{"report_id":"07c229cf-1593-4316-8ab4-77e747d312b3","version":6,"status":"done","tags":[],"date":"2025-10-02T09:44:58Z","url":{"schema":"http","addr":"bflix.sh","fqdn":"bflix.sh","domain":"bflix.sh","tld":"sh"},"ip":{"addr":"172.67.129.202","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bflix.sh/","fqdn":"bflix.sh","domain":"bflix.sh","tld":"sh"},"title":"BFLIX | Watch Free Movies online"},"submit":{"url":{"schema":"http","addr":"bflix.sh","fqdn":"bflix.sh","domain":"bflix.sh","tld":"sh"},"ip":{"addr":"172.67.129.202","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-06T09:44:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"bflix.sh","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"acscdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"usrpubtrk.com","ip":{"addr":"104.21.92.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-16","domain_rank":6824,"first_seen":"2025-06-17T13:34:00.105327Z","last_seen":"2025-10-01T11:51:49.515021Z","alert_count":3,"request_count":1,"received_data":528,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-28T22:11:46.369912Z","alert_count":0,"request_count":4,"received_data":116316,"sent_data":2128,"comment":"","tags":null,"fingerprints":null},{"fqdn":"adexchangeclear.com","ip":{"addr":"172.67.223.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-04-27","domain_rank":24943,"first_seen":"2025-07-16T08:40:02.47428Z","last_seen":"2025-09-28T23:49:18.904828Z","alert_count":12,"request_count":12,"received_data":46559,"sent_data":9187,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-09-28T22:14:23.990054Z","alert_count":0,"request_count":8,"received_data":641014,"sent_data":3736,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"acscdn.com","ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-05-05","domain_rank":18769,"first_seen":"2020-05-06T08:07:13Z","last_seen":"2025-09-29T02:40:09.468487Z","alert_count":4,"request_count":4,"received_data":484733,"sent_data":1643,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-09-28T22:11:36.689828Z","alert_count":0,"request_count":1,"received_data":423113,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bflix.sh","ip":{"addr":"104.21.2.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-08-19","domain_rank":223733,"first_seen":"2023-08-22T22:17:50Z","last_seen":"2025-09-14T16:22:51.366308Z","alert_count":10,"request_count":10,"received_data":535501,"sent_data":4966,"comment":"","tags":null,"fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"jQuery:1.12.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Bootstrap:4.6.1","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"SweetAlert","description":"SweetAlert is a JavaScript library that provides alternative alert and modal dialog boxes for web applications, with customisable features, aiming to improve the user interface of the default browser dialogs.","website":"https://sweetalert.js.org","common_platform_enumeration":"","icon":"SweetAlert.png","categories":["JavaScript libraries"]}]},{"fqdn":"vidwestxyz.com","ip":{"addr":"172.67.209.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-11-05","domain_rank":251388,"first_seen":"2025-04-08T22:21:41.949384Z","last_seen":"2025-09-29T13:35:13.209308Z","alert_count":0,"request_count":5,"received_data":50510566,"sent_data":2600,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-28T22:11:39.889585Z","alert_count":0,"request_count":1,"received_data":6941,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"acscdn.com/script/videoSliderAlt.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9356aa40825690d107c4502d81c91f90","sha1":"c500946d6a003a4f6348191d4f4d7d6036566284","sha256":"1aa77f27e9bd6a35511fa261b3cc9055abb5bd3925785877a1ad13e0a794d6e8","sha512":"577d9a856a0c0e6eac6b9dcc8af9172f8973a5931ea8a4e2820fe70dffac053abed422caac03fb0bde273ce25a883bc6e5926feb50a049355e9d233c0ee2e7aa","ssdeep":"1536:W2oxuiQgaXj+E9AtmSOkYtticMnEJLUHWH5Mwe5/QCqCmUZ/A3E3c3xE1ijmiT62:R8QgEjqe8niLUnW3xE1iy9LSWKhqyp","tlshash":"80d3294976d1f0e61be350e8843f514af17a1a39380c94e1fba6c1d2682ad8f5273f79","size":142589,"data":"","first_seen":"2025-09-12T13:40:28.447153Z","last_seen":"2025-10-21T13:34:05.700541Z","times_seen":157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-JZX5Z23LMS","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"abab6a355b77d52fd467aa1a2c1f5b98","sha1":"03f1ea769f729344c5c8d39581f0ff64f907356b","sha256":"04e9a940a97ed2d7b002280dab9f5584ce11173f0e890cffc4aa6e831d14ff1b","sha512":"5ec265f556f9f5b85e896c66a61f16956cb50448414f0bc954ea82edc446eb6d638189f4988fb345d816ecd00576cd1b2f3f6397fa98a3d7b65acbd44dd52bd9","ssdeep":"6144:vBHGXbRh8P3VDCII6JAhqLfZAn0Ezx+xBz7:Zmr3cVlI6JBf7","tlshash":"20940ace73d674265396e478903f018ba5bb28a2f44cc899f189cce42d74a9a4177f7c","size":422509,"data":"","first_seen":"2025-10-02T09:45:05.951942Z","last_seen":"2025-10-02T09:45:05.951942Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bflix.sh/assets/js/lights.js?v=3","fqdn":"bflix.sh","domain":"bflix.sh","tld":"sh"},"ip":{"addr":"104.21.2.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c0668bf818160d6c0d8cf81703f2daa","sha1":"2890f10417ebce711ed58ee8aa5cbc8b5df2f1d3","sha256":"d3ee876cbd3740b000bd768cdf6aa1b3f4a9e40bee461c97f8d01ed90e5304e1","sha512":"63b8e867e679ba6e4c02b5a81605f35dfd98662e4d0389f3edadeebe3cac8e2dc087b7bc5cde4a7638cfa51e1e2ae1183ce411b2296c5c344c5f9c38f88c38dd","ssdeep":"96:ouHnDetdJRUe63KiM/BlrQUBw+AP2VF1f1jXF5UIAOMUTXRgIMjfeM7+ucoEyHZ:jeDJSUB+kwbP8GIhprRfKRx","tlshash":"bab1129533af2a1d8862338e043e858de27cc279225fc199b57ed2949ae1504d3f78f9","size":5588,"data":"","first_seen":"2023-03-07T13:13:54Z","last_seen":"2026-03-31T00:38:21.742327Z","times_seen":291,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/aclib.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da82194a183686cf8d7399280ca1a82a","sha1":"a17b2662e49c8d8e47701735ef1e6acf9f5fff07","sha256":"3cb42a90fd07560b095613a310becac597581e2f0b9ab54dde764802be0609cc","sha512":"92e73fcf130ed28ede95ad1f78b28264b1a152b7a07e836a858d116639d7e3b0429449e833d56f5b5582a6ba35965f3be796ace256b9eea649a0ca2f8edfb69d","ssdeep":"3072:G068+RhI8FvQeXO0AFQM4MmMnTQXvS1kKeq/h:B6phN1DF/SW4h","tlshash":"5ee3e849bad2b0f867e261e4942f9646e1371624740e98d5f6fac5d1a879ecf0033e3c","size":146805,"data":"","first_seen":"2025-09-11T10:47:57.345998Z","last_seen":"2025-10-21T05:38:51.00741Z","times_seen":595,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bflix.sh/","fqdn":"bflix.sh","domain":"bflix.sh","tld":"sh"},"ip":{"addr":"104.21.2.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c9b12e813324994a5832f2d7801455ff","sha1":"b7140ef38f4c58005cc34fbd0c0a3812aedfd6be","sha256":"fe6341da95e37931fc7a52d691c6c1d48b1ffc3eda15b6d79460a70c2ee946cf","sha512":"2edf682b03eda46503a12af1ea58c8935ec89979809c33aba3f3995eb8184f48d2cf3890ca22eb410cdc5589ec306a6758a03cdd6dd217a2a6c89483e296487e","ssdeep":"","tlshash":"22c09b8c211a5c7155fb2b848f7ff604b443322494d56b31c95af3455d30f17d794954","size":153,"data":"","first_seen":"2024-08-19T14:29:08.589788Z","last_seen":"2026-03-27T02:12:19.96204Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/1.12.3/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c07f2267a050732b752cc3e7a06850ac","sha1":"220dad6750fba4898e10b8d9b78ca46f4f774544","sha256":"69a3831c082fc105b56c53865cc797fa90b83d920fb2f9f6875b00ad83a18174","sha512":"9b1d0bf71b3e4798c543a3a805b4bda0e7dd3f2ca6417b2b4808c9f2b9dcb82c40f453cfae5ac2c6bafc5f0a3e376e3a8ce807b483c1474785eb5390b8f4a80e","ssdeep":"1536:kYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOa99TwkEb7/Jp9s:P4J+R3jL5TCOaLTwkEFdnCVQwNa98HrV","tlshash":"b293d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97180,"data":"","first_seen":"2023-03-07T01:29:55Z","last_seen":"2026-04-04T03:27:35.83Z","times_seen":3455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.6.1/js/bootstrap.bundle.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"90146f01d8a2028ed6f2c3d2fba4ac9b","sha1":"0363cb58b7a7b60ef7fbf82b8bceb6305232501a","sha256":"7e02c082fedfc821a8a51fe004dab6896dd928876a21ccac8675142c2e2f7b1f","sha512":"9942e76b00d57029ec93d6b8686d502d967aadc71efe34b3106a9491e38bcb46faab4f93eacc87af196c0061fb655a2a0bddcf774941a9de9682e3d68a1ed51c","ssdeep":"768:Rw/iZOJuTVlHNvNu7MTMtnTbCeNbtj+VBvAQ3+S8QnxyoM+Fos/eAMELlVlXIaCU:R8i4JBGUwVBpL7NV+mB9mydf47qdLP/","tlshash":"2f83944972a4f462069f60a6907b0a0bf6376c4da507b01cb6ecd4ed1e7cd88316bf79","size":83253,"data":"","first_seen":"2023-03-07T01:10:33Z","last_seen":"2026-04-03T19:17:07.65006Z","times_seen":4068,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bflix.sh/","fqdn":"bflix.sh","domain":"bflix.sh","tld":"sh"},"ip":{"addr":"104.21.2.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"35a911cec6aa6741923a4e0177191397","sha1":"88524baab906559ce147068e36f1efbc1daeee6b","sha256":"98cdd0dbea9a7b390434551150ac5bc58ac1c4cd14b6501f8a82f04e33cf1a19","sha512":"40f4763eb6ce40e051bd631e66016f5ab983d9100b0aab0f47d409c5705c653ecba5c28e764bb9110ca5c48544fd82e7827c5e39a9bb1990d9b8b944ba63c9fb","ssdeep":"","tlshash":"78a0026b61614529b667341c5d2d9d9894aa42078d59a4c47fcd82bd0f45485101ba0d","size":61,"data":"","first_seen":"2025-07-03T18:18:09.422207Z","last_seen":"2026-03-27T02:12:19.963026Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/Swiper/5.4.4/js/swiper.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf2fe63069b52d6a5bc1bccdb2626273","sha1":"c1a56d0735470b2ab51e4dda017eefc281cbd7ce","sha256":"636ee53e0454d4eff633ac3467f3540087e0ed55f4db06c2ef5f4662302b6329","sha512":"0a5665aac087c086dec0462b6b13d096f0e621f6d407434d23f920161d636754f8e935184dd248cdd3de982cabae8d31120073791173e475eeea662c697cf5db","ssdeep":"1536:xOgAc1fFOszeCOG3RxCK8Yi/Glq+dhZDUiOMRLMGpukRRgj8evHgZsUgeAq5qV8h:1QCL7ji/udIxKRRtYHgZsUgeAq5qOsJu","tlshash":"4dd3094eb39061a551e36257525e8241a3b72409b80ad0ac35b68cd7adbde4c13bfffc","size":140929,"data":"","first_seen":"2023-04-18T10:35:17Z","last_seen":"2026-04-04T01:48:19.973055Z","times_seen":1361,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bflix.sh/","fqdn":"bflix.sh","domain":"bflix.sh","tld":"sh"},"ip":{"addr":"104.21.2.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3fc50dfb6dbfe8c8a3c1781673bb261b","sha1":"d19795699d7bbe0e3832d5781a7f681cd3dc6a38","sha256":"3e37655bf4659f737b63c98d1a764f6eeb2089ba5d4562662027dd0a94bc3720","sha512":"07b518484ae82b86e83d4ebbb89a57d69cdfa77ff8e617cdfdf57e8da59f534d5656e120e0d75802c0b5484f72ebd060612192bf7087a66eb8930368938d4c2a","ssdeep":"","tlshash":"50a022aa3223003a0033200c8b0cccf888c80c0b8800a8c23acc00200b2c0880002080","size":63,"data":"","first_seen":"2025-07-03T18:18:09.422928Z","last_seen":"2026-03-27T02:12:19.963941Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bflix.sh/assets/js/custom.js?v=1759398273","fqdn":"bflix.sh","domain":"bflix.sh","tld":"sh"},"ip":{"addr":"104.21.2.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5dc737d0b2ae0ebbd96677bbdcf7d4d9","sha1":"e8d08a6b5545d1f987259277a924b6c996c4fb55","sha256":"87f77ba57aa8758bf97f6a370b9d46b65dea63fbb5515e1b1ef3b8475b850154","sha512":"aefcb279e2adb87d49e7eb1c1d0495cbdc6250ec6f9f28bc3a744428945d0b28de056cebbc285730b4b71e0c86da3ad2c1941a6fd8a7eb575d3d960bda6e5c37","ssdeep":"192:NGYMgB0RbcLThpSfklVGyeG2JeHDGB1EfJZHDGiB3jnnPrGQAGArQWAOlAB:NlpB3L/nLSrosEfB7PreJeOSB","tlshash":"cd52b69af64d249e40b33371e13b9710fd3ae136b6009718757ea4741f785e8a2b2e1e","size":14020,"data":"","first_seen":"2024-08-19T14:29:08.583399Z","last_seen":"2026-03-27T02:12:19.948052Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bflix.sh/","fqdn":"bflix.sh","domain":"bflix.sh","tld":"sh"},"ip":{"addr":"104.21.2.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5ddffd6caf6fd2b46ec52a81855ca6b0","sha1":"890f1f7f3184e1e21c69d5f0d9cab0cd4846c68d","sha256":"c08adf346c11fe77b829b430ccf42a556574714034d15684e3c777e071928a41","sha512":"5303611caa28edb8645d81910e485dd9418d28c2dedcc0bfb79ecaed66e6e249f6fb6e381b6c9631ef031834e29501d8adfaca97a435d716ff4b8c490a4760cc","ssdeep":"","tlshash":"ab9004f7541f044d4fc015c313111d5c430f115c7c5041c07c15140034f75554310101","size":40,"data":"","first_seen":"2024-08-19T14:29:08.607047Z","last_seen":"2026-03-27T02:12:19.964857Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bflix.sh/assets/js/sweetalert.js","fqdn":"bflix.sh","domain":"bflix.sh","tld":"sh"},"ip":{"addr":"104.21.2.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0068f44b0aa1b83fa7679860ceb26590","sha1":"20d5cdb9d2002442843baab241f2e883563d1de5","sha256":"7a056fc64aba501090c8acd106b0c7bbc9a267914e695ae34aa42a6ae2a094a7","sha512":"ed54e2cbd021a5acc178a40096168b45493e9003006fca1cce58eec891cfb153d6a31fd02170c53a74fd0d4935502f046e71ca45d428c13eec3817bb2c08da8d","ssdeep":"384:Rixwo5U75rT3rOlgkhzj7qRM0I2XyySyTXmy9ti/IEUVRj6KaVnzZduTQRc8exfx:RiU3rfRMbwd9t2UVR2KaVz/uMRc8exp","tlshash":"5772b84d315438b313a765f150af8147a4b15abde80998a0366cc4e61ff8c8e6ae2f77","size":16977,"data":"","first_seen":"2023-03-07T01:15:37Z","last_seen":"2026-04-03T16:28:55.871481Z","times_seen":3254,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/atagv2.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2859556c730429b6e832158a5b07f18f","sha1":"b68ce515d0974b6072f6c29670a6241e7bba507e","sha256":"887a889bfa309bdbb5fd306b320fd9a8463d6b576639bce739f656fc28531d93","sha512":"267dca57daf942983537fc3acc9ca81f10c13d9b56d0b48ba0db7fc3dce8364f745e3647e67cf7c5281fdce8d5a0055de6955673fe2dff40015583a54ad23b7c","ssdeep":"3072:Ly+T66IfNzIvra4jxM4McMnThVBSHmQqP:jdIorVVarSQP","tlshash":"7ea3c749b6d2b0f867d2a5e4842f5646e1372a24740d98d5fafac1d29879ecf1033e3c","size":104737,"data":"","first_seen":"2025-09-12T13:14:35.876215Z","last_seen":"2025-10-21T13:34:05.726957Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/tooltipster/4.0.0/js/tooltipster.bundle.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"150195cfb0977fbf7ca16de64ab19baa","sha1":"f310c457edb13f6affd5b9e90f44a1d9044489b5","sha256":"aebd88d78695843b04af0fd0575a081795c46a3d940d48579781bab1327c4d91","sha512":"04b08941b2e12d1ccb31f26d37bc332316948d32fbae96b8f79b105a2484a1788ca2434e18da224e2ae7e5ee6383ed0d264651edf843be89c6d8f8b02fa3fef1","ssdeep":"768:R14PRTj/FH9LAAyFybhy6Ip6nlCn9QlyMKLhFIAKU4EV/A1nuNlg3AtvPoLoSKYO:aByAyFGU4E9AG5J","tlshash":"d003a89af360291386a762fd633b770f1235812c91c3c4b4a57897d81e7e507a7b3a6c","size":39220,"data":"","first_seen":"2023-05-07T20:25:20Z","last_seen":"2026-03-30T04:51:45.244889Z","times_seen":871,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/inpagepush.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7780e0ec5e07710055b1e10ea20eb69d","sha1":"28c8599abf5716804ca54af819df59b5c9a85aac","sha256":"dda2696dd2e6e27cda137503adcedf31f567652a5a42441005f61c5545b8cd05","sha512":"9315cb3e1a9b5493a9e1121f795db7a7e2cc5bcc73f0ba58f3c46f0af08956a035c513a373a78acdd4d1b9e3fdee9d1ab378f5ddefdf251cc82db331129e58c2","ssdeep":"1536:9cXjRdWAcYh5lfkW+Ym7mm3S0fWMxdD35gMocYbpIVFCdBxovoE8fKe7Jn4XhVko:Oj31NxthCWMx7gMocYtMCdBxovoE8fhC","tlshash":"e783964dfad2b0f91be265e4952f9646e0772a28340d98d1eab6c1c19879d8f0077e3c","size":87193,"data":"","first_seen":"2025-09-11T10:47:57.310815Z","last_seen":"2025-10-20T23:31:05.537089Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"bflix.sh/assets/js/custom.js?v=1759398273","fqdn":"bflix.sh","domain":"bflix.sh","tld":"sh"},"ip":{"addr":"104.21.2.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:33.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bflix.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 07:58:07 GMT","end":"Sat, 27 Dec 2025 08:56:46 GMT"},"fingerprint":{"sha1":"0B:34:7B:22:B2:FC:A2:F8:0B:C6:7C:C1:D4:36:04:0B:EB:DC:B8:4C","sha256":"C1:AA:10:79:18:4D:E2:4F:65:96:00:3F:0E:54:52:2B:A3:05:D7:04:E2:ED:65:E6:BF:0F:CA:2D:48:2B:72:FB"}}},"request":{"raw":"GET /assets/js/custom.js?v=1759398273 HTTP/1.1\r\nHost: bflix.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bflix.sh/\r\nCookie: PHPSESSID=akgp8fi2m430k0p43in2ovlnqs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Oct 2025 09:44:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jul 2024 23:48:56 GMT\r\netag: W/\"66a82a68-36c4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nvary: accept-encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ymQV43hZ%2BZFdEDqToqAiare%2B66FTheh5eodLE5V8gb63nqbrBEdGs5xeo1ZWPdTKeJeoz7dDroDAK%2FwVEI89WpOhdq%2FihQ%3D%3D\"}]}\r\ncf-ray: 98834308bd405685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14020,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (451), with CRLF line terminators","md5":"5dc737d0b2ae0ebbd96677bbdcf7d4d9","sha1":"e8d08a6b5545d1f987259277a924b6c996c4fb55","sha256":"87f77ba57aa8758bf97f6a370b9d46b65dea63fbb5515e1b1ef3b8475b850154","sha512":"aefcb279e2adb87d49e7eb1c1d0495cbdc6250ec6f9f28bc3a744428945d0b28de056cebbc285730b4b71e0c86da3ad2c1941a6fd8a7eb575d3d960bda6e5c37","ssdeep":"192:NGYMgB0RbcLThpSfklVGyeG2JeHDGB1EfJZHDGiB3jnnPrGQAGArQWAOlAB:NlpB3L/nLSrosEfB7PreJeOSB","tlshash":"cd52b69af64d249e40b33371e13b9710fd3ae136b6009718757ea4741f785e8a2b2e1e","first_seen":"2024-08-19T14:29:08.583399Z","last_seen":"2026-03-27T02:12:19.948052Z","times_seen":45,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"bflix.sh","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hK1QN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:33.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bflix.sh\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28244\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Sep 2025 12:59:02 GMT\r\nexpires: Fri, 25 Sep 2026 12:59:02 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 Aug 2025 19:19:09 GMT\r\ncontent-type: font/woff2\r\nage: 593131\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28244,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28244, version 1.0","md5":"9d503278216c2225184a236c64e0924b","sha1":"0c24c621374506ce70403a7473b47acd86bbf919","sha256":"2add7d60b1cd2ab84c9967e23d5ec08eb3fc9635c46855b17d59404dec6b410e","sha512":"fa1aca723eb40b6026aa1d21b36ce2573e4164516c9a0b55ff830a434c3954833a06b1df76236b1d682107df1bd3d263ed19cba854c1a6795566a7091749696d","ssdeep":"768:/6zZ6KBVHUlHvwCa0z1sCvODsIBMTKmJ3GG5x4:yzdKvwtszvdNjz4","tlshash":"3cc2e083d14afb33d0afb77adc52d022e9756bccec7e587a97a900398895c1b0644285","first_seen":"2025-09-02T18:36:17.739185Z","last_seen":"2026-04-04T02:39:19.349523Z","times_seen":7405,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":59,"dns":2,"connect":9,"send":0,"wait":9,"receive":4,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hK1QN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:33.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bflix.sh\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28244\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Sep 2025 12:59:02 GMT\r\nexpires: Fri, 25 Sep 2026 12:59:02 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 Aug 2025 19:19:09 GMT\r\ncontent-type: font/woff2\r\nage: 593131\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28244,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28244, version 1.0","md5":"9d503278216c2225184a236c64e0924b","sha1":"0c24c621374506ce70403a7473b47acd86bbf919","sha256":"2add7d60b1cd2ab84c9967e23d5ec08eb3fc9635c46855b17d59404dec6b410e","sha512":"fa1aca723eb40b6026aa1d21b36ce2573e4164516c9a0b55ff830a434c3954833a06b1df76236b1d682107df1bd3d263ed19cba854c1a6795566a7091749696d","ssdeep":"768:/6zZ6KBVHUlHvwCa0z1sCvODsIBMTKmJ3GG5x4:yzdKvwtszvdNjz4","tlshash":"3cc2e083d14afb33d0afb77adc52d022e9756bccec7e587a97a900398895c1b0644285","first_seen":"2025-09-02T18:36:17.739185Z","last_seen":"2026-04-04T02:39:19.349523Z","times_seen":7405,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adexchangeclear.com/video/select.php?r=9976174\u0026srs=638585a3eb51c54d1be958b0a0e58fa0\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown3224%20bits\u0026cbpage=https%3A%2F%2Fbflix.sh%2F\u0026atv=69.0\u0026cbref=","fqdn":"adexchangeclear.com","domain":"adexchangeclear.com","tld":"com"},"ip":{"addr":"172.67.223.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:33.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangeclear.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 17:58:51 GMT","end":"Sat, 08 Nov 2025 17:08:08 GMT"},"fingerprint":{"sha1":"EA:C4:03:00:5B:31:55:C6:59:67:78:25:B3:B7:46:0C:EC:DE:30:70","sha256":"D9:CD:23:32:1E:FF:B8:A4:2F:94:7E:6F:7B:49:CF:2A:8E:F8:87:04:44:A7:C7:E1:3C:53:1B:9F:D1:3A:94:D5"}}},"request":{"raw":"GET /video/select.php?r=9976174\u0026srs=638585a3eb51c54d1be958b0a0e58fa0\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown3224%20bits\u0026cbpage=https%3A%2F%2Fbflix.sh%2F\u0026atv=69.0\u0026cbref= HTTP/1.1\r\nHost: adexchangeclear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bflix.sh/\r\nOrigin: https://bflix.sh\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Oct 2025 09:44:34 GMT\r\ncontent-type: application/xml; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: https://bflix.sh\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uTqZfZGkTu7iUM2eH%2BmegvemM4fUN0WTLPAIL9PG%2BIHSX%2BNQSq50QE%2F8lzI18Ra6IKkFeFmkQ9xNWFtFBZGIlByUwLQyHwO4cOmeQXUOafdtLAg%3D\"}]}\r\nset-cookie: adcshVastUser=41ab7185-3613-4648-ba7e-f64538f1496e; HttpOnly; SameSite=None; Secure; Path=/; Domain=adexchangeclear.com; Max-Age=2147483647\r\ncf-ray: 9883430b98384c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":6220,"size_decoded":0,"mime_type":"application/xml; charset=utf-8","magic":"XML 1.0 document, ASCII text, with very long lines (733)","md5":"a9d410ade2d9e689325a86684316355a","sha1":"bc5ee695a2c07adb54cdee7a72e8201b3fa34d37","sha256":"32278faf28e063b44a024bd8aff7d7a60d95c60848aa178f8bfeed1fa525f335","sha512":"2fdd3e214ccbe358c52bf54bfdf26dbc7e63c40038b3a3072b8b0f3c178d29ad6289e1cc14c4555f13ceccc0e9dae669c0054d146884fbddbc733f5294676037","ssdeep":"96:g6YT62Vvd4zeXnITva6txFgL/GoORnxMtcyZe0hA6U7g12:g6I62VY4nITvltk/GoYxM6ykE1U7p","tlshash":"50d11ab212f45dfd1c6e04a59abcfc5b4da849ee4fe4a440f24ef4d58b4de9701a6380","first_seen":"2025-10-02T09:45:05.902554Z","last_seen":"2025-10-02T09:45:05.902554Z","times_seen":1,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adexchangeclear.com/script/push.php?r=9976162\u0026ipp=1\u0026mads=2\u0026position=top\u0026czid=3seqyx8bc\u0026atag=1\u0026aggr=3\u0026ppv=1\u0026ab_test=AdOpt_B_nocapping-2021-12-08v1\u0026srs=638585a3eb51c54d1be958b0a0e58fa0\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown3224%20bits\u0026cbpage=https%3A%2F%2Fbflix.sh%2F\u0026atv=69.0\u0026cbref=","fqdn":"adexchangeclear.com","domain":"adexchangeclear.com","tld":"com"},"ip":{"addr":"172.67.223.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:33.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangeclear.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 17:58:51 GMT","end":"Sat, 08 Nov 2025 17:08:08 GMT"},"fingerprint":{"sha1":"EA:C4:03:00:5B:31:55:C6:59:67:78:25:B3:B7:46:0C:EC:DE:30:70","sha256":"D9:CD:23:32:1E:FF:B8:A4:2F:94:7E:6F:7B:49:CF:2A:8E:F8:87:04:44:A7:C7:E1:3C:53:1B:9F:D1:3A:94:D5"}}},"request":{"raw":"GET /script/push.php?r=9976162\u0026ipp=1\u0026mads=2\u0026position=top\u0026czid=3seqyx8bc\u0026atag=1\u0026aggr=3\u0026ppv=1\u0026ab_test=AdOpt_B_nocapping-2021-12-08v1\u0026srs=638585a3eb51c54d1be958b0a0e58fa0\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown3224%20bits\u0026cbpage=https%3A%2F%2Fbflix.sh%2F\u0026atv=69.0\u0026cbref= HTTP/1.1\r\nHost: adexchangeclear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bflix.sh/\r\nOrigin: https://bflix.sh\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Oct 2025 09:44:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Mermi%2Bdv5FYLFziXtnDh0Ml07cg8vBZ5JQRPjn0VQ2WXa8UsO1MNCq85cdQDGKPeGIKghWZnObZFwbGlqRwBO9u6BttoPCHd1antByp4gRB\"}]}\r\ncf-ray: 9883430bce640b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1996,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0b8577eba48368bfb219ce96fe264610","sha1":"dcb7349c48726795fc0b1dc76ea8bc4ecf80cd07","sha256":"92bdc2603e8471dfff6dad4cb848c203032bd0885cd2ca9c3ae132c5dc4144a0","sha512":"d3d8f091bbc741b26076cfd3020ebf2290bd50d7329d5acdf6349abc6a79369d7a74784e345dfa0ff80b1bfa3923bc6f991624e9791d41de2e1e0917de8e9d0b","ssdeep":"","tlshash":"9641d82277fc1d59898811971addba282ca825cb0fa9f50051d7f930ab44895944f6d6","first_seen":"2025-10-02T09:45:05.904501Z","last_seen":"2025-10-02T09:45:05.904501Z","times_seen":1,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vidwestxyz.com/444317220/23974950/mid_1280x720_2500.mp4","fqdn":"vidwestxyz.com","domain":"vidwestxyz.com","tld":"com"},"ip":{"addr":"172.67.209.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:50.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidwestxyz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 Aug 2025 13:07:34 GMT","end":"Tue, 25 Nov 2025 14:05:39 GMT"},"fingerprint":{"sha1":"36:26:B5:C1:EB:B2:41:3D:D8:D5:40:B6:8E:DF:B1:53:7F:4E:FD:FC","sha256":"93:8C:6F:ED:59:34:1B:61:EC:E6:BA:0A:82:CD:ED:53:0B:30:52:D9:45:47:60:34:25:16:44:66:31:54:20:C9"}}},"request":{"raw":"GET /444317220/23974950/mid_1280x720_2500.mp4 HTTP/1.1\r\nHost: vidwestxyz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bflix.sh/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-type: video/mp4\r\nx-guploader-uploadid: AAwnv3JUtSF3tsLUXu5lHVD38VwWaAI1k8pEKxwa37lOPzsxYnoZnIBYAcRTGySWp40QS-UQIh3Lkuo\r\nexpires: Thu, 02 Oct 2025 10:44:34 GMT\r\ndate: Thu, 02 Oct 2025 09:44:50 GMT\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 29 May 2025 10:02:23 GMT\r\netag: \"07067d760ed5408ed1501a8e986cbb88\"\r\nx-goog-generation: 1748512943053966\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 12153765\r\nx-goog-hash: crc32c=XzRuBQ==, md5=BwZ9dg7VQI7RUBqOmGy7iA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 12153765\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type,Access-Control-Allow-Origin\r\nserver: cloudflare\r\nvia: 1.1 google\r\nage: 15\r\ncontent-range: bytes 0-12153764/12153765\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4RNQLY%2FX%2BfgfhkboE42nt8rqyxtr8bo05Y4rk%2FOyffuTyebWS6G4jqTvUvviloDraJcR21JIPErQt6MpiV99ZWx%2Bga89kinsfPiAW7eN\"}]}\r\nvary: accept-encoding\r\ncf-ray: 98834370ad4e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":12153765,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"3339eb61473b5122e802f13262e8c987","sha1":"f46ced72164f2e5bec869e4905b9cfc94cd98c47","sha256":"773a8ab1f6185059ff2b130d01f117c995b0b351fda7d3dfe9e3460324c9cb91","sha512":"b40e40076d35fed3de773e7c17ff278907edbe60cafa9d0be5523e2017c95376d50806a720b2f4d87cb3c32f79f15ef4defa1d52f885df4416b411f51733b6ec","ssdeep":"24576:w7kCvIMajnm8HCaZ1POGVLRW3Qu5nOBMyhiYYQD:wjOjndHCaZ1tVL+V6CYYQD","tlshash":"6a25230abb92e567cee90fb181fa1b5536b2d8345617a2db0719076cbdc73e815c38c8","first_seen":"2025-08-08T17:56:32.130578Z","last_seen":"2025-10-13T09:44:54.824475Z","times_seen":36,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":190,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adexchangeclear.com/video/select.php?r=9976174\u0026rbd=1\u0026srs=638585a3eb51c54d1be958b0a0e58fa0\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown3224%20bits\u0026cbpage=https%3A%2F%2Fbflix.sh%2F\u0026atv=69.0\u0026cbref=","fqdn":"adexchangeclear.com","domain":"adexchangeclear.com","tld":"com"},"ip":{"addr":"172.67.223.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:55.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangeclear.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 17:58:51 GMT","end":"Sat, 08 Nov 2025 17:08:08 GMT"},"fingerprint":{"sha1":"EA:C4:03:00:5B:31:55:C6:59:67:78:25:B3:B7:46:0C:EC:DE:30:70","sha256":"D9:CD:23:32:1E:FF:B8:A4:2F:94:7E:6F:7B:49:CF:2A:8E:F8:87:04:44:A7:C7:E1:3C:53:1B:9F:D1:3A:94:D5"}}},"request":{"raw":"GET /video/select.php?r=9976174\u0026rbd=1\u0026srs=638585a3eb51c54d1be958b0a0e58fa0\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown3224%20bits\u0026cbpage=https%3A%2F%2Fbflix.sh%2F\u0026atv=69.0\u0026cbref= HTTP/1.1\r\nHost: adexchangeclear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bflix.sh/\r\nOrigin: https://bflix.sh\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Oct 2025 09:44:55 GMT\r\ncontent-type: application/xml; charset=utf-8\r\naccess-control-allow-origin: https://bflix.sh\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\nset-cookie: adcshVastUser=50253895-4bea-4d0e-bab3-7eeb6aba7a83; HttpOnly; SameSite=None; Secure; Path=/; Domain=adexchangeclear.com; Max-Age=2147483647\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7ra90CF79DAskmuViMkhw2dvI48Ct3AZjK8wzneAtUxMfANPnJ1072zL7LRB4UCRG7ZiT%2BjBtd0ORt7FnOphz0rW%2BEvrs3FYz%2F6yJqEUbuUX\"}]}\r\ncf-ray: 9883438ffa820b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6220,"size_decoded":0,"mime_type":"application/xml; charset=utf-8","magic":"XML 1.0 document, ASCII text, with very long lines (733)","md5":"1481b683813598bbf87d392def360e00","sha1":"87c31cc55ebfbc5d3668112c628e865a18acb05d","sha256":"1155fb24f600062226223acc3dd2f92349804c97dab0492490158b1dd2c0b43d","sha512":"930580cb9a1f98b903a2fe373b06d61b8dc550d048af914e728c49ad86f95b990365e62fcd0697211f512e7107300719670034f8bf8a495c8687ffa239c4e14d","ssdeep":"96:mTct2s+w/d4WVVEc6K4+ZdQUjOu18kcelOrr62Ch7shHJ+Z12:mTJlwpVVEc6K4+ZdQSOJkSKhIhHJ+C","tlshash":"a1d107f641e00dbe1c9d00556ebce00f0e9e458fafa26841fa4ef6c68f4dda6005b6a4","first_seen":"2025-10-02T09:45:05.906538Z","last_seen":"2025-10-02T09:45:05.906538Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/tooltipster/4.0.0/js/tooltipster.bundle.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:33.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/tooltipster/4.0.0/js/tooltipster.bundle.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bflix.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Oct 2025 09:44:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 8881\r\ncf-ray: 98834308dc8156a4-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5f559a80-9934\"\r\nlast-modified: Mon, 07 Sep 2020 02:27:12 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 461015\r\nexpires: Tue, 22 Sep 2026 09:44:33 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=wcO%2F8rQwz4dJcJ3DcOfCuSyIeG1q9GM22qy9QoPuLS7svFOSgn159BViN27fp0uR8TbzDQzADxr4sMVZ8sTMKL11ByCUXoQ2UG%2Bx9Aqb1cdbQtfDZHlHcfEnAm8dtYNx2NrGmcuY\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39220,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32107)","md5":"150195cfb0977fbf7ca16de64ab19baa","sha1":"f310c457edb13f6affd5b9e90f44a1d9044489b5","sha256":"aebd88d78695843b04af0fd0575a081795c46a3d940d48579781bab1327c4d91","sha512":"04b08941b2e12d1ccb31f26d37bc332316948d32fbae96b8f79b105a2484a1788ca2434e18da224e2ae7e5ee6383ed0d264651edf843be89c6d8f8b02fa3fef1","ssdeep":"768:R14PRTj/FH9LAAyFybhy6Ip6nlCn9QlyMKLhFIAKU4EV/A1nuNlg3AtvPoLoSKYO:aByAyFGU4E9AG5J","tlshash":"d003a89af360291386a762fd633b770f1235812c91c3c4b4a57897d81e7e507a7b3a6c","first_seen":"2023-05-07T20:25:20Z","last_seen":"2026-03-30T04:51:45.244889Z","times_seen":871,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":3,"send":0,"wait":16,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bflix.sh/assets/js/lights.js?v=3","fqdn":"bflix.sh","domain":"bflix.sh","tld":"sh"},"ip":{"addr":"104.21.2.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:33.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bflix.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 07:58:07 GMT","end":"Sat, 27 Dec 2025 08:56:46 GMT"},"fingerprint":{"sha1":"0B:34:7B:22:B2:FC:A2:F8:0B:C6:7C:C1:D4:36:04:0B:EB:DC:B8:4C","sha256":"C1:AA:10:79:18:4D:E2:4F:65:96:00:3F:0E:54:52:2B:A3:05:D7:04:E2:ED:65:E6:BF:0F:CA:2D:48:2B:72:FB"}}},"request":{"raw":"GET /assets/js/lights.js?v=3 HTTP/1.1\r\nHost: bflix.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bflix.sh/\r\nCookie: PHPSESSID=akgp8fi2m430k0p43in2ovlnqs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Oct 2025 09:44:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jul 2024 23:48:56 GMT\r\netag: \"66a82a68-15d4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nage: 3558\r\nvary: accept-encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EW3we8yjO8qJPRKNJ9mwgcXe1bahdJXXd9n60fGKm3dknK6JLsUbnE52Rk8QIIRFeLM2VfrHZuqOkoVEudjcxeknOtQ6dQ%3D%3D\"}]}\r\ncf-ray: 98834308bd3f5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":5588,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"3c0668bf818160d6c0d8cf81703f2daa","sha1":"2890f10417ebce711ed58ee8aa5cbc8b5df2f1d3","sha256":"d3ee876cbd3740b000bd768cdf6aa1b3f4a9e40bee461c97f8d01ed90e5304e1","sha512":"63b8e867e679ba6e4c02b5a81605f35dfd98662e4d0389f3edadeebe3cac8e2dc087b7bc5cde4a7638cfa51e1e2ae1183ce411b2296c5c344c5f9c38f88c38dd","ssdeep":"96:ouHnDetdJRUe63KiM/BlrQUBw+AP2VF1f1jXF5UIAOMUTXRgIMjfeM7+ucoEyHZ:jeDJSUB+kwbP8GIhprRfKRx","tlshash":"bab1129533af2a1d8862338e043e858de27cc279225fc199b57ed2949ae1504d3f78f9","first_seen":"2023-03-07T13:13:54Z","last_seen":"2026-03-31T00:38:21.742327Z","times_seen":291,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"bflix.sh","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hK1QN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:33.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bflix.sh\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28244\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Sep 2025 12:59:02 GMT\r\nexpires: Fri, 25 Sep 2026 12:59:02 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 Aug 2025 19:19:09 GMT\r\ncontent-type: font/woff2\r\nage: 593131\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28244,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28244, version 1.0","md5":"9d503278216c2225184a236c64e0924b","sha1":"0c24c621374506ce70403a7473b47acd86bbf919","sha256":"2add7d60b1cd2ab84c9967e23d5ec08eb3fc9635c46855b17d59404dec6b410e","sha512":"fa1aca723eb40b6026aa1d21b36ce2573e4164516c9a0b55ff830a434c3954833a06b1df76236b1d682107df1bd3d263ed19cba854c1a6795566a7091749696d","ssdeep":"768:/6zZ6KBVHUlHvwCa0z1sCvODsIBMTKmJ3GG5x4:yzdKvwtszvdNjz4","tlshash":"3cc2e083d14afb33d0afb77adc52d022e9756bccec7e587a97a900398895c1b0644285","first_seen":"2025-09-02T18:36:17.739185Z","last_seen":"2026-04-04T02:39:19.349523Z","times_seen":7405,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":51,"dns":1,"connect":9,"send":0,"wait":9,"receive":8,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/inpagepush.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:33.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acscdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 21:39:20 GMT","end":"Sun, 07 Dec 2025 22:39:07 GMT"},"fingerprint":{"sha1":"97:5E:85:70:5C:6F:7D:F5:DB:22:A2:2D:88:C5:E3:69:E8:15:5A:F4","sha256":"AE:9E:71:84:C0:24:A8:E6:55:FE:84:6C:3B:AA:4F:74:9F:76:47:83:B6:3D:D6:4D:0A:0A:74:54:1D:14:B3:EE"}}},"request":{"raw":"GET /script/inpagepush.js HTTP/1.1\r\nHost: acscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bflix.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Oct 2025 09:44:33 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\nx-guploader-uploadid: ABgVH8_KBjs8HDh8yWEXKZlDB0GVEel8CnB-Ce2bJzPJJOq2RbDZrqPufER6sV8CjZ-fN4APv4uhtp8\r\nx-goog-generation: 1757575749260526\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 87193\r\nx-goog-hash: crc32c=HQYQJw==, md5=d4Dg7F4HcQBVseEOog62nQ==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccess-control-allow-origin: *\r\nexpires: Thu, 02 Oct 2025 10:44:33 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Thu, 11 Sep 2025 07:29:09 GMT\r\netag: W/\"7780e0ec5e07710055b1e10ea20eb69d\"\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 2966\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9883430baafc7131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":87193,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33238), with NEL line terminators","md5":"7780e0ec5e07710055b1e10ea20eb69d","sha1":"28c8599abf5716804ca54af819df59b5c9a85aac","sha256":"dda2696dd2e6e27cda137503adcedf31f567652a5a42441005f61c5545b8cd05","sha512":"9315cb3e1a9b5493a9e1121f795db7a7e2cc5bcc73f0ba58f3c46f0af08956a035c513a373a78acdd4d1b9e3fdee9d1ab378f5ddefdf251cc82db331129e58c2","ssdeep":"1536:9cXjRdWAcYh5lfkW+Ym7mm3S0fWMxdD35gMocYbpIVFCdBxovoE8fKe7Jn4XhVko:Oj31NxthCWMx7gMocYtMCdBxovoE8fhC","tlshash":"e783964dfad2b0f91be265e4952f9646e0772a28340d98d1eab6c1c19879d8f0077e3c","first_seen":"2025-09-11T10:47:57.310815Z","last_seen":"2025-10-20T23:31:05.537089Z","times_seen":143,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"acscdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adexchangeclear.com/script/i.php?t=1\u0026c=23992850\u0026stamat=m%257C%252C%252CQhMSYiPqoGU3Bv_GH0dEdHP3xP.713%252CUmbu1rsopj4x6TG0lirBs7omsYe9A09FR8W9A6MDbsM_sbSQC2je2XRqdQ8RZuSoOWe95ebXpXQl6fwtndqc45IoVoAhNePsbqr6ic-OIlc78vgJ7YaE0XrA1plM1DdguBe0x9jEEbAOraD6HHC7NxiswvJC_khCG90NRg9AqZ7aqDXm4miENa9qpnJ6nwP29Hze1Jy2ZvhICKNYPBRx-rXcmqjJBXljCkmCjSluiYK1RtfDzHGSGEvAmeOwGj29w1l5LgoTJMQWlKQWKKI6-NIeWio-VBICVwi2IfvxeRuSWcg9GeIIsZ4xGOcKaoHUtRM1MrntYaGlBg_wgssyMfFTnLmB3gbgpWPmEa6U7EIy-uhdKs0LXTxKZcI7DTHggzeadsUHdfnwvF95IrKAzMXvYLGUlFtYyMUxXQwNCO6WwzOCQts_lR2sLdYny1e_dYm3YUVwmV-Rh_SFMoHDPqTHt3R30vACdj-xYTs2xkKSyX1CLi6bYwqur6NoGPcfFqxRLTHhoShA_zIlkkaf9Weuhq3h2k5a6pfYPbw8-t0lE0g37rwkP_HXi8EzrkuLVsa5ZO0Kuyo0Kkhkjrc0w31mh9okwdi063zQ_iLNhTYdVnnsgCNF5XVMlJUFv7ACv3APZ9QnxqRoIPpJ_YMgH4L9gdd2g3bP_XfnJZZYy5MTur3VfdB_IEBA_3Yzv5losfqJt6pIMVZ8c_4kQyLQWyIWXudLh0OFxdLFcKTGsvbYVZGzhBShNLNUQSS9BhWP\u0026utsid=638585a3eb51c54d1be958b0a0e58fa0\u0026cbpage=https%3A%2F%2Fbflix.sh%2F\u0026cbref=","fqdn":"adexchangeclear.com","domain":"adexchangeclear.com","tld":"com"},"ip":{"addr":"172.67.223.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:34.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangeclear.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 17:58:51 GMT","end":"Sat, 08 Nov 2025 17:08:08 GMT"},"fingerprint":{"sha1":"EA:C4:03:00:5B:31:55:C6:59:67:78:25:B3:B7:46:0C:EC:DE:30:70","sha256":"D9:CD:23:32:1E:FF:B8:A4:2F:94:7E:6F:7B:49:CF:2A:8E:F8:87:04:44:A7:C7:E1:3C:53:1B:9F:D1:3A:94:D5"}}},"request":{"raw":"GET /script/i.php?t=1\u0026c=23992850\u0026stamat=m%257C%252C%252CQhMSYiPqoGU3Bv_GH0dEdHP3xP.713%252CUmbu1rsopj4x6TG0lirBs7omsYe9A09FR8W9A6MDbsM_sbSQC2je2XRqdQ8RZuSoOWe95ebXpXQl6fwtndqc45IoVoAhNePsbqr6ic-OIlc78vgJ7YaE0XrA1plM1DdguBe0x9jEEbAOraD6HHC7NxiswvJC_khCG90NRg9AqZ7aqDXm4miENa9qpnJ6nwP29Hze1Jy2ZvhICKNYPBRx-rXcmqjJBXljCkmCjSluiYK1RtfDzHGSGEvAmeOwGj29w1l5LgoTJMQWlKQWKKI6-NIeWio-VBICVwi2IfvxeRuSWcg9GeIIsZ4xGOcKaoHUtRM1MrntYaGlBg_wgssyMfFTnLmB3gbgpWPmEa6U7EIy-uhdKs0LXTxKZcI7DTHggzeadsUHdfnwvF95IrKAzMXvYLGUlFtYyMUxXQwNCO6WwzOCQts_lR2sLdYny1e_dYm3YUVwmV-Rh_SFMoHDPqTHt3R30vACdj-xYTs2xkKSyX1CLi6bYwqur6NoGPcfFqxRLTHhoShA_zIlkkaf9Weuhq3h2k5a6pfYPbw8-t0lE0g37rwkP_HXi8EzrkuLVsa5ZO0Kuyo0Kkhkjrc0w31mh9okwdi063zQ_iLNhTYdVnnsgCNF5XVMlJUFv7ACv3APZ9QnxqRoIPpJ_YMgH4L9gdd2g3bP_XfnJZZYy5MTur3VfdB_IEBA_3Yzv5losfqJt6pIMVZ8c_4kQyLQWyIWXudLh0OFxdLFcKTGsvbYVZGzhBShNLNUQSS9BhWP\u0026utsid=638585a3eb51c54d1be958b0a0e58fa0\u0026cbpage=https%3A%2F%2Fbflix.sh%2F\u0026cbref= HTTP/1.1\r\nHost: adexchangeclear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bflix.sh/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Thu, 02 Oct 2025 09:44:34 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QJzSVBNeRBHblsoBH892suZyQYPO67lAxbw%2BeahVyumyZYeSC25lV5W9NymTpeM2CLZefFhNWrCwwMWhzsQfr0AsTT60bhNX%2B20%2BWUYd6wGn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9883430d6e05712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adexchangeclear.com/video/select.php?r=9976174\u0026rbd=1\u0026srs=638585a3eb51c54d1be958b0a0e58fa0\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown3224%20bits\u0026cbpage=https%3A%2F%2Fbflix.sh%2F\u0026atv=69.0\u0026cbref=","fqdn":"adexchangeclear.com","domain":"adexchangeclear.com","tld":"com"},"ip":{"addr":"172.67.223.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:39.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangeclear.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 17:58:51 GMT","end":"Sat, 08 Nov 2025 17:08:08 GMT"},"fingerprint":{"sha1":"EA:C4:03:00:5B:31:55:C6:59:67:78:25:B3:B7:46:0C:EC:DE:30:70","sha256":"D9:CD:23:32:1E:FF:B8:A4:2F:94:7E:6F:7B:49:CF:2A:8E:F8:87:04:44:A7:C7:E1:3C:53:1B:9F:D1:3A:94:D5"}}},"request":{"raw":"GET /video/select.php?r=9976174\u0026rbd=1\u0026srs=638585a3eb51c54d1be958b0a0e58fa0\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown3224%20bits\u0026cbpage=https%3A%2F%2Fbflix.sh%2F\u0026atv=69.0\u0026cbref= HTTP/1.1\r\nHost: adexchangeclear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bflix.sh/\r\nOrigin: https://bflix.sh\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Oct 2025 09:44:39 GMT\r\ncontent-type: application/xml; charset=utf-8\r\naccess-control-allow-origin: https://bflix.sh\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\nset-cookie: adcshVastUser=3de642e8-7d33-47e9-bf79-663ac95fb895; HttpOnly; SameSite=None; Secure; Path=/; Domain=adexchangeclear.com; Max-Age=2147483647\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JLxUNpI1xjoyLaTCj%2FYil%2FWY9Xfvfz6Z2UZspXUQ56lXSK3RyRpvVi1mPRekBL6OJHp%2FB6mB5m53llTOlTG8x%2FpYq9wvW%2BB1AhTO4dA5Ggs1\"}]}\r\ncf-ray: 9883432e6f230b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":6220,"size_decoded":0,"mime_type":"application/xml; charset=utf-8","magic":"XML 1.0 document, ASCII text, with very long lines (733)","md5":"e0d63f3290824f99d83b5f681ad0bcd2","sha1":"74486f7d080d6d5aed683b3f1ae200faed493a62","sha256":"7c78e6531bbe813496823c979a0b0265ee68e2fd5c204b7c7ef810f0aec120b9","sha512":"70f63f0f31459e07ec4a19f4bb5c4d5c9eaa41c7da0aa30f160869139fd02429904ce19eb5194409202015c9890e8bd6bc71e445046a18b3efd9a74aa80e4fc3","ssdeep":"96:MmWIvud4d5V1iCw9nEct3B2oz0sVwKJxQA6PKCV612:MOjiCwpEct3IaVN7sKCV3","tlshash":"d4d11ab556e01cff698d249156adf80f4ea5419f9ba078417a8fb9d2874dc6400663f0","first_seen":"2025-10-02T09:45:05.923781Z","last_seen":"2025-10-02T09:45:05.923781Z","times_seen":1,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":179,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adexchangeclear.com/script/push.php?r=9976162\u0026ipp=1\u0026mads=2\u0026position=top\u0026czid=3seqyx8bc\u0026atag=1\u0026aggr=3\u0026rbd=1\u0026ppv=1\u0026ab_test=AdOpt_B_nocapping-2021-12-08v1\u0026srs=638585a3eb51c54d1be958b0a0e58fa0\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown3224%20bits\u0026cbpage=https%3A%2F%2Fbflix.sh%2F\u0026atv=69.0\u0026cbref=","fqdn":"adexchangeclear.com","domain":"adexchangeclear.com","tld":"com"},"ip":{"addr":"172.67.223.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:54.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangeclear.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 17:58:51 GMT","end":"Sat, 08 Nov 2025 17:08:08 GMT"},"fingerprint":{"sha1":"EA:C4:03:00:5B:31:55:C6:59:67:78:25:B3:B7:46:0C:EC:DE:30:70","sha256":"D9:CD:23:32:1E:FF:B8:A4:2F:94:7E:6F:7B:49:CF:2A:8E:F8:87:04:44:A7:C7:E1:3C:53:1B:9F:D1:3A:94:D5"}}},"request":{"raw":"GET /script/push.php?r=9976162\u0026ipp=1\u0026mads=2\u0026position=top\u0026czid=3seqyx8bc\u0026atag=1\u0026aggr=3\u0026rbd=1\u0026ppv=1\u0026ab_test=AdOpt_B_nocapping-2021-12-08v1\u0026srs=638585a3eb51c54d1be958b0a0e58fa0\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown3224%20bits\u0026cbpage=https%3A%2F%2Fbflix.sh%2F\u0026atv=69.0\u0026cbref= HTTP/1.1\r\nHost: adexchangeclear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bflix.sh/\r\nOrigin: https://bflix.sh\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Oct 2025 09:44:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ihLnmBJgeTzaFrr43zSyeTpYIfBWqvkXnoZtEcRPnUHuHk6GKxr1%2B3UcPj%2BVT1NXIvjhlwzBdjrc438A1LsL%2BLLJ2StcKdEAma385qGUCah9\"}]}\r\ncf-ray: 9883438a6a3f0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1992,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8cf8e62449e7a8357ac0482d8ea3e15c","sha1":"d165fa8eb5740ba377d0706e109845c5baea0ae5","sha256":"02d5229c5e65da006782594df2ba5c6ad2eed4cb6b9bb6a32154b3e11f85b187","sha512":"a04d44ad51b390aff57a357e62652c82eae30f1a27337afe9f75a6640bc50f61c68a0599f150a7543fb0fc73080e0493fa685581a534c1edc3c3dd859d44dd22","ssdeep":"","tlshash":"d5412a5f5f9cdc271c8c58ca4bb93828afe52107ab44344078fd722c8b4ca99157a48e","first_seen":"2025-10-02T09:45:05.925769Z","last_seen":"2025-10-02T09:45:05.925769Z","times_seen":1,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adexchangeclear.com/ad/czcf.php?cz=3seqyx8bc\u0026atv=69.0","fqdn":"adexchangeclear.com","domain":"adexchangeclear.com","tld":"com"},"ip":{"addr":"172.67.223.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:33.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangeclear.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 17:58:51 GMT","end":"Sat, 08 Nov 2025 17:08:08 GMT"},"fingerprint":{"sha1":"EA:C4:03:00:5B:31:55:C6:59:67:78:25:B3:B7:46:0C:EC:DE:30:70","sha256":"D9:CD:23:32:1E:FF:B8:A4:2F:94:7E:6F:7B:49:CF:2A:8E:F8:87:04:44:A7:C7:E1:3C:53:1B:9F:D1:3A:94:D5"}}},"request":{"raw":"GET /ad/czcf.php?cz=3seqyx8bc\u0026atv=69.0 HTTP/1.1\r\nHost: adexchangeclear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bflix.sh/\r\nOrigin: https://bflix.sh\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Oct 2025 09:44:33 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RJyG%2BiwM76EfiTqxw5kSt1gvyVCUjhQKOliRUqSpvajWHPTPUk9C8Wk3ddgbjJffsYsRWWCZBTBCITojoZhskBIDRhZ2kZgx7RzkncLBr0quh7w%3D\"}]}\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9883430a8e114c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1159,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"5e4737e2085da3072f9c74d265ad5c93","sha1":"8b50b261a8b7debfff18fa32a2f45add198e7b80","sha256":"c63102da3735989389593f7cac17d95e8446d78ba0e62404aecf33a6d0eee359","sha512":"a95be3b41c53dfc4e1f06f6f4e95572e74e2d0f2f4edab550415b76e70efcb4130199b181b5b732548df3b014376af86acb564a8b387a5d6d27cb69a47548710","ssdeep":"","tlshash":"ea21fee7035acabce97f750d2cda69c7c201b8d75ce416b3a2cc8856e9a5842a00653c","first_seen":"2025-07-03T18:18:09.405007Z","last_seen":"2026-01-14T23:49:43.214869Z","times_seen":34,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":38,"dns":2,"connect":1,"send":0,"wait":152,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:33.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bflix.sh\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Oct 2025 09:44:33 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 150124\r\ncf-ray: 9883430a7a9ab509-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"6421d693-24a6c\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 660567\r\nexpires: Tue, 22 Sep 2026 09:44:33 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Gr95k%2BwtVFvkR0FOx3HoVB1PgJ71JM3WZQhBuxtKkB7cqMvUpUyL3HtPyTlxvhUVU4ESNjjaMhNT9GP2mXFWVovk7qwomVSYAijaUFVabniLNoTAcJwgoIGgewezhxkRNsVThzXf\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150124,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 150124, version 772.256","md5":"c64278386c2bbb5e293e11b94ca2f6d1","sha1":"6b99aa650bd12a36caa14e0127435d8f4cd3ba73","sha256":"7152a6933ee3d690ec2af3d09da9d701723d16aa3410a6d80f28ff8866f3b880","sha512":"0ccdc1515510d902c0b4a48b863c48bad86e1f766b1f9c890a64e28d91ee7c6d488241c531fc094d15b29c211da71e092587a987e24ee8e67ef8ea99c284e821","ssdeep":"3072:7sCbk7w0ZXdkN6iMjif3Lr7x7wAtf+D7gDk1feXDLnurWHqrNIuv5n0:7sCbkFZXdC7MaLr9w2mIY1feXXurWyNW","tlshash":"28e3123cf2c6d486735f5aeadb79636894fd0a2e74ecc67d26b982112048f828174d1d","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-04-04T03:34:27.431014Z","times_seen":30329,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":10,"dns":1,"connect":0,"send":0,"wait":10,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hK1QN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:33.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bflix.sh\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28244\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Sep 2025 12:59:02 GMT\r\nexpires: Fri, 25 Sep 2026 12:59:02 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 Aug 2025 19:19:09 GMT\r\ncontent-type: font/woff2\r\nage: 593131\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28244,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28244, version 1.0","md5":"9d503278216c2225184a236c64e0924b","sha1":"0c24c621374506ce70403a7473b47acd86bbf919","sha256":"2add7d60b1cd2ab84c9967e23d5ec08eb3fc9635c46855b17d59404dec6b410e","sha512":"fa1aca723eb40b6026aa1d21b36ce2573e4164516c9a0b55ff830a434c3954833a06b1df76236b1d682107df1bd3d263ed19cba854c1a6795566a7091749696d","ssdeep":"768:/6zZ6KBVHUlHvwCa0z1sCvODsIBMTKmJ3GG5x4:yzdKvwtszvdNjz4","tlshash":"3cc2e083d14afb33d0afb77adc52d022e9756bccec7e587a97a900398895c1b0644285","first_seen":"2025-09-02T18:36:17.739185Z","last_seen":"2026-04-04T02:39:19.349523Z","times_seen":7405,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":62,"dns":0,"connect":9,"send":0,"wait":9,"receive":2,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adexchangeclear.com/script/suurl5.php?r=9976166\u0026atag=1\u0026cbur=0.5103349162520717\u0026cbiframe=0\u0026cbWidth=1280\u0026cbHeight=1024\u0026cbtitle=BFLIX%20%7C%20Watch%20Free%20Movies%20online\u0026cbpage=https%3A%2F%2Fbflix.sh%2F\u0026cbref=\u0026cbdescription=BFLIX%20%7C%20Watch%20free%20movies%20online%2C%20free%20BFLIX%20%7C%20Watch%20movies%20online%20in%20hd%2C%20update%20daily%2C%20HD%20quality\u0026cbkeywords=\u0026cbcdn=acscdn.com\u0026ts=1759398273868\u0026atv=69.0\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown3224%20bits\u0026srs=638585a3eb51c54d1be958b0a0e58fa0\u0026aggr=3\u0026czid=3seqyx8bc\u0026ppv=1\u0026ab_test=AdOpt_B_nocapping-2021-12-08v1\u0026cap=0","fqdn":"adexchangeclear.com","domain":"adexchangeclear.com","tld":"com"},"ip":{"addr":"172.67.223.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:33.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangeclear.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 17:58:51 GMT","end":"Sat, 08 Nov 2025 17:08:08 GMT"},"fingerprint":{"sha1":"EA:C4:03:00:5B:31:55:C6:59:67:78:25:B3:B7:46:0C:EC:DE:30:70","sha256":"D9:CD:23:32:1E:FF:B8:A4:2F:94:7E:6F:7B:49:CF:2A:8E:F8:87:04:44:A7:C7:E1:3C:53:1B:9F:D1:3A:94:D5"}}},"request":{"raw":"GET /script/suurl5.php?r=9976166\u0026atag=1\u0026cbur=0.5103349162520717\u0026cbiframe=0\u0026cbWidth=1280\u0026cbHeight=1024\u0026cbtitle=BFLIX%20%7C%20Watch%20Free%20Movies%20online\u0026cbpage=https%3A%2F%2Fbflix.sh%2F\u0026cbref=\u0026cbdescription=BFLIX%20%7C%20Watch%20free%20movies%20online%2C%20free%20BFLIX%20%7C%20Watch%20movies%20online%20in%20hd%2C%20update%20daily%2C%20HD%20quality\u0026cbkeywords=\u0026cbcdn=acscdn.com\u0026ts=1759398273868\u0026atv=69.0\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown3224%20bits\u0026srs=638585a3eb51c54d1be958b0a0e58fa0\u0026aggr=3\u0026czid=3seqyx8bc\u0026ppv=1\u0026ab_test=AdOpt_B_nocapping-2021-12-08v1\u0026cap=0 HTTP/1.1\r\nHost: adexchangeclear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bflix.sh/\r\nOrigin: https://bflix.sh\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Oct 2025 09:44:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t0kXN6s0K3j%2BkD2vx0A8asPNyaTvffQDp4narHD0wq9mQj3fV5zm441%2BS2amdK4Cjg7Oe%2Ft3KsOxTqcpipsNGtPUc4iykw%2BygZyejKeibfilNhQ%3D\"}]}\r\ncf-ray: 9883430ba8674c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1110,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f0fd9117c2062946a02646a46bf46494","sha1":"247de37f042eab09e07f92749c5a1ab95c19ecce","sha256":"4308ac7c086747a436d905efdc4570cf9dafe38a8739b99643df7a90e3065d4f","sha512":"7adad13f14190e757809a7da98c15bcacf6145267028bebdefa8daf7d5a3ee0ce054f31cfd86a0341a232fa776463819bb88f2e6ed00d7af479e664e99950a7e","ssdeep":"","tlshash":"84116616768096bb98b989c50df6d77d315532978d503a96cb50eb288f8a78408df093","first_seen":"2025-10-02T09:45:05.928607Z","last_seen":"2025-10-02T09:45:05.928607Z","times_seen":1,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vidwestxyz.com/444317220/23974952/mid_1280x720_2500.mp4","fqdn":"vidwestxyz.com","domain":"vidwestxyz.com","tld":"com"},"ip":{"addr":"172.67.209.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:39.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidwestxyz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 Aug 2025 13:07:34 GMT","end":"Tue, 25 Nov 2025 14:05:39 GMT"},"fingerprint":{"sha1":"36:26:B5:C1:EB:B2:41:3D:D8:D5:40:B6:8E:DF:B1:53:7F:4E:FD:FC","sha256":"93:8C:6F:ED:59:34:1B:61:EC:E6:BA:0A:82:CD:ED:53:0B:30:52:D9:45:47:60:34:25:16:44:66:31:54:20:C9"}}},"request":{"raw":"GET /444317220/23974952/mid_1280x720_2500.mp4 HTTP/1.1\r\nHost: vidwestxyz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bflix.sh/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nx-guploader-uploadid: AAwnv3LvIg_urg_gkbOxeGCFSZ5zgdMihk2HDbNqkWLmupNwueU8asGSEvWpWwdjy3MIJexM5RHKqQg\r\nx-goog-generation: 1748512948493736\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 8818337\r\nx-goog-hash: crc32c=UEGrug==, md5=kdROvywLhLBeHI8nfVsf4g==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 8818337\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type,Access-Control-Allow-Origin\r\nserver: cloudflare\r\nvia: 1.1 google\r\ndate: Thu, 02 Oct 2025 09:44:39 GMT\r\nexpires: Thu, 02 Oct 2025 10:36:47 GMT\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 29 May 2025 10:02:28 GMT\r\netag: \"91d44ebf2c0b84b05e1c8f277d5b1fe2\"\r\ncontent-type: video/mp4\r\nage: 950\r\ncontent-range: bytes 0-8818336/8818337\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xsIBL8GG2BHLuWppIhhKYBzptPolfa3kAJyGmvbFOkCNHNBUxYQBK77B0q9%2FTotVVl9hrKBDFyOP8NBxivSFoDy%2F%2BcdI%2BOQ41blruJb1\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9883432f9e0a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":8818337,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"9154fbc617953096c14870aec3af8b1c","sha1":"bc3be4682122562d0adf6939ffb440fef3a559b1","sha256":"009b1f4ce10857b4a074f738deb06815525de00396c896d3a04e3bbe0ebcd275","sha512":"45b2e27c63aa19dfa35dc18f5fea7d35dd92524f6828e681a71677c6a9241d0699c87e656e8fd132b967098a8cc977b82e909a5a5160670d6a834ec94915b083","ssdeep":"24576:4+ScePl2ZUiR4acTz7/bxiZYxB5K+IoT6/YZwT+ZUB++BZV:4+Sj2ZiaMoOxB4+laYZUB++BZV","tlshash":"c625230a7750fd53ee56d2b0e8e987a03470e55a2b8b072f8bde8f15ad91384b58f4c4","first_seen":"2025-08-08T17:56:32.137398Z","last_seen":"2025-10-13T09:44:54.798949Z","times_seen":36,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/Swiper/5.4.4/css/swiper.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:33.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/Swiper/5.4.4/css/swiper.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bflix.sh/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Oct 2025 09:44:33 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 3569\r\ncf-ray: 98834308dc7a56a4-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5ee8d6b2-356d\"\r\nlast-modified: Tue, 16 Jun 2020 14:26:58 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 616380\r\nexpires: Tue, 22 Sep 2026 09:44:33 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3cTRS%2FsClvHiquGVr3qAXn5Yz1EmK4rSX1B1I5zsYpCeN6dnSUOULB5Q2LuOIT0xZkWMwDNXVi%2FDDPjqnvPDgms3kepPWKxtrXLH21o6cb67gmIImae1IZ%2BNougVdopX1rZVbjep\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13677,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (13425)","md5":"773d8f074cf687b5607c41a7e5e3c3ef","sha1":"0456b77b6ebd7c1af268f611923fea64d5a1770f","sha256":"3f607be9c8cccb04ff271240354b48285f25377662bb326bad8930ac2903a2b9","sha512":"94177bb46e0674ee6f4116575f81a2fd17ae41479b0e42f9b87ef88ce5284d849713ccee013953a55368869d01dec25d70640b7183a0368aa867326c8de0c29f","ssdeep":"384:8XUbeQS7Rgx9BU0m/XCcif65W/1mXA82FHpx:8Eb67gbhm/XDif65W/1mXA82Fn","tlshash":"eb52236417003837f3774f6e4aa1e6b59f60cc838a934d9db2c0dd44d6fa8b9122eb95","first_seen":"2023-04-18T10:35:17Z","last_seen":"2026-04-04T01:48:19.927246Z","times_seen":1457,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":22,"dns":3,"connect":2,"send":0,"wait":15,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Quicksand:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:33.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css2?family=Quicksand:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bflix.sh/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 02 Oct 2025 09:44:33 GMT\r\ndate: Thu, 02 Oct 2025 09:44:33 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6255,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c7365f08324a60bb4b6f1da00d3b92ef","sha1":"eeb03e220b2f2bc037fb8fb89da03da35cf86a64","sha256":"fe217c2de98a4d6bcfced2a09ddec2509373a338a37def5601c33ed111231c1a","sha512":"8c919634c8fe6c5c3f8226f3182897e3940378cb9d9261a0f906fedb0c25f5ad42bfdfb3cc4ae77b52c13c6c712e6a44742dac877fc770f402771b27b7f8b1e7","ssdeep":"96:cqO1aPpO1arJc+uuO1aLNDqOEaPpOEarJc+uuOEaLNDqOXaPpOXarJc+uuOXaLN5:cAPfvPVNPmvWVOPFv1VrPcvMVEPjvTK","tlshash":"c4d1afe1447fb510db871dc122ce7e32ae4ea1547061c9799ffd1c88ac9ac26339572d","first_seen":"2025-09-02T21:26:18.885538Z","last_seen":"2026-04-03T22:17:43.363304Z","times_seen":1820,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":79,"dns":0,"connect":10,"send":0,"wait":25,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/Swiper/5.4.4/js/swiper.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:33.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/Swiper/5.4.4/js/swiper.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bflix.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Oct 2025 09:44:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 31039\r\ncf-ray: 98834308dc7856a4-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5ee8d6b2-22681\"\r\nlast-modified: Tue, 16 Jun 2020 14:26:58 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 707022\r\nexpires: Tue, 22 Sep 2026 09:44:33 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=69iy3GTEMoPkzrIQOhwWbyBoI7L8PPQsIPsCPIoKXztGVVysgw9IVx9KQrSaPu3cFNtUCE3%2F3CF5a66FMkuXGe0OTk89GA46fYBb8mpQJAkuQLPvESiJTDPJNphdb%2FlsubCtxdwt\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":140929,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65284)","md5":"cf2fe63069b52d6a5bc1bccdb2626273","sha1":"c1a56d0735470b2ab51e4dda017eefc281cbd7ce","sha256":"636ee53e0454d4eff633ac3467f3540087e0ed55f4db06c2ef5f4662302b6329","sha512":"0a5665aac087c086dec0462b6b13d096f0e621f6d407434d23f920161d636754f8e935184dd248cdd3de982cabae8d31120073791173e475eeea662c697cf5db","ssdeep":"1536:xOgAc1fFOszeCOG3RxCK8Yi/Glq+dhZDUiOMRLMGpukRRgj8evHgZsUgeAq5qV8h:1QCL7ji/udIxKRRtYHgZsUgeAq5qOsJu","tlshash":"4dd3094eb39061a551e36257525e8241a3b72409b80ad0ac35b68cd7adbde4c13bfffc","first_seen":"2023-04-18T10:35:17Z","last_seen":"2026-04-04T01:48:19.973055Z","times_seen":1361,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bflix.sh/","fqdn":"bflix.sh","domain":"bflix.sh","tld":"sh"},"ip":{"addr":"104.21.2.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-02T09:44:31.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bflix.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 07:58:07 GMT","end":"Sat, 27 Dec 2025 08:56:46 GMT"},"fingerprint":{"sha1":"0B:34:7B:22:B2:FC:A2:F8:0B:C6:7C:C1:D4:36:04:0B:EB:DC:B8:4C","sha256":"C1:AA:10:79:18:4D:E2:4F:65:96:00:3F:0E:54:52:2B:A3:05:D7:04:E2:ED:65:E6:BF:0F:CA:2D:48:2B:72:FB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bflix.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Oct 2025 09:44:33 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: PHP/8.2.29, PleskLin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kZql1xYDHAC%2Frk%2B3SsObapuUEtRg211wQxNHs5o1O8NsxdkkJBHCgUBeWvFk3MYJasAg3d%2FXaRBH7o8Bds%2FAbtLw8SMUMg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nset-cookie: PHPSESSID=akgp8fi2m430k0p43in2ovlnqs; HttpOnly; Secure; Path=/; Max-Age=31536000; Expires=Fri, 02 Oct 2026 09:44:33 GMT\r\ncf-ray: 988343070e96b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:1.12.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Bootstrap:4.6.1","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"SweetAlert","description":"SweetAlert is a JavaScript library that provides alternative alert and modal dialog boxes for web applications, with customisable features, aiming to improve the user interface of the default browser dialogs.","website":"https://sweetalert.js.org","common_platform_enumeration":"","icon":"SweetAlert.png","categories":["JavaScript libraries"]}],"data":{"size":14773,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (2782), with CRLF, LF line terminators","md5":"90172a8e94718b5ca9a42cb806a2cf30","sha1":"14f7c1a47497100d2971ba57acb9642d68947042","sha256":"aa0591b8a3a33a19d348867b7c332de08fae1b9cd9100a6a69f991b2f626f758","sha512":"28a3124e6c74ff1d16f76e00267955193d6d463df85d468e7b662194e6a6a5d0696acc2fc36d9f0b3647430819e6156ac6e438d6dfa61233a0a77b2b0ebeafbd","ssdeep":"192:RLhPtIftKu9XGJ36guwSKUjEahL2871mjIQNDRl6HPJZpT+FbMik4q9VULlesT/:NI1h92TMKjI8CFTAMZt9GIsT/","tlshash":"4f6240337a881c6f2f32d7da28307f6dc017415747995e12b4ed0a6f7f80aea991224b","first_seen":"2025-10-02T09:45:05.933828Z","last_seen":"2025-10-02T09:45:05.933828Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3276,"timings":{"blocked":1554,"dns":1542,"connect":1,"send":0,"wait":168,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"bflix.sh","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bflix.sh/assets/css/all.css?v=1759398273","fqdn":"bflix.sh","domain":"bflix.sh","tld":"sh"},"ip":{"addr":"104.21.2.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:33.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bflix.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 07:58:07 GMT","end":"Sat, 27 Dec 2025 08:56:46 GMT"},"fingerprint":{"sha1":"0B:34:7B:22:B2:FC:A2:F8:0B:C6:7C:C1:D4:36:04:0B:EB:DC:B8:4C","sha256":"C1:AA:10:79:18:4D:E2:4F:65:96:00:3F:0E:54:52:2B:A3:05:D7:04:E2:ED:65:E6:BF:0F:CA:2D:48:2B:72:FB"}}},"request":{"raw":"GET /assets/css/all.css?v=1759398273 HTTP/1.1\r\nHost: bflix.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bflix.sh/\r\nCookie: PHPSESSID=akgp8fi2m430k0p43in2ovlnqs\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Oct 2025 09:44:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Jul 2024 23:48:56 GMT\r\netag: W/\"66a82a68-35bb7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nvary: accept-encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZA1k8PucmLovLyrJIJt%2BrTePd5dutsdzaY5GmFyrcLmn25tFe%2Bzqi5NKNF2lTvu%2B55oX0qyWecT2Wm%2FYqTe%2BKErX%2FSt7Mw%3D%3D\"}]}\r\ncf-ray: 98834308ad3b5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":220087,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"ac027c36df0021ec5c93ceb87eb15531","sha1":"4b68b74071ff345489d18ca7985b7f06cecf9eef","sha256":"558784136473c24f47b502772c2993a5d764b638b3729b55fef03f2e30196e3e","sha512":"c348da19977650dd2d6e750dbac387e109209694616da3149f07c48a9c3a2ec4fd3065954ae9ae3f22675032aca3c0e1949292c03868f09ca26cf0abde486ce1","ssdeep":"1536:QHiabIEtTVz8urulDEBi8yNcuSEugLMbojzq3SYiLENM6HN264cfd7f:giaLrMHq3SYiLENM6HN2611","tlshash":"7224b6a6f591312de0a3c61da4e0bbae162f4151e3164fbbf02b3b69878d5c60573e4c","first_seen":"2025-07-03T18:18:09.416621Z","last_seen":"2026-03-27T02:12:19.958525Z","times_seen":44,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"bflix.sh","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/aclib.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:33.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acscdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 21:39:20 GMT","end":"Sun, 07 Dec 2025 22:39:07 GMT"},"fingerprint":{"sha1":"97:5E:85:70:5C:6F:7D:F5:DB:22:A2:2D:88:C5:E3:69:E8:15:5A:F4","sha256":"AE:9E:71:84:C0:24:A8:E6:55:FE:84:6C:3B:AA:4F:74:9F:76:47:83:B6:3D:D6:4D:0A:0A:74:54:1D:14:B3:EE"}}},"request":{"raw":"GET /script/aclib.js HTTP/1.1\r\nHost: acscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bflix.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Oct 2025 09:44:33 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\nx-guploader-uploadid: ABgVH8-nZlZQUeYALtJGazOSSFGC7E3IAH1BXWj-jf7a2EYo8eDoNcNSA1H4RfCh_AiUhmpk\r\nexpires: Thu, 02 Oct 2025 10:44:33 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Thu, 11 Sep 2025 07:25:42 GMT\r\netag: W/\"da82194a183686cf8d7399280ca1a82a\"\r\nx-goog-generation: 1757575542484354\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 146805\r\nx-goog-hash: crc32c=awnbLw==, md5=2oIZShg2hs+Nc5koDKGoKg==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 3468\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 988343093e934e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146805,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65499), with no line terminators","md5":"da82194a183686cf8d7399280ca1a82a","sha1":"a17b2662e49c8d8e47701735ef1e6acf9f5fff07","sha256":"3cb42a90fd07560b095613a310becac597581e2f0b9ab54dde764802be0609cc","sha512":"92e73fcf130ed28ede95ad1f78b28264b1a152b7a07e836a858d116639d7e3b0429449e833d56f5b5582a6ba35965f3be796ace256b9eea649a0ca2f8edfb69d","ssdeep":"3072:G068+RhI8FvQeXO0AFQM4MmMnTQXvS1kKeq/h:B6phN1DF/SW4h","tlshash":"5ee3e849bad2b0f867e261e4942f9646e1371624740e98d5f6fac5d1a879ecf0033e3c","first_seen":"2025-09-11T10:47:57.345998Z","last_seen":"2025-10-21T05:38:51.00741Z","times_seen":595,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":80,"dns":4,"connect":4,"send":0,"wait":17,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"acscdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bflix.sh/images/favicon.png?v=13","fqdn":"bflix.sh","domain":"bflix.sh","tld":"sh"},"ip":{"addr":"104.21.2.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:34.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bflix.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 07:58:07 GMT","end":"Sat, 27 Dec 2025 08:56:46 GMT"},"fingerprint":{"sha1":"0B:34:7B:22:B2:FC:A2:F8:0B:C6:7C:C1:D4:36:04:0B:EB:DC:B8:4C","sha256":"C1:AA:10:79:18:4D:E2:4F:65:96:00:3F:0E:54:52:2B:A3:05:D7:04:E2:ED:65:E6:BF:0F:CA:2D:48:2B:72:FB"}}},"request":{"raw":"GET /images/favicon.png?v=13 HTTP/1.1\r\nHost: bflix.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bflix.sh/\r\nCookie: PHPSESSID=akgp8fi2m430k0p43in2ovlnqs; _ga_JZX5Z23LMS=GS2.1.s1759398273$o1$g0$t1759398273$j60$l0$h0; _ga=GA1.1.1111001849.1759398274\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Oct 2025 09:44:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 8583\r\nlast-modified: Mon, 29 Jul 2024 23:48:56 GMT\r\netag: \"66a82a68-2187\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nage: 3559\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HsDnepj4fgk%2BVDAKEGeOJ4pE0SklVnWjwKMuXcGMc8prFB%2Bh9szFKrCnrg52I56KCOfS3w8UmNFW93P%2FjLf9QxuyH2Iz4A%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 988343100d745685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":8583,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"8ab556dbc4df244de5cff9a8a1967843","sha1":"070bf82dd87ca637014aea85c47df858adbea414","sha256":"7b6a57bb6e8e600d4841628bf4d76d165e954fc2919bd1df75e4af25307f69fc","sha512":"febf16edfaff28eaff775b87a4a6de3f3c989401edbeefb921af96f6ee07742b2152cb111726deffeae0043c9aae002b2d52fd75c42a29c1b6976095aa830a02","ssdeep":"192:PmdUvVSFgX6daQiU/lOJ7EAJNTiXPkQC3YXJGafqycFqwXmy47bxNa:+qVSF8cziUtQ7EASLCUGaqKeYbxNa","tlshash":"aa02c266c56fd4c90c32f299ce570cf85a04ddf0a758d10a67b84a1d88318a88df6fb7","first_seen":"2023-06-10T04:18:34Z","last_seen":"2026-03-27T02:12:19.961036Z","times_seen":56,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"bflix.sh","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vidwestxyz.com/444317220/23974948/mid_1280x720_2500.mp4","fqdn":"vidwestxyz.com","domain":"vidwestxyz.com","tld":"com"},"ip":{"addr":"172.67.209.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:55.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidwestxyz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 Aug 2025 13:07:34 GMT","end":"Tue, 25 Nov 2025 14:05:39 GMT"},"fingerprint":{"sha1":"36:26:B5:C1:EB:B2:41:3D:D8:D5:40:B6:8E:DF:B1:53:7F:4E:FD:FC","sha256":"93:8C:6F:ED:59:34:1B:61:EC:E6:BA:0A:82:CD:ED:53:0B:30:52:D9:45:47:60:34:25:16:44:66:31:54:20:C9"}}},"request":{"raw":"GET /444317220/23974948/mid_1280x720_2500.mp4 HTTP/1.1\r\nHost: vidwestxyz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bflix.sh/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nx-guploader-uploadid: AAwnv3JKyb0EN1aojg9sjgy27hgA5Zi1fwpC3n0mx-_UDGLlvnVbxN2hQsmplc_RD__WZsZFyFSOOg\r\nx-goog-generation: 1748512967717857\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 8689246\r\nx-goog-hash: crc32c=D/sY+g==, md5=DCyhrQHapYUFlW3YEL2JkQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 8689246\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type,Access-Control-Allow-Origin\r\nserver: cloudflare\r\nvia: 1.1 google\r\ndate: Thu, 02 Oct 2025 09:44:55 GMT\r\nexpires: Thu, 02 Oct 2025 09:35:12 GMT\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 29 May 2025 10:02:47 GMT\r\netag: \"0c2ca1ad01daa58505956dd810bd8991\"\r\ncontent-type: video/mp4\r\nage: 2253\r\ncontent-range: bytes 0-8689245/8689246\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0fbIyGbayK0jYyQ%2FZ%2F7vYosZo2JyC69EYObOdzy99x%2F0Rm5OFFQxvtp4oYH6fnrrfLNYmOeEkLE1KzIu2h2X9fyn8GIXqd0Vo82fZTa2\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9883439119d32efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":8689246,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"9ecdabbb7a7509ac9aa90b368388f9b4","sha1":"ade9790583351fef3f79750d88aefdf0c9409ca6","sha256":"c0f0d0646c25295fb2427e516ecb632328c184118f93e0393df94f21d69d28aa","sha512":"faf5f6340c44b0afa57e1d16c33628e1111a0d7aeb5ace5d71c5cfbb89e068a9db11da27385759207efd10df9b0b562d50547feec6921a20c862f6676a4efa46","ssdeep":"24576:sJCgoa2B8jcxYJrmpJ7at7VZayEQ8/gO1on3iUh:QCCjcihmqZbEQIgOiiUh","tlshash":"e125234eff439862d74c1b74a6d803453734c0f043d7928fa91793489ee939a6ae62e9","first_seen":"2025-08-08T17:11:25.873352Z","last_seen":"2025-10-11T16:16:28.669758Z","times_seen":40,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/tooltipster/4.0.0/css/tooltipster.bundle.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:33.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/tooltipster/4.0.0/css/tooltipster.bundle.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bflix.sh/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Oct 2025 09:44:33 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 932\r\ncf-ray: 98834308dc7756a4-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5f559a80-195f\"\r\nlast-modified: Mon, 07 Sep 2020 02:27:12 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 687075\r\nexpires: Tue, 22 Sep 2026 09:44:33 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BcGVzlLzCeH9YriLwIO5GZ7QFpT0qGw1QBDjQIB7EkUhfzIAqczmDv6OqyOJgiA9jIyGUHRwz%2BdMN3LuXKSYaZrIlLahNMCJ%2FzFLmCZFMrRdXjweq4pwPbEZq1HjmrHX5OCDiOBy\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6495,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (6495), with no line terminators","md5":"b15ef24270546e5fe896d3ea387ea134","sha1":"63910103e8cc5e4bdeb2c289cfbf41f89966ea5b","sha256":"41ce2509fa9959868717986010e16b6334885fd46bc64d0d3c745a73ed3c41e4","sha512":"470850ce2d0487067d847b35f12a8cec80aa5bf307fc1d7b3e8ba1742bb369441811dc764b858f82484b7993ef1abd8a6f51489b881a21b3091b066dc4308b40","ssdeep":"48:54hhW/R5uj4ib5iet6hN3gN6ro8poDopJioeSJM482R8Vbog9nGftinQ4CPJP7mS:54ORI4iVhsgN6EGpJJgR2RcoR","tlshash":"3cd16917fe1237489d33aed542c5b31cc53885a2bbf261ba7301a6c6494f35993f3a86","first_seen":"2023-04-05T13:28:18Z","last_seen":"2026-04-04T03:08:00.818462Z","times_seen":11331,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":21,"dns":3,"connect":2,"send":0,"wait":12,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bflix.sh/assets/css/sweetalert.css?v=1759398273","fqdn":"bflix.sh","domain":"bflix.sh","tld":"sh"},"ip":{"addr":"104.21.2.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:33.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bflix.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 07:58:07 GMT","end":"Sat, 27 Dec 2025 08:56:46 GMT"},"fingerprint":{"sha1":"0B:34:7B:22:B2:FC:A2:F8:0B:C6:7C:C1:D4:36:04:0B:EB:DC:B8:4C","sha256":"C1:AA:10:79:18:4D:E2:4F:65:96:00:3F:0E:54:52:2B:A3:05:D7:04:E2:ED:65:E6:BF:0F:CA:2D:48:2B:72:FB"}}},"request":{"raw":"GET /assets/css/sweetalert.css?v=1759398273 HTTP/1.1\r\nHost: bflix.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bflix.sh/\r\nCookie: PHPSESSID=akgp8fi2m430k0p43in2ovlnqs\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Oct 2025 09:44:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Jul 2024 23:48:56 GMT\r\netag: W/\"66a82a68-3bc7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nvary: accept-encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VXnNyxO3Z2pCHVJtzvokRComjO5T1ijrTyBvY1wTn0A6Z4Hrp687iWHbHL3ItOQG4v3xGBizlKqAIQyJZtwShLAMKocbCw%3D%3D\"}]}\r\ncf-ray: 98834308ad3a5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":15303,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12616), with CRLF line terminators","md5":"8c8a9a2a618582e621499ae884a3d7c4","sha1":"71aa7d1105318554f11033e004888cd1943fcf51","sha256":"ebd7eef3117c94ff9a0244240540d26596cc4940e8d29f703595dca12d40c9c6","sha512":"7b6d00693f053ef5a6c1efbd6c16e0f83b05c110ac541f6a989815a5a3afa67307addbf484e06817b27e712afe0d7028f7a2d544488abfcbf3c928ae626c2ab4","ssdeep":"384:t9+jQsAcwpoBEucVKO6yDj8JGJ3eTtZkpN:YHAdpoBEuuj8JGJ3eTtZkpN","tlshash":"da62139b4a94238ce3178f5592cc5d98192cc667a9230ddf73c5346ec781a8832ee75b","first_seen":"2023-05-27T07:33:13Z","last_seen":"2026-03-31T00:38:21.741307Z","times_seen":280,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"bflix.sh","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bflix.sh/assets/js/sweetalert.js","fqdn":"bflix.sh","domain":"bflix.sh","tld":"sh"},"ip":{"addr":"104.21.2.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:33.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bflix.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 07:58:07 GMT","end":"Sat, 27 Dec 2025 08:56:46 GMT"},"fingerprint":{"sha1":"0B:34:7B:22:B2:FC:A2:F8:0B:C6:7C:C1:D4:36:04:0B:EB:DC:B8:4C","sha256":"C1:AA:10:79:18:4D:E2:4F:65:96:00:3F:0E:54:52:2B:A3:05:D7:04:E2:ED:65:E6:BF:0F:CA:2D:48:2B:72:FB"}}},"request":{"raw":"GET /assets/js/sweetalert.js HTTP/1.1\r\nHost: bflix.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bflix.sh/\r\nCookie: PHPSESSID=akgp8fi2m430k0p43in2ovlnqs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Oct 2025 09:44:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jul 2024 23:48:56 GMT\r\netag: \"66a82a68-4251\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nage: 3558\r\nvary: accept-encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WuPUdCSH6hyv8mENE5eAlfz1TqMWzZXfrzNRkNm2UUbLiyWo6R3k6XLCOmDVQo9Ty7LVpw8OveLWDcq7%2FEepfOYXdndB1g%3D%3D\"}]}\r\ncf-ray: 98834308ad3e5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":16977,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16977), with no line terminators","md5":"0068f44b0aa1b83fa7679860ceb26590","sha1":"20d5cdb9d2002442843baab241f2e883563d1de5","sha256":"7a056fc64aba501090c8acd106b0c7bbc9a267914e695ae34aa42a6ae2a094a7","sha512":"ed54e2cbd021a5acc178a40096168b45493e9003006fca1cce58eec891cfb153d6a31fd02170c53a74fd0d4935502f046e71ca45d428c13eec3817bb2c08da8d","ssdeep":"384:Rixwo5U75rT3rOlgkhzj7qRM0I2XyySyTXmy9ti/IEUVRj6KaVnzZduTQRc8exfx:RiU3rfRMbwd9t2UVR2KaVz/uMRc8exp","tlshash":"5772b84d315438b313a765f150af8147a4b15abde80998a0366cc4e61ff8c8e6ae2f77","first_seen":"2023-03-07T01:15:37Z","last_seen":"2026-04-03T16:28:55.871481Z","times_seen":3254,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"bflix.sh","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/1.12.3/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:33.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/jquery/1.12.3/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bflix.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Oct 2025 09:44:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 30308\r\ncf-ray: 98834308dc7d56a4-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec4-17b9c\"\r\nlast-modified: Mon, 04 May 2020 16:11:48 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 767716\r\nexpires: Tue, 22 Sep 2026 09:44:33 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=F7xxn%2FjZMdrZRt8Xaw%2BCKPfiTJ1Wtx%2FxiGnOJkrNNCpR8T%2B%2F2dioonYW03GWSCTXgdHBDDKAtZDQ%2Bq1HBq1mBv6gydUQkdwFcBGKOEdtvviCh4EVjwSeCPpwYhvrBaGa2t1XuiQ%2B\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97180,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32029)","md5":"c07f2267a050732b752cc3e7a06850ac","sha1":"220dad6750fba4898e10b8d9b78ca46f4f774544","sha256":"69a3831c082fc105b56c53865cc797fa90b83d920fb2f9f6875b00ad83a18174","sha512":"9b1d0bf71b3e4798c543a3a805b4bda0e7dd3f2ca6417b2b4808c9f2b9dcb82c40f453cfae5ac2c6bafc5f0a3e376e3a8ce807b483c1474785eb5390b8f4a80e","ssdeep":"1536:kYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOa99TwkEb7/Jp9s:P4J+R3jL5TCOaLTwkEFdnCVQwNa98HrV","tlshash":"b293d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2023-03-07T01:29:55Z","last_seen":"2026-04-04T03:27:35.83Z","times_seen":3455,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":3,"send":0,"wait":16,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usrpubtrk.com/ut/hb.php?cb=0.16855704872606925\u0026v=1","fqdn":"usrpubtrk.com","domain":"usrpubtrk.com","tld":"com"},"ip":{"addr":"104.21.92.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:33.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usrpubtrk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 Aug 2025 11:57:48 GMT","end":"Wed, 12 Nov 2025 12:55:14 GMT"},"fingerprint":{"sha1":"D4:3E:2D:C6:F4:04:8A:A6:38:80:A6:3F:B8:36:DF:7A:79:B8:B0:6B","sha256":"99:E2:A7:FD:97:EE:35:E5:8B:A6:DB:25:80:B5:FA:55:8E:72:BD:17:CC:CA:CB:6A:DF:CC:70:31:68:4F:F2:57"}}},"request":{"raw":"POST /ut/hb.php?cb=0.16855704872606925\u0026v=1 HTTP/1.1\r\nHost: usrpubtrk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 974\r\nOrigin: https://bflix.sh\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bflix.sh/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 02 Oct 2025 09:44:33 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gIOvlS%2F58SeK00TJyF5eZOKL%2BWEpldCnNx5avHRcrPpA%2FhDuFVyjTPdjc0sOp4MLPsMDwg41%2FpqkJxCOZDIh4rGotn4kTua9Pk60\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9883430b2de556a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":33,"dns":2,"connect":1,"send":0,"wait":148,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/atagv2.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:33.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acscdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 21:39:20 GMT","end":"Sun, 07 Dec 2025 22:39:07 GMT"},"fingerprint":{"sha1":"97:5E:85:70:5C:6F:7D:F5:DB:22:A2:2D:88:C5:E3:69:E8:15:5A:F4","sha256":"AE:9E:71:84:C0:24:A8:E6:55:FE:84:6C:3B:AA:4F:74:9F:76:47:83:B6:3D:D6:4D:0A:0A:74:54:1D:14:B3:EE"}}},"request":{"raw":"GET /script/atagv2.js HTTP/1.1\r\nHost: acscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bflix.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Oct 2025 09:44:33 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\nx-guploader-uploadid: AAwnv3JFJ86vrqlFuGi4cy-ZSNTjVxyhyTspZ3aMkOzHfJQ3EuwmXL9wC_ap8EXVMfoY57Rh\r\nx-goog-generation: 1757575607655045\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 104737\r\nx-goog-hash: crc32c=fMaCEA==, md5=KFlVbHMEKbboMhWKWwfxjw==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nexpires: Thu, 02 Oct 2025 10:44:33 GMT\r\ncache-control: public, max-age=3600\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Thu, 11 Sep 2025 07:26:47 GMT\r\netag: W/\"2859556c730429b6e832158a5b07f18f\"\r\nage: 2996\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9883430b8ad47131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":104737,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65493), with no line terminators","md5":"2859556c730429b6e832158a5b07f18f","sha1":"b68ce515d0974b6072f6c29670a6241e7bba507e","sha256":"887a889bfa309bdbb5fd306b320fd9a8463d6b576639bce739f656fc28531d93","sha512":"267dca57daf942983537fc3acc9ca81f10c13d9b56d0b48ba0db7fc3dce8364f745e3647e67cf7c5281fdce8d5a0055de6955673fe2dff40015583a54ad23b7c","ssdeep":"3072:Ly+T66IfNzIvra4jxM4McMnThVBSHmQqP:jdIorVVarSQP","tlshash":"7ea3c749b6d2b0f867d2a5e4842f5646e1372a24740d98d5fafac1d29879ecf1033e3c","first_seen":"2025-09-12T13:14:35.876215Z","last_seen":"2025-10-21T13:34:05.726957Z","times_seen":67,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"acscdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adexchangeclear.com/video/select.php?r=9976174\u0026rbd=1\u0026srs=638585a3eb51c54d1be958b0a0e58fa0\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown3224%20bits\u0026cbpage=https%3A%2F%2Fbflix.sh%2F\u0026atv=69.0\u0026cbref=","fqdn":"adexchangeclear.com","domain":"adexchangeclear.com","tld":"com"},"ip":{"addr":"172.67.223.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:49.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangeclear.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 17:58:51 GMT","end":"Sat, 08 Nov 2025 17:08:08 GMT"},"fingerprint":{"sha1":"EA:C4:03:00:5B:31:55:C6:59:67:78:25:B3:B7:46:0C:EC:DE:30:70","sha256":"D9:CD:23:32:1E:FF:B8:A4:2F:94:7E:6F:7B:49:CF:2A:8E:F8:87:04:44:A7:C7:E1:3C:53:1B:9F:D1:3A:94:D5"}}},"request":{"raw":"GET /video/select.php?r=9976174\u0026rbd=1\u0026srs=638585a3eb51c54d1be958b0a0e58fa0\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown3224%20bits\u0026cbpage=https%3A%2F%2Fbflix.sh%2F\u0026atv=69.0\u0026cbref= HTTP/1.1\r\nHost: adexchangeclear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bflix.sh/\r\nOrigin: https://bflix.sh\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Oct 2025 09:44:50 GMT\r\ncontent-type: application/xml; charset=utf-8\r\naccess-control-allow-origin: https://bflix.sh\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\nset-cookie: adcshVastUser=9f479ca2-84fe-4b55-986b-2c9fd28f9659; HttpOnly; SameSite=None; Secure; Path=/; Domain=adexchangeclear.com; Max-Age=2147483647\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6bIDlqnxb2qw%2Fyvf3FSLceX8COulMl0Uj8lMHZblvMzNDDpQ2k%2BdOGS8zEtvaaGtfZ8FprzfAEA4WvGMqcWcXIWjEDgWY5PMGh5oRBAw3GsN\"}]}\r\ncf-ray: 9883436f89200b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":6220,"size_decoded":0,"mime_type":"application/xml; charset=utf-8","magic":"XML 1.0 document, ASCII text, with very long lines (733)","md5":"93412d8538446aba1a4f9091c0770838","sha1":"a8bcca2564b8268bbfe3dd43e5ac94c1025d4372","sha256":"fe10ad96434c8ebd25117d5d8559066c786286708c083d2da5908e604e8c1dbc","sha512":"f732303f1d017b4087201e6db8fa774c8e2309bf31a370f762a800e217f4e6e181bc59973d27014f0a34d609fba6b4033a07aa57b78c7a1dd62e7f5d5dde2cba","ssdeep":"96:igJpV+d4IcCHwhqAaUHDDC2z8iZYi1ybP0hzfJU7g12:iypVcNHw4XUHDDCFiZX1y7EzRU7p","tlshash":"05d13cb543e92dba1c6c1454ba6ce84b5e94688f8fd06c45f74fb4c28b4a94240eb7e0","first_seen":"2025-10-02T09:45:05.94483Z","last_seen":"2025-10-02T09:45:05.94483Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:33.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bflix.sh/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Oct 2025 09:44:33 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18752\r\ncf-ray: 98834308dc7e56a4-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"6421d693-4940\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 623467\r\nexpires: Tue, 22 Sep 2026 09:44:33 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2Fq01ZVVNjqDLBglvUnAi%2Fo%2FsbXKD6bAMi3AzzAIo%2BDHmCBGP7Ps2EgCMRZcbBwhZ6%2B6Q%2B2zDNeP98mij3HPOFPt5duBXFtl4q%2FBEGOx3JauMJwzW%2FXdTf0CQzAhjjD1Lp8k%2FktM4\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102025,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"ded1c367363e8b20bdc6a19b8350a737","sha1":"8c06d82739d14b094ff6d9036021a252bd1d985d","sha256":"1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf","sha512":"89e71d2e66ac925ec2564aa45cd43f647fd72e5bd664e2728fb632eed71e9e6a43d72a404a8ce9993fc4d223ed985201e3a66676d01cf5e341bc7d07fd9a6207","ssdeep":"1536:OwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuZprfZCl:S709gMGFiyPGuZpfZCl","tlshash":"2ea3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-06T15:05:25Z","last_seen":"2026-04-04T03:34:27.439548Z","times_seen":41778,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":21,"dns":1,"connect":3,"send":0,"wait":19,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bflix.sh/images/logo.png?v=5","fqdn":"bflix.sh","domain":"bflix.sh","tld":"sh"},"ip":{"addr":"104.21.2.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:33.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bflix.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 07:58:07 GMT","end":"Sat, 27 Dec 2025 08:56:46 GMT"},"fingerprint":{"sha1":"0B:34:7B:22:B2:FC:A2:F8:0B:C6:7C:C1:D4:36:04:0B:EB:DC:B8:4C","sha256":"C1:AA:10:79:18:4D:E2:4F:65:96:00:3F:0E:54:52:2B:A3:05:D7:04:E2:ED:65:E6:BF:0F:CA:2D:48:2B:72:FB"}}},"request":{"raw":"GET /images/logo.png?v=5 HTTP/1.1\r\nHost: bflix.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bflix.sh/\r\nCookie: PHPSESSID=akgp8fi2m430k0p43in2ovlnqs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Oct 2025 09:44:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 9021\r\nlast-modified: Mon, 29 Jul 2024 23:48:56 GMT\r\netag: \"66a82a68-233d\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nage: 3558\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F8SMIWymzj8cZNpLatIKlCM0Iw3uWUmZj%2F2oF%2BM%2BiJp0tdlBrBddnkHpHhOsu9Bl1mx5UHKog4f4YMkPbAo5GcxpEJro3A%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 98834308ad3c5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9021,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 755 x 151, 8-bit/color RGBA, non-interlaced","md5":"396fc012f9b025a763a04bc4261c57e8","sha1":"29f2300b84fa2584a6d793ee0cc4af987d3c1ceb","sha256":"719ae5ed4b32c4216a2de1fc30330956c467e411ef0e3672548ed4dbe24f68a9","sha512":"c37ebd7909a401ff5b767dbbf386662111e907c546cbc933e57e967bd9e7f16c08369463fc08c96995d117122f4f603c412c8d3586bc03fbf9525317a72147dc","ssdeep":"192:tVHAoBtpg1XvUn/1FXhl6ECXwTmKgAXsIeTw7T/8KgyKN:tVNCW9hD6VAk7NIAl","tlshash":"24129fa61305afaaaf178fc51d9eec5e4ac3135092cd88fd441cc7dcf48e12048a9e43","first_seen":"2023-06-10T04:18:34Z","last_seen":"2026-03-27T02:12:19.931872Z","times_seen":56,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"bflix.sh","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/videoSliderAlt.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:33.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acscdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 21:39:20 GMT","end":"Sun, 07 Dec 2025 22:39:07 GMT"},"fingerprint":{"sha1":"97:5E:85:70:5C:6F:7D:F5:DB:22:A2:2D:88:C5:E3:69:E8:15:5A:F4","sha256":"AE:9E:71:84:C0:24:A8:E6:55:FE:84:6C:3B:AA:4F:74:9F:76:47:83:B6:3D:D6:4D:0A:0A:74:54:1D:14:B3:EE"}}},"request":{"raw":"GET /script/videoSliderAlt.js HTTP/1.1\r\nHost: acscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bflix.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Oct 2025 09:44:33 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\nx-guploader-uploadid: AAwnv3K69yvndA0SOLhzJxq2QoGDOhHvl0XQ7dAL2UwciK5upXUY4lqC5LYF8R3nE8Yipo5yOtRsN6U\r\nexpires: Thu, 02 Oct 2025 10:44:33 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Thu, 11 Sep 2025 07:33:43 GMT\r\netag: W/\"9356aa40825690d107c4502d81c91f90\"\r\nx-goog-generation: 1757576022930476\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 142589\r\nx-goog-hash: crc32c=6O353w==, md5=k1aqQIJWkNEHxFAtgckfkA==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 109\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9883430a4a0a7131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142589,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33562), with NEL line terminators","md5":"9356aa40825690d107c4502d81c91f90","sha1":"c500946d6a003a4f6348191d4f4d7d6036566284","sha256":"1aa77f27e9bd6a35511fa261b3cc9055abb5bd3925785877a1ad13e0a794d6e8","sha512":"577d9a856a0c0e6eac6b9dcc8af9172f8973a5931ea8a4e2820fe70dffac053abed422caac03fb0bde273ce25a883bc6e5926feb50a049355e9d233c0ee2e7aa","ssdeep":"1536:W2oxuiQgaXj+E9AtmSOkYtticMnEJLUHWH5Mwe5/QCqCmUZ/A3E3c3xE1ijmiT62:R8QgEjqe8niLUnW3xE1iy9LSWKhqyp","tlshash":"80d3294976d1f0e61be350e8843f514af17a1a39380c94e1fba6c1d2682ad8f5273f79","first_seen":"2025-09-12T13:40:28.447153Z","last_seen":"2025-10-21T13:34:05.700541Z","times_seen":157,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"acscdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vidwestxyz.com/444317220/23974950/mid_1280x720_2500.mp4","fqdn":"vidwestxyz.com","domain":"vidwestxyz.com","tld":"com"},"ip":{"addr":"172.67.209.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:34.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidwestxyz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 Aug 2025 13:07:34 GMT","end":"Tue, 25 Nov 2025 14:05:39 GMT"},"fingerprint":{"sha1":"36:26:B5:C1:EB:B2:41:3D:D8:D5:40:B6:8E:DF:B1:53:7F:4E:FD:FC","sha256":"93:8C:6F:ED:59:34:1B:61:EC:E6:BA:0A:82:CD:ED:53:0B:30:52:D9:45:47:60:34:25:16:44:66:31:54:20:C9"}}},"request":{"raw":"GET /444317220/23974950/mid_1280x720_2500.mp4 HTTP/1.1\r\nHost: vidwestxyz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bflix.sh/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Thu, 02 Oct 2025 09:44:34 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 12153765\r\nx-guploader-uploadid: AAwnv3JUtSF3tsLUXu5lHVD38VwWaAI1k8pEKxwa37lOPzsxYnoZnIBYAcRTGySWp40QS-UQIh3Lkuo\r\nexpires: Thu, 02 Oct 2025 10:44:34 GMT\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 29 May 2025 10:02:23 GMT\r\netag: \"07067d760ed5408ed1501a8e986cbb88\"\r\nx-goog-generation: 1748512943053966\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 12153765\r\nx-goog-hash: crc32c=XzRuBQ==, md5=BwZ9dg7VQI7RUBqOmGy7iA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type,Access-Control-Allow-Origin\r\nserver: cloudflare\r\nvia: 1.1 google\r\ncontent-range: bytes 0-12153764/12153765\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jxVfMKdbP9LgtNG353qFphFVrSZj6aDcOh00VYKM%2FhxofWcBaj4gHtamHd0B68vk3cOmVieNAHbJs218pu%2FLokCPfHLmePegJX237g%3D%3D\"}]}\r\ncf-ray: 9883430dba3ab518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":12153765,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"3339eb61473b5122e802f13262e8c987","sha1":"f46ced72164f2e5bec869e4905b9cfc94cd98c47","sha256":"773a8ab1f6185059ff2b130d01f117c995b0b351fda7d3dfe9e3460324c9cb91","sha512":"b40e40076d35fed3de773e7c17ff278907edbe60cafa9d0be5523e2017c95376d50806a720b2f4d87cb3c32f79f15ef4defa1d52f885df4416b411f51733b6ec","ssdeep":"24576:w7kCvIMajnm8HCaZ1POGVLRW3Qu5nOBMyhiYYQD:wjOjndHCaZ1tVL+V6CYYQD","tlshash":"6a25230abb92e567cee90fb181fa1b5536b2d8345617a2db0719076cbdc73e815c38c8","first_seen":"2025-08-08T17:56:32.130578Z","last_seen":"2025-10-13T09:44:54.824475Z","times_seen":36,"resource_available":false,"data":null}},"time_used":681,"timings":{"blocked":157,"dns":3,"connect":2,"send":0,"wait":178,"receive":188,"ssl":152},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adexchangeclear.com/video/select.php?r=9976174\u0026rbd=1\u0026srs=638585a3eb51c54d1be958b0a0e58fa0\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown3224%20bits\u0026cbpage=https%3A%2F%2Fbflix.sh%2F\u0026atv=69.0\u0026cbref=","fqdn":"adexchangeclear.com","domain":"adexchangeclear.com","tld":"com"},"ip":{"addr":"172.67.223.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:44.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangeclear.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 17:58:51 GMT","end":"Sat, 08 Nov 2025 17:08:08 GMT"},"fingerprint":{"sha1":"EA:C4:03:00:5B:31:55:C6:59:67:78:25:B3:B7:46:0C:EC:DE:30:70","sha256":"D9:CD:23:32:1E:FF:B8:A4:2F:94:7E:6F:7B:49:CF:2A:8E:F8:87:04:44:A7:C7:E1:3C:53:1B:9F:D1:3A:94:D5"}}},"request":{"raw":"GET /video/select.php?r=9976174\u0026rbd=1\u0026srs=638585a3eb51c54d1be958b0a0e58fa0\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown3224%20bits\u0026cbpage=https%3A%2F%2Fbflix.sh%2F\u0026atv=69.0\u0026cbref= HTTP/1.1\r\nHost: adexchangeclear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bflix.sh/\r\nOrigin: https://bflix.sh\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Oct 2025 09:44:44 GMT\r\ncontent-type: application/xml; charset=utf-8\r\naccess-control-allow-origin: https://bflix.sh\r\naccess-control-allow-headers: Content-Type\r\nvary: accept-encoding\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\nset-cookie: adcshVastUser=a40fd507-38fa-433a-a74c-c0503bd71e87; HttpOnly; SameSite=None; Secure; Path=/; Domain=adexchangeclear.com; Max-Age=2147483647\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KA19kkIBpxFDshIK9PKJL1QoWc604UQdRILkIhvVitedS3dhEKo0wK9zyJE%2Fu6nbkr5WScZiCycjBhrgKvm1i%2B0pGRd2Fy3y7GDvHy90KaPF\"}]}\r\ncf-ray: 9883434f0ff10b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6220,"size_decoded":0,"mime_type":"application/xml; charset=utf-8","magic":"XML 1.0 document, ASCII text, with very long lines (733)","md5":"aeac2a39151fc4bfe64a5c008a44fdc5","sha1":"9524501e7127fd410131e85d18b89319dce722c7","sha256":"ff2de2e3f153bb285c80677c86088f23e612742673320aedf8b96c894c5f5c71","sha512":"3b49b6091d57b675798d03854530bdc72f0b61c6601f2070380402c5728f04b34e0c44e4cfa54023dabf7b0e38182317213a2b12a50e91f4d53f1d56a3a02659","ssdeep":"192:uQ+M33pnLxfN1YDXxiwTa9DeujCfegJ+C:uvy3pnLlYIaxogea","tlshash":"c8d1f7a002e05cfa58ac5498966cf45a0fd444bf7f60a802f68fb1d2df0dd9642bf2e0","first_seen":"2025-10-02T09:45:05.949654Z","last_seen":"2025-10-02T09:45:05.949654Z","times_seen":1,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vidwestxyz.com/444317220/23974948/mid_1280x720_2500.mp4","fqdn":"vidwestxyz.com","domain":"vidwestxyz.com","tld":"com"},"ip":{"addr":"172.67.209.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:44.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidwestxyz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 Aug 2025 13:07:34 GMT","end":"Tue, 25 Nov 2025 14:05:39 GMT"},"fingerprint":{"sha1":"36:26:B5:C1:EB:B2:41:3D:D8:D5:40:B6:8E:DF:B1:53:7F:4E:FD:FC","sha256":"93:8C:6F:ED:59:34:1B:61:EC:E6:BA:0A:82:CD:ED:53:0B:30:52:D9:45:47:60:34:25:16:44:66:31:54:20:C9"}}},"request":{"raw":"GET /444317220/23974948/mid_1280x720_2500.mp4 HTTP/1.1\r\nHost: vidwestxyz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bflix.sh/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nx-guploader-uploadid: AAwnv3JKyb0EN1aojg9sjgy27hgA5Zi1fwpC3n0mx-_UDGLlvnVbxN2hQsmplc_RD__WZsZFyFSOOg\r\nx-goog-generation: 1748512967717857\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 8689246\r\nx-goog-hash: crc32c=D/sY+g==, md5=DCyhrQHapYUFlW3YEL2JkQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 8689246\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type,Access-Control-Allow-Origin\r\nserver: cloudflare\r\nvia: 1.1 google\r\ndate: Thu, 02 Oct 2025 09:44:44 GMT\r\nexpires: Thu, 02 Oct 2025 09:35:12 GMT\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 29 May 2025 10:02:47 GMT\r\netag: \"0c2ca1ad01daa58505956dd810bd8991\"\r\ncontent-type: video/mp4\r\nage: 2242\r\ncontent-range: bytes 0-8689245/8689246\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ImQ3uaOMBYfkZOe4Ct2IHOIOJYqpbxVNhUkKIIu8nNV5zxz9AmuM20DyBAMNcjS%2BtFdOTBjjFv50ttOVZgdQBikR2AsuG%2FnAlxrihQJN\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9883435039402efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":8689246,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"9ecdabbb7a7509ac9aa90b368388f9b4","sha1":"ade9790583351fef3f79750d88aefdf0c9409ca6","sha256":"c0f0d0646c25295fb2427e516ecb632328c184118f93e0393df94f21d69d28aa","sha512":"faf5f6340c44b0afa57e1d16c33628e1111a0d7aeb5ace5d71c5cfbb89e068a9db11da27385759207efd10df9b0b562d50547feec6921a20c862f6676a4efa46","ssdeep":"24576:sJCgoa2B8jcxYJrmpJ7at7VZayEQ8/gO1on3iUh:QCCjcihmqZbEQIgOiiUh","tlshash":"e125234eff439862d74c1b74a6d803453734c0f043d7928fa91793489ee939a6ae62e9","first_seen":"2025-08-08T17:11:25.873352Z","last_seen":"2025-10-11T16:16:28.669758Z","times_seen":40,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-JZX5Z23LMS","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:33.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /gtag/js?id=G-JZX5Z23LMS HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bflix.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 02 Oct 2025 09:44:33 GMT\r\nexpires: Thu, 02 Oct 2025 09:44:33 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 140614\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":422509,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"abab6a355b77d52fd467aa1a2c1f5b98","sha1":"03f1ea769f729344c5c8d39581f0ff64f907356b","sha256":"04e9a940a97ed2d7b002280dab9f5584ce11173f0e890cffc4aa6e831d14ff1b","sha512":"5ec265f556f9f5b85e896c66a61f16956cb50448414f0bc954ea82edc446eb6d638189f4988fb345d816ecd00576cd1b2f3f6397fa98a3d7b65acbd44dd52bd9","ssdeep":"6144:vBHGXbRh8P3VDCII6JAhqLfZAn0Ezx+xBz7:Zmr3cVlI6JBf7","tlshash":"20940ace73d674265396e478903f018ba5bb28a2f44cc899f189cce42d74a9a4177f7c","first_seen":"2025-10-02T09:45:05.951942Z","last_seen":"2025-10-02T09:45:05.951942Z","times_seen":1,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":80,"dns":0,"connect":9,"send":0,"wait":37,"receive":23,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bflix.sh/images/logo.png","fqdn":"bflix.sh","domain":"bflix.sh","tld":"sh"},"ip":{"addr":"104.21.2.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:33.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bflix.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 07:58:07 GMT","end":"Sat, 27 Dec 2025 08:56:46 GMT"},"fingerprint":{"sha1":"0B:34:7B:22:B2:FC:A2:F8:0B:C6:7C:C1:D4:36:04:0B:EB:DC:B8:4C","sha256":"C1:AA:10:79:18:4D:E2:4F:65:96:00:3F:0E:54:52:2B:A3:05:D7:04:E2:ED:65:E6:BF:0F:CA:2D:48:2B:72:FB"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: bflix.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bflix.sh/\r\nCookie: PHPSESSID=akgp8fi2m430k0p43in2ovlnqs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Oct 2025 09:44:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 9021\r\nlast-modified: Mon, 29 Jul 2024 23:48:56 GMT\r\netag: \"66a82a68-233d\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nage: 3558\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VdExi6McbFqghwyS2H1vKSwmnx%2FcAMAlrN%2BVFRhpkwz2zthnKeAm7yJQPVaB1qRyt7gpUeuJqmVYImvKBYVZApWOFhdupQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 98834308ad3d5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":9021,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 755 x 151, 8-bit/color RGBA, non-interlaced","md5":"396fc012f9b025a763a04bc4261c57e8","sha1":"29f2300b84fa2584a6d793ee0cc4af987d3c1ceb","sha256":"719ae5ed4b32c4216a2de1fc30330956c467e411ef0e3672548ed4dbe24f68a9","sha512":"c37ebd7909a401ff5b767dbbf386662111e907c546cbc933e57e967bd9e7f16c08369463fc08c96995d117122f4f603c412c8d3586bc03fbf9525317a72147dc","ssdeep":"192:tVHAoBtpg1XvUn/1FXhl6ECXwTmKgAXsIeTw7T/8KgyKN:tVNCW9hD6VAk7NIAl","tlshash":"24129fa61305afaaaf178fc51d9eec5e4ac3135092cd88fd441cc7dcf48e12048a9e43","first_seen":"2023-06-10T04:18:34Z","last_seen":"2026-03-27T02:12:19.931872Z","times_seen":56,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"bflix.sh","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.6.1/js/bootstrap.bundle.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:33.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/twitter-bootstrap/4.6.1/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bflix.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Oct 2025 09:44:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 19418\r\ncf-ray: 98834308dc7b56a4-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"617ac9de-4bda\"\r\nlast-modified: Thu, 28 Oct 2021 16:03:42 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 616380\r\nexpires: Tue, 22 Sep 2026 09:44:33 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=0m4ddGrn2fS%2FKCICFsG59mqOe2bKy8XnUWruH8NQce5KthChbQ397J%2Fmg13dqKUTnrP8sL2FeX5PUGOkMDTEIC%2BdRu1E1amXNA1FLxz1qAcuAzjsM7dh0Vxlii03cw0HIy5vgqhQ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83253,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"90146f01d8a2028ed6f2c3d2fba4ac9b","sha1":"0363cb58b7a7b60ef7fbf82b8bceb6305232501a","sha256":"7e02c082fedfc821a8a51fe004dab6896dd928876a21ccac8675142c2e2f7b1f","sha512":"9942e76b00d57029ec93d6b8686d502d967aadc71efe34b3106a9491e38bcb46faab4f93eacc87af196c0061fb655a2a0bddcf774941a9de9682e3d68a1ed51c","ssdeep":"768:Rw/iZOJuTVlHNvNu7MTMtnTbCeNbtj+VBvAQ3+S8QnxyoM+Fos/eAMELlVlXIaCU:R8i4JBGUwVBpL7NV+mB9mydf47qdLP/","tlshash":"2f83944972a4f462069f60a6907b0a0bf6376c4da507b01cb6ecd4ed1e7cd88316bf79","first_seen":"2023-03-07T01:10:33Z","last_seen":"2026-04-03T19:17:07.65006Z","times_seen":4068,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":13,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bflix.sh/images/intro-bg.jpg","fqdn":"bflix.sh","domain":"bflix.sh","tld":"sh"},"ip":{"addr":"104.21.2.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:33.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bflix.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 07:58:07 GMT","end":"Sat, 27 Dec 2025 08:56:46 GMT"},"fingerprint":{"sha1":"0B:34:7B:22:B2:FC:A2:F8:0B:C6:7C:C1:D4:36:04:0B:EB:DC:B8:4C","sha256":"C1:AA:10:79:18:4D:E2:4F:65:96:00:3F:0E:54:52:2B:A3:05:D7:04:E2:ED:65:E6:BF:0F:CA:2D:48:2B:72:FB"}}},"request":{"raw":"GET /images/intro-bg.jpg HTTP/1.1\r\nHost: bflix.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bflix.sh/assets/css/all.css?v=1759398273\r\nCookie: PHPSESSID=akgp8fi2m430k0p43in2ovlnqs; _ga_JZX5Z23LMS=GS2.1.s1759398273$o1$g0$t1759398273$j60$l0$h0; _ga=GA1.1.1111001849.1759398274\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Oct 2025 09:44:33 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 215466\r\nlast-modified: Mon, 29 Jul 2024 23:48:56 GMT\r\netag: \"66a82a68-349aa\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nage: 1935\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oADksr5O8RFudFVF4Gwb0Pi65U%2BuDJH5XurOoV6ZNwCL1G%2FD7xm%2B7VLUvIcGZLDqDmX53PF3wATthKpc1q6ieauW94gTQQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9883430a6d475685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":215466,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x932, components 3","md5":"23dabab09b1f4ee79a781959643d5031","sha1":"f24ae705fdb6d28c5636be28b9fa73f40d4cfb31","sha256":"ab3532d6008958f99b1cbcbf25890b0002d76e1a134ff2aff3b19b1427b7c7bc","sha512":"37d6785a54866a48884d4c03f0a933942eab7746c340d9538f6180d209c23b4f3ba68e19b1bc42f52403d9ee003e29e47cf9a6316441f8fb6e8f7a708f7bedf4","ssdeep":"3072:/nvyIrjeHcrkNWmu+6IRdRMQQBd6uEUyOjEiSgxREJSjMxUwVoHYHPN3V3398OkW:CI3fAu+6IpCd6RRiRxREJ0rwfL3tYGd","tlshash":"aa24237f859a2850f28a3b35ecac9b5e53399793775e3f4f025a33651c2fa11d880784","first_seen":"2023-06-10T04:18:34Z","last_seen":"2026-03-27T02:12:19.959989Z","times_seen":45,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"bflix.sh","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adexchangeclear.com/video/slider.php?r=9976174\u0026atv=69.0","fqdn":"adexchangeclear.com","domain":"adexchangeclear.com","tld":"com"},"ip":{"addr":"172.67.223.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:33.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangeclear.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 17:58:51 GMT","end":"Sat, 08 Nov 2025 17:08:08 GMT"},"fingerprint":{"sha1":"EA:C4:03:00:5B:31:55:C6:59:67:78:25:B3:B7:46:0C:EC:DE:30:70","sha256":"D9:CD:23:32:1E:FF:B8:A4:2F:94:7E:6F:7B:49:CF:2A:8E:F8:87:04:44:A7:C7:E1:3C:53:1B:9F:D1:3A:94:D5"}}},"request":{"raw":"GET /video/slider.php?r=9976174\u0026atv=69.0 HTTP/1.1\r\nHost: adexchangeclear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bflix.sh/\r\nOrigin: https://bflix.sh\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Oct 2025 09:44:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T%2F46o9%2FMsRoZxlCK5VjbAtVxVt1nb7v6gEYN%2BB15A%2BiZsNEgVjsOaNalPn5%2B6%2FhcjkY1eamwm6%2FO0KJR5%2B4rKBoqh2NN9AXht0r%2BasSk1X9HKcw%3D\"}]}\r\ncf-ray: 9883430a9e3a4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":90,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4b040e09d4880bffedae9bba517ebd2e","sha1":"fe29afc3653891a853496eb0c58d4b9385a9ca50","sha256":"19241c737ad018edfeecda1b376ca6a9d2fb191455fe56ed2db47662cc29ff27","sha512":"7f1bf98759a861a92d1f201db1177ee50a9ca45449e17ef172e783b6a91f866cdd925ca3dfb294e31e068884072798b7c850f786c41decf7ecb9a4669351a777","ssdeep":"","tlshash":"22b012404d30721064f5e346c6434c03286850400c489c41f58c004b5e0a414312f412","first_seen":"2025-07-03T18:18:09.41911Z","last_seen":"2026-01-21T22:52:53.270386Z","times_seen":47,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adexchangeclear.com/script/i.php?t=1\u0026c=23992852\u0026stamat=m%257C%252C%252Cg3Fi9jFuoGU3Bv_GH0dEdHP3xP.c5c%252C-39iA8DtgtEjoxmDw9Gsq8hyVbZEcaM8MudkZdzX2Wwa4hMLbXvq2VRqva-gU287qUaHVSKn0f6X7sNXvrtOvHZLg7LZ3IpCtjIij8dYYxMnc56V3p6DNQT8fkNeJPxXe0QGPAyaohWB0rKpcFxq2cFSg6Q3j2h1h60rspRulhdEp14AomHSgevOg6Hv8-UJUc90VQSVFRWUdKbIkOg4KK6z-5c4uRE8FY4T4WGdLhQiaktDkSVSLXIdjeNU4LQcTVyXZDihtBTDEECDVX7XwnCEsZsOQyb6jUYV70W9b6hMvWRPuEeEc8bHASpba--fJIqJV3PQA_O_iUSvYSpetOSfE7XuDu2HTB-iKrtU4WgGozGBALXP1VeF0iEBeLeAQZprqY-WhGsVblRQev1e5BcFd2JzJgg5e-48ei8bdUSibsmnnNkY4vDb3PSJx55D2fACmvPKSFRdGTA2I2ZIrnUc7zYtlhNKFVwT1_yTRFJxikbHNqWZde6rH0JSWGLpxO9R_K31im-w44XIPFGVIH7zpUJ9_GDR71An7-1LTK7RgUpS9rsnCfF-vaHxKJPCdLL7YreXAQYJOGu7nAoRr1GuaCG9KfQrRx6nXbYXkpsCwcgV6DaETzDuij64IdnDLe6VBLn5b9qVj_4QUz_0uYJOfjncU-zlCj9mfr4XpGOv5f6sAVn_zI504CBrAsMDJJ5V_9KRMgxO75P0DV7wbMQOFf5E5gVFBaeCnPd9k1n5MC8D6xiVI2lf6MYXwWOJ\u0026utsid=638585a3eb51c54d1be958b0a0e58fa0\u0026cbpage=https%3A%2F%2Fbflix.sh%2F\u0026cbref=","fqdn":"adexchangeclear.com","domain":"adexchangeclear.com","tld":"com"},"ip":{"addr":"172.67.223.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bflix.sh/","date":"2025-10-02T09:44:54.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangeclear.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 17:58:51 GMT","end":"Sat, 08 Nov 2025 17:08:08 GMT"},"fingerprint":{"sha1":"EA:C4:03:00:5B:31:55:C6:59:67:78:25:B3:B7:46:0C:EC:DE:30:70","sha256":"D9:CD:23:32:1E:FF:B8:A4:2F:94:7E:6F:7B:49:CF:2A:8E:F8:87:04:44:A7:C7:E1:3C:53:1B:9F:D1:3A:94:D5"}}},"request":{"raw":"GET /script/i.php?t=1\u0026c=23992852\u0026stamat=m%257C%252C%252Cg3Fi9jFuoGU3Bv_GH0dEdHP3xP.c5c%252C-39iA8DtgtEjoxmDw9Gsq8hyVbZEcaM8MudkZdzX2Wwa4hMLbXvq2VRqva-gU287qUaHVSKn0f6X7sNXvrtOvHZLg7LZ3IpCtjIij8dYYxMnc56V3p6DNQT8fkNeJPxXe0QGPAyaohWB0rKpcFxq2cFSg6Q3j2h1h60rspRulhdEp14AomHSgevOg6Hv8-UJUc90VQSVFRWUdKbIkOg4KK6z-5c4uRE8FY4T4WGdLhQiaktDkSVSLXIdjeNU4LQcTVyXZDihtBTDEECDVX7XwnCEsZsOQyb6jUYV70W9b6hMvWRPuEeEc8bHASpba--fJIqJV3PQA_O_iUSvYSpetOSfE7XuDu2HTB-iKrtU4WgGozGBALXP1VeF0iEBeLeAQZprqY-WhGsVblRQev1e5BcFd2JzJgg5e-48ei8bdUSibsmnnNkY4vDb3PSJx55D2fACmvPKSFRdGTA2I2ZIrnUc7zYtlhNKFVwT1_yTRFJxikbHNqWZde6rH0JSWGLpxO9R_K31im-w44XIPFGVIH7zpUJ9_GDR71An7-1LTK7RgUpS9rsnCfF-vaHxKJPCdLL7YreXAQYJOGu7nAoRr1GuaCG9KfQrRx6nXbYXkpsCwcgV6DaETzDuij64IdnDLe6VBLn5b9qVj_4QUz_0uYJOfjncU-zlCj9mfr4XpGOv5f6sAVn_zI504CBrAsMDJJ5V_9KRMgxO75P0DV7wbMQOFf5E5gVFBaeCnPd9k1n5MC8D6xiVI2lf6MYXwWOJ\u0026utsid=638585a3eb51c54d1be958b0a0e58fa0\u0026cbpage=https%3A%2F%2Fbflix.sh%2F\u0026cbref= HTTP/1.1\r\nHost: adexchangeclear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bflix.sh/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Thu, 02 Oct 2025 09:44:54 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fXFElmAg1C9p%2BRN9%2FJ8ktYvBJkinKtWn0O%2Bc08Oje0K7GdjE5kDGRkqpVpP%2FQ1XrgMA3iZmz6f6oMQLej75W%2F52AlYW%2BOTPABrPYmqFru6PZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9883438b995a712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}