WEBSITE ANALYSIS REPORT

http://nunflix.cx/browser?keyword=Abnormal

11 Jun 2026 · 06:31:52.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

06:31:24.530 GET 200 document 116.6 KB 167 ms 1 alerts

06:31:25.072 GET 200 stylesheet 476.7 KB 13 ms 1 alerts

06:31:25.074 GET 200 stylesheet 18.0 KB 22 ms —

06:31:25.076 GET 200 script 82.4 KB 12 ms —

06:31:25.078 GET 200 script 18.2 KB 13 ms —

06:31:25.080 GET 200 script 59.2 KB 17 ms —

06:31:25.081 GET 200 script 145.0 KB 17 ms —

06:31:25.084 GET 200 script 90.8 KB 625 ms —

06:31:25.089 GET 200 img 7.8 KB 9 ms 1 alerts

06:31:25.178 GET 200 img 36.2 KB 10 ms 1 alerts

06:31:25.212 GET 200 font 318.0 KB 15 ms 1 alerts

06:31:25.213 GET 200 font 106.4 KB 15 ms 1 alerts

06:31:25.237 GET 200 script 107.3 KB 99 ms —

06:31:25.241 GET 200 lazy-img 39.1 KB 25 ms —

06:31:25.243 GET 200 lazy-img 36.2 KB 23 ms —

06:31:25.245 GET 200 lazy-img 24.3 KB 230 ms —

06:31:25.246 GET 200 lazy-img 22.1 KB 19 ms —

06:31:25.248 GET 200 lazy-img 8.1 KB 193 ms —

06:31:25.729 GET 200 script 83.4 KB 121 ms 2 alerts

06:31:25.732 GET 200 xhr 40 B 112 ms —

06:31:25.767 GET 302 script 0 B 4 ms 1 alerts

06:31:25.786 GET 200 script 83.4 KB 132 ms 2 alerts

06:31:25.788 GET 200 img 0 B 0 ms —

06:31:25.799 GET 200 script 23.1 KB 6 ms 1 alerts

06:31:25.881 POST 200 xhr 0 B 16 ms 1 alerts

06:31:26.018 GET 200 img 381.4 KB 22 ms 1 alerts

06:31:26.019 GET 200 img 381.4 KB 23 ms 1 alerts

06:31:26.311 GET 200 xhr 5.1 KB 282 ms —

06:31:26.601 GET 200 xhr 2.2 KB 28 ms 2 alerts

06:31:26.603 GET 200 img 0 B 0 ms —

06:31:26.650 GET 200 xhr 76.8 KB 488 ms —

06:31:26.651 GET 200 xhr 4.1 KB 492 ms —

06:31:26.657 GET 200 img 0 B 472 ms 1 alerts

06:31:26.778 GET 200 stylesheet 16.4 KB 85 ms —

06:31:26.779 GET 200 img 1.2 KB 11 ms —

06:31:26.780 GET 200 script 82.4 KB 14 ms —

06:31:26.781 GET 200 img 5.3 KB 12 ms —

06:31:26.783 GET 200 img 10.2 KB 11 ms —

06:31:26.784 GET 200 img 201.5 KB 14 ms —

06:31:26.852 GET 200 xhr 17.9 KB 577 ms —

06:31:27.152 GET 200 img 0 B 97 ms 1 alerts

06:31:27.155 GET 200 img 0 B 381 ms 1 alerts

06:31:27.437 GET 200 img 0 B 100 ms 1 alerts

06:31:27.658 GET 200 img 0 B 0 ms —

06:31:27.659 GET 200 img 0 B 379 ms —

06:31:27.687 GET 200 font 42.1 KB 81 ms —

06:31:27.689 GET 200 font 42.1 KB 80 ms —

06:31:29.348 GET 200 img 0 B 0 ms 3 alerts

Transaction #03

Request / response

URL

GET HTTPS

https://flushpersist.com/pxf.gif?uuid=d30963e6-7a2c-40df-a7cd-2bb0c25f2ee0&eb=df3d42e1ba309a887bd56005500f3513&te=623bfb307fb920bd88ab6ec29d10df05&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0&dev=e&res=14.1055&b_frame=0&pk=f2d8f77afbc58792853a7736c0084b21&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=6

IP / ASN

172.240.108.76

AS7979 · SERVERS-COM

Requested by: https://nunflix.cx/browser?keyword=Abnormal

Resource information

File type: Not recorded
MIME type: image/gif
First seen (UTC): Not recorded
Last seen (UTC): 24 Oct 2026 · 01:29:37.487 UTC
Times seen: 19320520

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Certificate and TLS information not recorded.

Technology fingerprints

HSTS (Security)
Nginx:1.28.2 (Web servers, Reverse proxies)
Envoy (Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Hagezi Threat Feed Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /pxf.gif?uuid=d30963e6-7a2c-40df-a7cd-2bb0c25f2ee0&eb=df3d42e1ba309a887bd56005500f3513&te=623bfb307fb920bd88ab6ec29d10df05&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0&dev=e&res=14.1055&b_frame=0&pk=f2d8f77afbc58792853a7736c0084b21&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=6 HTTP/1.1
Host: flushpersist.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://nunflix.cx/
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Priority: u=5, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Thu, 11 Jun 2026 06:31:29 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
x-envoy-upstream-service-time: 1
Host: flushpersist.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 697bf00e44d79b6c3f777d2859ba4d3a
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

06:31:29.350 GET 200 img 0 B 0 ms 3 alerts

http://nunflix.cx/browser?keyword=Abnormal

Domain graph

Hostnames

Connections