no-store,no-cache
content-security-policy: frame-ancestors 'none'; default-src 'none'; img-src 'self' https://gc.zgo.at static.zgo.at data:; script-src 'self' https://gc.zgo.at static.zgo.at; frame-src 'self'; style-src 'self' https://gc.zgo.at static.zgo.at 'unsafe-inline'; font-src 'self' https://gc.zgo.at static.zgo.at; form-action 'self'; manifest-src 'self' https://gc.zgo.at static.zgo.at; connect-src 'self' wss:
content-type: image/gif
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=7776000
x-content-type-options: nosniff
x-frame-options: deny
x-rate-limit-limit: 4
x-rate-limit-remaining: 3
x-rate-limit-reset: 1
date: Wed, 24 Apr 2024 19:31:53 GMT
content-encoding: gzip
vary: Accept-Encoding
x-varnish: 174491340
age: 0
via: 1.1 www (Varnish/7.5)
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| primeflix.lol/_next/static/chunks/fd9d1056-764650a9573d5c26.js | 76.76.21.21 | 200 OK | 172 kB |
URL GET HTTP/2primeflix.lol/_next/static/chunks/fd9d1056-764650a9573d5c26.js IP76.76.21.21:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subject*.primeflix.lol Fingerprint34:44:5E:C4:CE:25:48:19:29:42:B3:84:2F:3F:70:0C:9E:E8:DE:41 ValidityFri, 19 Apr 2024 06:26:37 GMT - Thu, 18 Jul 2024 06:26:36 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size172 kB (172190 bytes) Hash07bed7eba1dceeeb9c638523e777f6dd 92eb0f91bf2da90ff4ad722ce5cd9417c5587c9a a76c068cf3857b3d68e6a49b85cc7e71ddf0ecdb60dbbf22c5c951e642904201
GET /_next/static/chunks/fd9d1056-764650a9573d5c26.js HTTP/1.1
Host: primeflix.lol
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/movie/560016/stream
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 456128
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="fd9d1056-764650a9573d5c26.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 19:31:53 GMT
etag: W/"07bed7eba1dceeeb9c638523e777f6dd"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/fd9d1056-764650a9573d5c26.js
x-vercel-cache: HIT
x-vercel-id: arn1::q8hd7-1713987113033-0b13df215868
X-Firefox-Spdy: h2
|
|
| primeflix.lol/_next/static/chunks/9-fcf89c456da661ab.js | 76.76.21.21 | 200 OK | 13 kB |
URL GET HTTP/2primeflix.lol/_next/static/chunks/9-fcf89c456da661ab.js IP76.76.21.21:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subject*.primeflix.lol Fingerprint34:44:5E:C4:CE:25:48:19:29:42:B3:84:2F:3F:70:0C:9E:E8:DE:41 ValidityFri, 19 Apr 2024 06:26:37 GMT - Thu, 18 Jul 2024 06:26:36 GMT
File typeJavaScript source, ASCII text, with very long lines (12666), with no line terminators Hash303f193c775e376f3773646e0c04efcc 8761be2207e640e81f2cd508d033c57cc22465c3 140652e5e69867851f3ee53b0483d040f53b2013195cdcfd6239fff0035f4073
GET /_next/static/chunks/9-fcf89c456da661ab.js HTTP/1.1
Host: primeflix.lol
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/movie/560016/stream
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 455880
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="9-fcf89c456da661ab.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 19:31:53 GMT
etag: W/"303f193c775e376f3773646e0c04efcc"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/9-fcf89c456da661ab.js
x-vercel-cache: HIT
x-vercel-id: arn1::4fg2b-1713987113040-3cc3359f00ba
X-Firefox-Spdy: h2
|
|
| vidsrc.pro/static/plugins.js?v2.3.06 | 172.67.177.66 | 200 OK | 7.3 kB |
URL GET HTTP/3vidsrc.pro/static/plugins.js?v2.3.06 IP172.67.177.66:443
Requested byhttps://vidsrc.pro/embed/movie/560016 CertificateIssuerGoogle Trust Services LLC Subjectvidsrc.pro Fingerprint5C:93:BF:68:D8:2F:29:AA:01:0A:36:62:7E:52:D9:9E:C7:7A:0C:E6 ValidityFri, 05 Apr 2024 20:55:57 GMT - Thu, 04 Jul 2024 20:55:56 GMT
File typeJavaScript source, ASCII text, with very long lines (7436), with no line terminators Hashe49639e2a1d6fb4858aaeab60a86b079 0728e4551f66fdb51ddf6c7d27ed6ac4080f9caf cec1d053a4911faf60f10b53404dfc255244bde9a3c2e94915eb18c8fb8eb026
GET /static/plugins.js?v2.3.06 HTTP/1.1
Host: vidsrc.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vidsrc.pro/embed/movie/560016
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 19:31:53 GMT
content-type: application/javascript; charset=UTF-8
cf-bgj: minify
cache-control: public, max-age=2678400
etag: W/"1c69-18ec1c05070"
last-modified: Tue, 09 Apr 2024 07:26:30 GMT
cf-cache-status: HIT
age: 20081
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879884235c5cb517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| gishejuy.com/400/7134623 | 139.45.197.242 | 200 OK | 81 kB |
IP139.45.197.242:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectgishejuy.com Fingerprint0E:1A:AC:78:15:75:C8:D7:77:E9:9F:1E:8F:A6:05:8C:F6:CA:AC:80 ValidityTue, 02 Apr 2024 05:15:48 GMT - Mon, 01 Jul 2024 05:15:47 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash546e15cbcf6b1d838eba4ea3e899db87 a0dd031180893d2a13b72095d3d64ea5433f709f b5b3005da9746a8d1938d918550d41df9246aa6131ca520d188061315873fe23
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /400/7134623 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:53 GMT
content-type: application/javascript
x-trace-id: 1f7360a2ea564d237e2da400b3ae7d05
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
set-cookie: OAID=030048c9adce4df4e0f611fd9d22d2fe; expires=Thu, 24 Apr 2025 19:31:53 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cameesse.net/11?rnd=1729872184&z=7134624&b=20830638&var=&varid=0&rqtdbc=1&rcvdbc=1&btp=7&rb=E0tRc3FJ0H7KuRZ-ptmcxM2Zz0Y3kloS2ZpbZTRLS1BxGcs6LqYU_vTbDpjOVoL5lw01yS--doBm_Wp-nNLDSFx6RET7bcK4GdVyfDBUD2EXNeDurJ99v5uDIC28IesHvhb2sfCgr__T70osWOR5OKcBLd-C-DsBTvDspp8u9NnDWI36Yjss-TiCwyqrIxZdkRkjep2C9dZSiNhb6rZINAGpapZ5C0FPgfDAofPkz4Y6OVBvNfi4IKVaHkCeeu9pHHUTJqChLaIC8x0JzNgTING__85uFE_O94glfRGZDc852VvAvk1oWsmbObcZ9dyonN1beOxFHKG5zKio8qpzwwI4IFScd1oeocXhBLe1jI2-pI3TWzS4xA1YQYGU6qwFK5JKeEIB5PLPK4jRAd1TRy8EkF4pxHa1RNUXCAdtI1aV9nEjvA7ycUshMxXOcqR9aOOxhx6m67pxgwdMXtivRx05Lkq1s1qlP3Iq_tx-5PAxCWKQj-htJ0G-eQdBj1WzunmEAKyk27VZ7edlb1t2ooMgslHtS54MVDPzW9IhD-8cRnOMolr0wVk-pdxUvBqyjVvk7bsQxGPvp35Ul0vTaXyGujfozH3-0emJDtEGrDZxTaW7l98iag==&ruid=12499f02-3156-4e72-8426-027d2d30a4eb&subid=807083059812769792&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&sah=1024&drf=&hil=1&ist=0&ot=110 | 139.45.197.242 | 200 OK | 0 B |
URL GET HTTP/2cameesse.net/11?rnd=1729872184&z=7134624&b=20830638&var=&varid=0&rqtdbc=1&rcvdbc=1&btp=7&rb=E0tRc3FJ0H7KuRZ-ptmcxM2Zz0Y3kloS2ZpbZTRLS1BxGcs6LqYU_vTbDpjOVoL5lw01yS--doBm_Wp-nNLDSFx6RET7bcK4GdVyfDBUD2EXNeDurJ99v5uDIC28IesHvhb2sfCgr__T70osWOR5OKcBLd-C-DsBTvDspp8u9NnDWI36Yjss-TiCwyqrIxZdkRkjep2C9dZSiNhb6rZINAGpapZ5C0FPgfDAofPkz4Y6OVBvNfi4IKVaHkCeeu9pHHUTJqChLaIC8x0JzNgTING__85uFE_O94glfRGZDc852VvAvk1oWsmbObcZ9dyonN1beOxFHKG5zKio8qpzwwI4IFScd1oeocXhBLe1jI2-pI3TWzS4xA1YQYGU6qwFK5JKeEIB5PLPK4jRAd1TRy8EkF4pxHa1RNUXCAdtI1aV9nEjvA7ycUshMxXOcqR9aOOxhx6m67pxgwdMXtivRx05Lkq1s1qlP3Iq_tx-5PAxCWKQj-htJ0G-eQdBj1WzunmEAKyk27VZ7edlb1t2ooMgslHtS54MVDPzW9IhD-8cRnOMolr0wVk-pdxUvBqyjVvk7bsQxGPvp35Ul0vTaXyGujfozH3-0emJDtEGrDZxTaW7l98iag==&ruid=12499f02-3156-4e72-8426-027d2d30a4eb&subid=807083059812769792&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&sah=1024&drf=&hil=1&ist=0&ot=110 IP139.45.197.242:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectcameesse.net Fingerprint40:09:71:B1:17:F8:74:15:9B:3D:0A:95:73:15:74:D6:05:A5:5B:44 ValidityFri, 22 Mar 2024 19:24:17 GMT - Thu, 20 Jun 2024 19:24:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /11?rnd=1729872184&z=7134624&b=20830638&var=&varid=0&rqtdbc=1&rcvdbc=1&btp=7&rb=E0tRc3FJ0H7KuRZ-ptmcxM2Zz0Y3kloS2ZpbZTRLS1BxGcs6LqYU_vTbDpjOVoL5lw01yS--doBm_Wp-nNLDSFx6RET7bcK4GdVyfDBUD2EXNeDurJ99v5uDIC28IesHvhb2sfCgr__T70osWOR5OKcBLd-C-DsBTvDspp8u9NnDWI36Yjss-TiCwyqrIxZdkRkjep2C9dZSiNhb6rZINAGpapZ5C0FPgfDAofPkz4Y6OVBvNfi4IKVaHkCeeu9pHHUTJqChLaIC8x0JzNgTING__85uFE_O94glfRGZDc852VvAvk1oWsmbObcZ9dyonN1beOxFHKG5zKio8qpzwwI4IFScd1oeocXhBLe1jI2-pI3TWzS4xA1YQYGU6qwFK5JKeEIB5PLPK4jRAd1TRy8EkF4pxHa1RNUXCAdtI1aV9nEjvA7ycUshMxXOcqR9aOOxhx6m67pxgwdMXtivRx05Lkq1s1qlP3Iq_tx-5PAxCWKQj-htJ0G-eQdBj1WzunmEAKyk27VZ7edlb1t2ooMgslHtS54MVDPzW9IhD-8cRnOMolr0wVk-pdxUvBqyjVvk7bsQxGPvp35Ul0vTaXyGujfozH3-0emJDtEGrDZxTaW7l98iag==&ruid=12499f02-3156-4e72-8426-027d2d30a4eb&subid=807083059812769792&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&sah=1024&drf=&hil=1&ist=0&ot=110 HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://primeflix.lol
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/
Cookie: scm=1; OAID=008048578a544489e5e3e53da05cb7e8; oaidts=1713987113
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:54 GMT
content-type: image/jpeg
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: https://primeflix.lol
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: d03536c4ccc9d38f5615ca9ba78375fb
access-control-expose-headers: X-Sc
set-cookie: OAID=008048578a544489e5e3e53da05cb7e8; expires=Thu, 24 Apr 2025 19:31:54 GMT; secure; SameSite=None
oaidts=1713987113; expires=Thu, 24 Apr 2025 19:31:54 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| alwingulla.com/88/tag.min.js | 104.21.72.155 | 200 OK | 72 kB |
URL GET HTTP/2alwingulla.com/88/tag.min.js IP104.21.72.155:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerGoogle Trust Services LLC Subjectalwingulla.com FingerprintB6:A3:BD:4F:5E:0D:58:50:07:9D:17:E0:30:97:67:97:9E:23:1A:1C ValidityTue, 12 Mar 2024 16:48:22 GMT - Mon, 10 Jun 2024 16:48:21 GMT
File typeJavaScript source, ASCII text, with very long lines (65494) Hashad104d6838b1598223e097ad025c7da6 6fd1a44f70d7f2674c98ea85b5659b6b9df72a3d 4a5fefe9aad006d46bc209cd5626fa7d1585f4bc04488ca993ab005ef66388d1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /88/tag.min.js HTTP/1.1
Host: alwingulla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 19:31:53 GMT
content-type: text/javascript; charset=utf-8
x-trace-id: 74ee515224f7dc246f98e6ff8a93bc88
cache-control: max-age=86400
last-modified: Wed, 24 Apr 2024 16:47:31 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
expires: Thu, 25 Apr 2024 18:09:08 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 4965
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BGhXWmOE45CChEvUT%2FzAZp0wDhjjbu%2FBSGIUulbXpgmiwCgUCOqJy1vkAyfSsuHXS3DNlwmIaDlEUN%2BprrY9IICEePG%2FGOBNOvB18S2zne1%2BIiyD2bwsAmFao%2FT%2B1Ofovg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87988420ac4a56bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| primeflix.lol/_next/static/chunks/39209d7c-f3bb05d37c29447d.js | 76.76.21.21 | 200 OK | 3.0 kB |
URL GET HTTP/2primeflix.lol/_next/static/chunks/39209d7c-f3bb05d37c29447d.js IP76.76.21.21:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subject*.primeflix.lol Fingerprint34:44:5E:C4:CE:25:48:19:29:42:B3:84:2F:3F:70:0C:9E:E8:DE:41 ValidityFri, 19 Apr 2024 06:26:37 GMT - Thu, 18 Jul 2024 06:26:36 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (3013), with no line terminators Hasha08860c568e8403c1eff1a306fe71ecf 6307eefc2b6034bfa9b0f72bd41c7eb519c8ad89 f9b1f3549b3899a6e59ea5e934d16ec275482e4ed968fc075259b971b05b06a0
GET /_next/static/chunks/39209d7c-f3bb05d37c29447d.js HTTP/1.1
Host: primeflix.lol
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/movie/560016/stream
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 456128
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="39209d7c-f3bb05d37c29447d.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 19:31:53 GMT
etag: W/"114bb41ae2ebef4655f7caded2448678"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/39209d7c-f3bb05d37c29447d.js
x-vercel-cache: HIT
x-vercel-id: arn1::q8hd7-1713987113038-0e10f5d75211
X-Firefox-Spdy: h2
|
|
| primeflix.lol/?_rsc=1qrqq | 76.76.21.21 | 200 OK | 127 kB |
URL GET HTTP/2primeflix.lol/?_rsc=1qrqq IP76.76.21.21:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subject*.primeflix.lol Fingerprint34:44:5E:C4:CE:25:48:19:29:42:B3:84:2F:3F:70:0C:9E:E8:DE:41 ValidityFri, 19 Apr 2024 06:26:37 GMT - Thu, 18 Jul 2024 06:26:36 GMT
Size127 kB (127333 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?_rsc=1qrqq HTTP/1.1
Host: primeflix.lol
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://primeflix.lol/movie/560016/stream
RSC: 1
Next-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22movie%22%2C%7B%22children%22%3A%5B%5B%22slug%22%2C%22560016%22%2C%22d%22%5D%2C%7B%22children%22%3A%5B%22stream%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%5D%7D%5D%7D%5D%7D%5D%7D%2Cnull%2Cnull%2Ctrue%5D
Next-Router-Prefetch: 1
Next-Url: /movie/560016/stream
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 456307
cache-control: public, max-age=0, must-revalidate
content-disposition: inline
content-encoding: gzip
content-type: text/x-component
date: Wed, 24 Apr 2024 19:31:53 GMT
etag: W/"b4b70a0467314bc1b4f22c1ad2f3138b"
server: Vercel
strict-transport-security: max-age=63072000
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Url
x-matched-path: /index.rsc
x-vercel-cache: HIT
x-vercel-id: arn1::wgjkx-1713987113480-21c13e1b3e1f
X-Firefox-Spdy: h2
|
|
| aistekso.net/401/7134625?oo=1&oaid=008048578a544489e5e3e53da05cb7e8&sw_version=v1.337.0 | 139.45.197.244 | 200 OK | 2.3 kB |
URL GET HTTP/2aistekso.net/401/7134625?oo=1&oaid=008048578a544489e5e3e53da05cb7e8&sw_version=v1.337.0 IP139.45.197.244:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectaistekso.net Fingerprint3E:A5:CE:35:F4:D9:45:6B:A1:3B:2E:9C:B3:9E:78:4D:8A:4B:51:BB ValiditySun, 24 Mar 2024 05:08:27 GMT - Sat, 22 Jun 2024 05:08:26 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (2467), with no line terminators Hashb0c4636a5b57d92ef8765f449d8d7658 0e847744381df77465651e1eb358c78dbb6dcbea cb9d0282cbc53ca2282dc669bf7198aec6036362c9858f4828ed0b674fe7502e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /401/7134625?oo=1&oaid=008048578a544489e5e3e53da05cb7e8&sw_version=v1.337.0 HTTP/1.1
Host: aistekso.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://primeflix.lol
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/
Cookie: OAID=030048119f8f4927f58f5e9dfae598cb
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:53 GMT
content-type: application/json
x-trace-id: 48fa8db83ace4175bf8c75de1e3561f4
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://primeflix.lol
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
set-cookie: OAID=008048578a544489e5e3e53da05cb7e8; expires=Thu, 24 Apr 2025 19:31:53 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| gishejuy.com/400/7134623?oo=1&oaid=008048578a544489e5e3e53da05cb7e8&sw_version=v1.337.0 | 139.45.197.242 | 200 OK | 2.3 kB |
URL GET HTTP/2gishejuy.com/400/7134623?oo=1&oaid=008048578a544489e5e3e53da05cb7e8&sw_version=v1.337.0 IP139.45.197.242:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectgishejuy.com Fingerprint0E:1A:AC:78:15:75:C8:D7:77:E9:9F:1E:8F:A6:05:8C:F6:CA:AC:80 ValidityTue, 02 Apr 2024 05:15:48 GMT - Mon, 01 Jul 2024 05:15:47 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (2466), with no line terminators Hash64d290ee17286aa65d1aece204c39889 bdf84e709f822da8f23ffb1489e9c105f91aba5e adde39b1568a73c8321b9fade9c030e6b20456eba1a1fe9370cfae497938aa50
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /400/7134623?oo=1&oaid=008048578a544489e5e3e53da05cb7e8&sw_version=v1.337.0 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://primeflix.lol
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/
Cookie: OAID=030048c9adce4df4e0f611fd9d22d2fe
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:53 GMT
content-type: application/json
x-trace-id: b58e32224141b041086c6848b7550831
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
vary: Origin
access-control-allow-origin: https://primeflix.lol
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
set-cookie: OAID=008048578a544489e5e3e53da05cb7e8; expires=Thu, 24 Apr 2025 19:31:53 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| veepteero.com/88/46726 | 139.45.197.242 | 200 OK | 3.1 kB |
IP139.45.197.242:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectveepteero.com Fingerprint13:68:56:48:EC:67:A6:93:BE:E0:36:BC:FA:04:75:6D:6E:D2:C1:91 ValiditySat, 23 Mar 2024 05:18:36 GMT - Fri, 21 Jun 2024 05:18:35 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (3340), with no line terminators Hash5ac6190de9d2bed8d56bf1860cf2faa6 ed81627480bb8d6319a013f1f7d55aa44e21aae7 a7c8013390e6cbc26bec5f979e662cf018772a1696c456d3abae112983cb1a68
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /88/46726 HTTP/1.1
Host: veepteero.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://primeflix.lol/
Origin: https://primeflix.lol
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:53 GMT
content-type: application/json
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://primeflix.lol
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| lkbx.me/4KqY7?uid=w8jopbuhcbj66rq03m9ur3gg | 47.89.248.255 | 200 OK | 1.1 kB |
URL GET HTTP/2lkbx.me/4KqY7?uid=w8jopbuhcbj66rq03m9ur3gg IP47.89.248.255:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerDigiCert Inc Subjectlkbx.me Fingerprint85:1C:F3:96:31:0D:EC:E9:85:9D:6E:27:5F:AE:1D:6C:F2:9B:F5:BD ValidityMon, 27 Nov 2023 00:00:00 GMT - Tue, 26 Nov 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (1129), with no line terminators Hashf477d5e9bb2a8acb7c83e1415342a541 e87685a63a31833925ed6accc879ff6816211f86 ec629fa52e276575ea4e3ab15a58ea9ded7629810cd467cff8bed69b121e3db7
GET /4KqY7?uid=w8jopbuhcbj66rq03m9ur3gg HTTP/1.1
Host: lkbx.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 19:31:56 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
set-cookie: discuz_2132_saltkey=t1KwaC5c; expires=Fri, 24-May-2024 19:31:56 GMT; Max-Age=2592000; path=/; secure; httponly
discuz_2132_lang=en; path=/; secure
discuz_2132_lang=en; path=/; secure
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| primeflix.lol/_next/static/chunks/app/movie/%5Bslug%5D/stream/page-6bf321111402a7a9.js | 76.76.21.21 | 200 OK | 6.7 kB |
URL GET HTTP/2primeflix.lol/_next/static/chunks/app/movie/%5Bslug%5D/stream/page-6bf321111402a7a9.js IP76.76.21.21:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subject*.primeflix.lol Fingerprint34:44:5E:C4:CE:25:48:19:29:42:B3:84:2F:3F:70:0C:9E:E8:DE:41 ValidityFri, 19 Apr 2024 06:26:37 GMT - Thu, 18 Jul 2024 06:26:36 GMT
File typeASCII text, with very long lines (6995), with no line terminators Hash01d1d875d68cfce58307cc10978fb807 e54b2bf0f08076d0ac89826fdba1b82b01919047 c4d67e3fe6b6aa342946e345a5c7402ba7ca73d33a9d5d749b8fb24c88f46c52
GET /_next/static/chunks/app/movie/%5Bslug%5D/stream/page-6bf321111402a7a9.js HTTP/1.1
Host: primeflix.lol
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/movie/560016/stream
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 454669
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="page-6bf321111402a7a9.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 19:31:53 GMT
etag: W/"f2345b186a6f505c83361a5c671a9d98"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/app/movie/%5Bslug%5D/stream/page-6bf321111402a7a9.js
x-vercel-cache: HIT
x-vercel-id: arn1::wgjkx-1713987113041-31851aad6bd9
X-Firefox-Spdy: h2
|
|
| vidsrc.pro/static/player.core.js?v2.3.06 | 172.67.177.66 | 200 OK | 18 kB |
URL GET HTTP/3vidsrc.pro/static/player.core.js?v2.3.06 IP172.67.177.66:443
Requested byhttps://vidsrc.pro/embed/movie/560016 CertificateIssuerGoogle Trust Services LLC Subjectvidsrc.pro Fingerprint5C:93:BF:68:D8:2F:29:AA:01:0A:36:62:7E:52:D9:9E:C7:7A:0C:E6 ValidityFri, 05 Apr 2024 20:55:57 GMT - Thu, 04 Jul 2024 20:55:56 GMT
File typeJavaScript source, ASCII text, with very long lines (17789), with no line terminators Hash77fefee48ed56197b32afadd26b2bcd0 a07343af3c4200a93d5b66d7ea81e1979adf7d0a d11bba0b5e1010fa15d8d8eadee8c4c4b92f17cf0c27dff7ecde17dabb6d09be
GET /static/player.core.js?v2.3.06 HTTP/1.1
Host: vidsrc.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vidsrc.pro/embed/movie/560016
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 19:31:53 GMT
content-type: application/javascript; charset=UTF-8
cf-bgj: minify
cf-polished: origSize=17790
cache-control: public, max-age=2678400
etag: W/"457e-18ec46ae2b8"
last-modified: Tue, 09 Apr 2024 19:52:03 GMT
cf-cache-status: HIT
age: 20081
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879884234c53b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| up.vidstream.cloud/_v11/bb9d360a0dfed8bca1a0f9e64ed9664c718ca9d5da7dc71640405fc271f78b20b28b5fd0046d0b4976626b36b8d48189a58b3e34a858c6ad56d48979ac7ab92050ea26f0a30869023ccf0f7254354b7f9a2051ddbf0fc3b919a3b91b0b6aefb5688449f2f35ccdc2315e0203fe9c1fcce227bf857b2dcf530656afdd546badc5/720/seg-5-v1-a1.html | 104.21.55.231 | 200 OK | 2.3 MB |
URL GET HTTP/3up.vidstream.cloud/_v11/bb9d360a0dfed8bca1a0f9e64ed9664c718ca9d5da7dc71640405fc271f78b20b28b5fd0046d0b4976626b36b8d48189a58b3e34a858c6ad56d48979ac7ab92050ea26f0a30869023ccf0f7254354b7f9a2051ddbf0fc3b919a3b91b0b6aefb5688449f2f35ccdc2315e0203fe9c1fcce227bf857b2dcf530656afdd546badc5/720/seg-5-v1-a1.html IP104.21.55.231:443
Requested byhttps://vidsrc.pro/embed/movie/560016 CertificateIssuerLet's Encrypt Subjectvidstream.cloud Fingerprint0C:AE:07:CE:71:1D:67:FE:FC:EE:8F:A1:E5:6A:91:E9:FE:CF:50:B4 ValidityFri, 05 Apr 2024 19:30:26 GMT - Thu, 04 Jul 2024 19:30:25 GMT
Size2.3 MB (2340600 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_v11/bb9d360a0dfed8bca1a0f9e64ed9664c718ca9d5da7dc71640405fc271f78b20b28b5fd0046d0b4976626b36b8d48189a58b3e34a858c6ad56d48979ac7ab92050ea26f0a30869023ccf0f7254354b7f9a2051ddbf0fc3b919a3b91b0b6aefb5688449f2f35ccdc2315e0203fe9c1fcce227bf857b2dcf530656afdd546badc5/720/seg-5-v1-a1.html HTTP/1.1
Host: up.vidstream.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vidsrc.pro
DNT: 1
Connection: keep-alive
Referer: https://vidsrc.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 19:31:55 GMT
content-type: text/html
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: If-Modified-Since,Range
access-control-expose-headers: Accept-Ranges,Content-Encoding,Content-Length,Content-Range
last-modified: Sun, 19 Nov 2000 08:52:00 GMT
expires: Thu, 24 Apr 2025 04:06:39 GMT
cache-control: max-age=31536000
x-cache: HIT
cf-cache-status: HIT
vary: Accept-Encoding
server: cloudflare
cf-ray: 879884315c2756bf-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| primeflix.lol/_next/static/chunks/772-732179aac77444c7.js | 76.76.21.21 | 200 OK | 70 kB |
URL GET HTTP/2primeflix.lol/_next/static/chunks/772-732179aac77444c7.js IP76.76.21.21:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subject*.primeflix.lol Fingerprint34:44:5E:C4:CE:25:48:19:29:42:B3:84:2F:3F:70:0C:9E:E8:DE:41 ValidityFri, 19 Apr 2024 06:26:37 GMT - Thu, 18 Jul 2024 06:26:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_next/static/chunks/772-732179aac77444c7.js HTTP/1.1
Host: primeflix.lol
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/movie/560016/stream
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 451680
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="772-732179aac77444c7.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 19:31:53 GMT
etag: W/"cba312463e4e3a4cff2276b7d79e4d3b"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/772-732179aac77444c7.js
x-vercel-cache: HIT
x-vercel-id: arn1::h4t4n-1713987113035-185c0a0cd5c8
X-Firefox-Spdy: h2
|
|
| moonoafy.net/pfe/current/tag.min.js?z=7134626 | 139.45.197.250 | 200 OK | 15 kB |
URL GET HTTP/2moonoafy.net/pfe/current/tag.min.js?z=7134626 IP139.45.197.250:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
File typeJavaScript source, ASCII text, with very long lines (14612), with no line terminators Hashf92b69cd55585095043dbcbb9b944fed fe5eadd8f3ad4098668890e5de21498c63b03e67 e67ec109f1203e29fefcb9a2714f6de702f5c183d32f4cc0858d265cf7cfd095
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pfe/current/tag.min.js?z=7134626 HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:53 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 14:40:04 GMT
etag: W/"662919c4-3914"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| primeflix.lol/_next/static/chunks/app/layout-7de5d54b9d4be558.js | 76.76.21.21 | 200 OK | 4.6 kB |
URL GET HTTP/2primeflix.lol/_next/static/chunks/app/layout-7de5d54b9d4be558.js IP76.76.21.21:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subject*.primeflix.lol Fingerprint34:44:5E:C4:CE:25:48:19:29:42:B3:84:2F:3F:70:0C:9E:E8:DE:41 ValidityFri, 19 Apr 2024 06:26:37 GMT - Thu, 18 Jul 2024 06:26:36 GMT
File typeJavaScript source, ASCII text, with very long lines (4652), with no line terminators Hash5b5a38254dc56f48dc674d9ceba8e83d daa4ff23da78eab3685f17751f48e83da5a86437 931db5bdddfe5d50cf493d2c49fb73572f5d2ac590e209157acbd19ac5625863
GET /_next/static/chunks/app/layout-7de5d54b9d4be558.js HTTP/1.1
Host: primeflix.lol
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/movie/560016/stream
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 455879
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="layout-7de5d54b9d4be558.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 19:31:53 GMT
etag: W/"81d7e6e58cdabdb50c1d5fd3d8b1995c"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/app/layout-7de5d54b9d4be558.js
x-vercel-cache: HIT
x-vercel-id: arn1::h4t4n-1713987113036-cf985f0b6887
X-Firefox-Spdy: h2
|
|
| primeflix.lol/sw.js | 76.76.21.21 | 404 Not Found | 9.7 kB |
IP76.76.21.21:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subject*.primeflix.lol Fingerprint34:44:5E:C4:CE:25:48:19:29:42:B3:84:2F:3F:70:0C:9E:E8:DE:41 ValidityFri, 19 Apr 2024 06:26:37 GMT - Thu, 18 Jul 2024 06:26:36 GMT
File typeHTML document, ASCII text, with very long lines (11223), with no line terminators Hashe9a4873ed4843311d6a7f565439e4e9c 9ee16728b62301c62fe8553947804de9fd8234bd 019828792080b4a1f1735705e6826e158779ad9928f949dd39f002b9e2b6fbae
GET /sw.js HTTP/1.1
Host: primeflix.lol
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://primeflix.lol/movie/560016/stream
DNT: 1
Connection: keep-alive
Cookie: prefetchAd_7134622=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
access-control-allow-origin: *
age: 455890
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="404"
content-encoding: br
content-type: text/html; charset=utf-8
date: Wed, 24 Apr 2024 19:31:54 GMT
etag: W/"08359d2229dc4ec7697a18669b6b18d3"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /404
x-vercel-cache: HIT
x-vercel-id: arn1::jq4t8-1713987114173-8b21b7c51a01
X-Firefox-Spdy: h2
|
|
| cameesse.net/27/7552beb94fc0bdff7bbb33cad3d1ab0a | 139.45.197.242 | 200 OK | 413 kB |
URL GET HTTP/2cameesse.net/27/7552beb94fc0bdff7bbb33cad3d1ab0a IP139.45.197.242:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectcameesse.net Fingerprint40:09:71:B1:17:F8:74:15:9B:3D:0A:95:73:15:74:D6:05:A5:5B:44 ValidityFri, 22 Mar 2024 19:24:17 GMT - Thu, 20 Jun 2024 19:24:16 GMT
File typeJavaScript source, ASCII text, with very long lines (65523) Size413 kB (413423 bytes) Hash297cc248309ba835cf13a1f82fd3f938 1e6f51ce257a0ee53e25280dd44092ed33339847 b2ba9d8b2216d22f8f31a594bc22ee21f60e2b539474a650be1e87dea87d5ed7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /27/7552beb94fc0bdff7bbb33cad3d1ab0a HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/
Cookie: scm=1; OAID=008048578a544489e5e3e53da05cb7e8; oaidts=1713987113
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:53 GMT
content-type: application/javascript
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: 675b6052a34b06869c47f6ba157f45fd
cache-control: max-age:290304000, public
last-modified: Tue, 09 Apr 2024 03:16:58 GMT
expires: Tue, 09 May 2084 03:16:58 GMT
access-control-expose-headers: X-Sc
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| primeflix.lol/favicon.ico | 76.76.21.21 | 200 OK | 15 kB |
URL GET HTTP/2primeflix.lol/favicon.ico IP76.76.21.21:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subject*.primeflix.lol Fingerprint34:44:5E:C4:CE:25:48:19:29:42:B3:84:2F:3F:70:0C:9E:E8:DE:41 ValidityFri, 19 Apr 2024 06:26:37 GMT - Thu, 18 Jul 2024 06:26:36 GMT
File typeMS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel Hash633a3e14c44e73dfd5c6663d5a3fa9ac 93dbd0a15327e22a76c40b2260f47223ecd6d793 a99cee3a4a05c314013301b2f44472fe3fb2c4e70c386bed82e96c133fa2f8c6
GET /favicon.ico HTTP/1.1
Host: primeflix.lol
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/movie/560016/stream
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 456305
cache-control: public, max-age=0, must-revalidate
content-disposition: inline
content-encoding: br
content-type: image/x-icon
date: Wed, 24 Apr 2024 19:31:53 GMT
etag: W/"3591c2427b4dd072f4f2cbae003aa7a3"
server: Vercel
strict-transport-security: max-age=63072000
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Url
x-matched-path: /favicon.ico
x-vercel-cache: HIT
x-vercel-id: arn1::c4whj-1713987113381-d0f1c8778edf
X-Firefox-Spdy: h2
|
|
| cameesse.net/1?z=7134624 | 139.45.197.242 | 200 OK | 42 kB |
IP139.45.197.242:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectcameesse.net Fingerprint40:09:71:B1:17:F8:74:15:9B:3D:0A:95:73:15:74:D6:05:A5:5B:44 ValidityFri, 22 Mar 2024 19:24:17 GMT - Thu, 20 Jun 2024 19:24:16 GMT
File typeJavaScript source, ASCII text, with very long lines (42427) Hash211096c4a5aa6666f344de8383076228 e1589b5a01a955ddeaa04b8d1ae4b99f653651b9 610365e4cd53f8f5ae03aad8f1ac79b1e063b656dfe3a632eef78d80ee8b05f6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /1?z=7134624 HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:53 GMT
content-type: text/javascript
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: 6a530f7f98552d0044f3eadc91afec43
access-control-expose-headers: X-Sc
x-sc: Ou3mnfUdgw0A8CAFoqsQFQHLuimwQPxS4pMRkQz2YvgUYYhlgHiu5TFMLb7rUzkXpi2AkejFWSYQlv6qvvan9I8Qc24=
set-cookie: scm=1; expires=Thu, 24 Apr 2025 19:31:53 GMT; secure; SameSite=None
OAID=04004820f427400de4952e1dfe748cca; expires=Thu, 24 Apr 2025 19:31:53 GMT; secure; SameSite=None
oaidts=1713987113; expires=Thu, 24 Apr 2025 19:31:53 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| vidsrc.pro/api/proxy/viper/_v11/bb9d360a0dfed8bca1a0f9e64ed9664c718ca9d5da7dc71640405fc271f78b20b28b5fd0046d0b4976626b36b8d48189a58b3e34a858c6ad56d48979ac7ab92050ea26f0a30869023ccf0f7254354b7f9a2051ddbf0fc3b919a3b91b0b6aefb5688449f2f35ccdc2315e0203fe9c1fcc93a76f221b6574285243f6c65afae5c3/playlist.m3u8.png?base=y.pollllop.com | 172.67.177.66 | 200 OK | 1.2 kB |
URL GET HTTP/3vidsrc.pro/api/proxy/viper/_v11/bb9d360a0dfed8bca1a0f9e64ed9664c718ca9d5da7dc71640405fc271f78b20b28b5fd0046d0b4976626b36b8d48189a58b3e34a858c6ad56d48979ac7ab92050ea26f0a30869023ccf0f7254354b7f9a2051ddbf0fc3b919a3b91b0b6aefb5688449f2f35ccdc2315e0203fe9c1fcc93a76f221b6574285243f6c65afae5c3/playlist.m3u8.png?base=y.pollllop.com IP172.67.177.66:443
Requested byhttps://vidsrc.pro/embed/movie/560016 CertificateIssuerGoogle Trust Services LLC Subjectvidsrc.pro Fingerprint5C:93:BF:68:D8:2F:29:AA:01:0A:36:62:7E:52:D9:9E:C7:7A:0C:E6 ValidityFri, 05 Apr 2024 20:55:57 GMT - Thu, 04 Jul 2024 20:55:56 GMT
File typeM3U playlist, ASCII text, with very long lines (1178), with no line terminators Hash4a468e04c939f38926219fb1b6c79c33 34decd85b932fb43bf05fe0f5107677cf7f9cb57 d4575d0917c768b7d81e95ce75672aa38436493f99f02f9ab0f5d27d7220b949
GET /api/proxy/viper/_v11/bb9d360a0dfed8bca1a0f9e64ed9664c718ca9d5da7dc71640405fc271f78b20b28b5fd0046d0b4976626b36b8d48189a58b3e34a858c6ad56d48979ac7ab92050ea26f0a30869023ccf0f7254354b7f9a2051ddbf0fc3b919a3b91b0b6aefb5688449f2f35ccdc2315e0203fe9c1fcc93a76f221b6574285243f6c65afae5c3/playlist.m3u8.png?base=y.pollllop.com HTTP/1.1
Host: vidsrc.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vidsrc.pro/embed/movie/560016
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 19:31:54 GMT
content-type: application/vnd.apple.mpegurl
last-modified: Wed, 24 Apr 2024 07:01:27 GMT
cache-control: max-age=2678400
cf-cache-status: HIT
age: 4538
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87988429ad53b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vidsrc.pro/embed/movie/560016 | 172.67.177.66 | 200 OK | 3.6 kB |
URL GET HTTP/2vidsrc.pro/embed/movie/560016 IP172.67.177.66:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerGoogle Trust Services LLC Subjectvidsrc.pro Fingerprint5C:93:BF:68:D8:2F:29:AA:01:0A:36:62:7E:52:D9:9E:C7:7A:0C:E6 ValidityFri, 05 Apr 2024 20:55:57 GMT - Thu, 04 Jul 2024 20:55:56 GMT
File typeJavaScript source, ASCII text, with very long lines (3669), with no line terminators Hash81c9ea311274aabc0fdaeb870388e12c e395a9d76aaca76a6c0df4fd44d41fd92c7ba392 a6dd3d0cb34df3a3ccde55de3c7dd0b5af89eaab67a4bb1dd4aaf607baf053fe
GET /embed/movie/560016 HTTP/1.1
Host: vidsrc.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 19:31:53 GMT
content-type: text/html
cf-cache-status: DYNAMIC
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87988421daca712b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| primeflix.lol/_next/static/chunks/324-9fa5b5bcca8bd748.js | 76.76.21.21 | 200 OK | 90 kB |
URL GET HTTP/2primeflix.lol/_next/static/chunks/324-9fa5b5bcca8bd748.js IP76.76.21.21:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subject*.primeflix.lol Fingerprint34:44:5E:C4:CE:25:48:19:29:42:B3:84:2F:3F:70:0C:9E:E8:DE:41 ValidityFri, 19 Apr 2024 06:26:37 GMT - Thu, 18 Jul 2024 06:26:36 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash71ac0955ea9c375c58d5fc63e08e1551 a863d999964b505cff3c0fd6bf1c81941b15dec7 1350e082d5bae184cdf5f175de03ac730eb6de67928dd908e1cab4708725e36b
GET /_next/static/chunks/324-9fa5b5bcca8bd748.js HTTP/1.1
Host: primeflix.lol
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/movie/560016/stream
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 456128
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="324-9fa5b5bcca8bd748.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 19:31:53 GMT
etag: W/"71ac0955ea9c375c58d5fc63e08e1551"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/324-9fa5b5bcca8bd748.js
x-vercel-cache: HIT
x-vercel-id: arn1::jbc7d-1713987113565-7655b2396322
X-Firefox-Spdy: h2
|
|
| aistekso.net/500/7134625?excludes=&oaid=008048578a544489e5e3e53da05cb7e8&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 | 139.45.197.244 | 200 OK | 1.8 kB |
URL GET HTTP/2aistekso.net/500/7134625?excludes=&oaid=008048578a544489e5e3e53da05cb7e8&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 IP139.45.197.244:443
Requested byhttps://primeflix.lol/movie/560016/stream CertificateIssuerLet's Encrypt Subjectaistekso.net Fingerprint3E:A5:CE:35:F4:D9:45:6B:A1:3B:2E:9C:B3:9E:78:4D:8A:4B:51:BB ValiditySun, 24 Mar 2024 05:08:27 GMT - Sat, 22 Jun 2024 05:08:26 GMT
File typetroff or preprocessor input, Unicode text, UTF-8 text, with very long lines (1783), with no line terminators Hash9e05ee37a8ac9ae5f815aaf9f3b91e7a a0a4ce1c990b908cbee84e014b8ec5e2b36793e3 abec3cef155677e2e08488add56f7d40e075e9bbcd204f7bc1ace73f3d2b5c7b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /500/7134625?excludes=&oaid=008048578a544489e5e3e53da05cb7e8&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&pl=https%3A%2F%2Fprimeflix.lol%2Fmovie%2F560016%2Fstream&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 HTTP/1.1
Host: aistekso.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://primeflix.lol
DNT: 1
Connection: keep-alive
Referer: https://primeflix.lol/
Cookie: OAID=008048578a544489e5e3e53da05cb7e8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:31:54 GMT
content-type: application/javascript
x-trace-id: 588a18dff060c9da3f2ad361d8360ccf
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
vary: Origin
access-control-allow-origin: https://primeflix.lol
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
set-cookie: OAID=008048578a544489e5e3e53da05cb7e8; expires=Thu, 24 Apr 2025 19:31:54 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|