| |  104.21.48.69 | 200 OK | 11 kB |
IP104.21.48.69:443
CertificateIssuerGoogle Trust Services Subjectunblockedsite.pw Fingerprint03:40:9D:7A:8B:60:5F:A6:A5:6E:06:6A:BE:46:80:DA:4E:99:13:B2 ValiditySat, 17 May 2025 00:22:04 GMT - Fri, 15 Aug 2025 01:19:21 GMT
File typeHTML document, ASCII text, with very long lines (6790) Hash1782443ecfc617d31c6c46c4b769ed21 7ce93ff45dd2a3ac7e1b59d39b3724e3efca0067 f736ff4c7307e29d4b8787053a32dec8978852ddf681235cc757bc06ad61b7e8
GET / HTTP/1.1
Host: flixgo.unblockedsite.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 29 May 2025 23:07:07 GMT
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ognrsbw2rDtrJsTbiZBxy8F5%2BbFrfPcXvLucBixhOZ5z3zD0renw4C08Q5jMMtYZFeBr3fhcmz4yHKRAoz%2BG%2Fv1wI%2FbV%2B7KJWrDc%2FM8T%2B1WPXeA%2BQA%3D%3D"}]}
set-cookie: view=1; Max-Age=86400; Expires=Fri, 30 May 2025 23:07:07 GMT
PHPSESSID=ccha0llspu41q1mdlsshchetur; Path=/
cf-ray: 9479a5682a845693-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| i.ibb.co/pyC2VvJ/alert-xxl.png |  91.134.10.182 | 200 OK | 5.6 kB |
URL GET i.ibb.co/pyC2VvJ/alert-xxl.png IP91.134.10.182:443
Requested byhttps://flixgo.unblockedsite.pw/ CertificateIssuerLet's Encrypt Subjectibb.co Fingerprint0C:AA:F7:77:A3:D5:B6:E8:71:39:92:D2:3F:B9:BD:20:7C:B9:1E:14 ValiditySun, 20 Apr 2025 07:15:11 GMT - Sat, 19 Jul 2025 07:15:10 GMT
File typePNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced Hash8d0eed07b450044fdca282d1daf8a58c 794e1284cdf81fd60154955c1805282ae21240cd baac89456a2d4dfdcdc14244fbe50a04ade7a401c82de605938a92e16f35c1af
GET /pyC2VvJ/alert-xxl.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flixgo.unblockedsite.pw/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 29 May 2025 23:07:07 GMT
content-type: image/png
content-length: 5554
last-modified: Mon, 07 Aug 2023 04:09:39 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| theusualsuspectz.biz/j/m/qqqq.js | 104.21.16.1 | 200 OK | 48 kB |
URL GET theusualsuspectz.biz/j/m/qqqq.js IP104.21.16.1:443
Requested byhttps://flixgo.unblockedsite.pw/ CertificateIssuerGoogle Trust Services Subjecttheusualsuspectz.biz Fingerprint72:6A:5A:5E:70:EE:8C:45:A5:F0:31:CA:02:F7:9C:9C:41:F5:AA:4F ValidityFri, 02 May 2025 09:19:17 GMT - Thu, 31 Jul 2025 10:17:48 GMT
File typeJavaScript source, ASCII text, with very long lines (48351), with no line terminators Hashfebd5bfc829d7c8aa363e93e2e61f414 10d66213a9249bea47b15acf295323f01d217ef0 ff391f38fc73325f58d0626b9415ac121f1461407d74e86ebddefd8180050d76
GET /j/m/qqqq.js HTTP/1.1
Host: theusualsuspectz.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flixgo.unblockedsite.pw/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 29 May 2025 23:07:07 GMT
content-type: application/javascript; charset=UTF-8
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
last-modified: Mon, 21 Apr 2025 22:12:39 GMT
etag: W/"6806c2d7-bcdf"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: br
age: 2315139
cf-cache-status: HIT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=d5pzWtww0OeH%2FHNNvqaQh8VHzkqRCv2D49nmq3f7eUJG4Fb%2BxfVh89%2BirGW5c0fyXkvR5f6SLEeKz80Z1q8lyiTd16TR0%2F5dzAYttQNyaAvB4A%3D%3D"}]}
cf-ray: 9479a56bbe4b56be-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| heartilyscales.com/a2/86/90/a286902791a7f4c98bcb1e812322cd78.js |  172.240.108.76 | 200 OK | 65 kB |
URL GET heartilyscales.com/a2/86/90/a286902791a7f4c98bcb1e812322cd78.js IP172.240.108.76:443
Requested byhttps://flixgo.unblockedsite.pw/ CertificateIssuerLet's Encrypt Subjectheartilyscales.com Fingerprint79:35:42:7D:68:22:6E:05:A1:82:F5:C5:9C:6E:A2:1E:48:9C:F9:05 ValiditySun, 06 Apr 2025 21:13:49 GMT - Sat, 05 Jul 2025 21:13:48 GMT
File typeJavaScript source, ASCII text, with very long lines (64943), with no line terminators Hasha5045743be31da8f08bee24ce105a905 907d2b80eb6bde67ed5745bc6af406753f433520 dfc5fee15574beb48501ec3050fd3f93a2018169680d62f9dbe350bd10a280b7
GET /a2/86/90/a286902791a7f4c98bcb1e812322cd78.js HTTP/1.1
Host: heartilyscales.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flixgo.unblockedsite.pw/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 29 May 2025 23:07:07 GMT
Content-Type: application/javascript
Content-Length: 23635
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
set-cookie: 4b4e7ab587d59b22ad7bcd2439afc363_F-2408-sb2=0; expires=Thu, 29 May 2025 23:07:07 GMT; secure; SameSite=None
x-envoy-upstream-service-time: 3
Host: heartilyscales.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: d4bbe06981a3ac76c67e7a904582c383
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| equilibriumfestive.com/a0/32/b4/a032b4d33c8aea68a4f9b84235614bff.js | 172.240.108.84 | 200 OK | 65 kB |
URL GET equilibriumfestive.com/a0/32/b4/a032b4d33c8aea68a4f9b84235614bff.js IP172.240.108.84:443
Requested byhttps://flixgo.unblockedsite.pw/ CertificateIssuerLet's Encrypt Subjectequilibriumfestive.com Fingerprint17:DD:F5:C0:D6:24:2C:3F:E6:C8:94:31:FE:17:86:D6:F3:F1:31:94 ValiditySat, 19 Apr 2025 10:04:40 GMT - Fri, 18 Jul 2025 10:04:39 GMT
File typeJavaScript source, ASCII text, with very long lines (64935), with no line terminators Hashabed347a0c1229e7e101faa70a7a844e 1fad7154108dbab6a16085ed716c5071dde82394 13b285df3dbf3e0805aeaf017473de96c8b1a5cb449d8821a4e3991f8fd108b6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /a0/32/b4/a032b4d33c8aea68a4f9b84235614bff.js HTTP/1.1
Host: equilibriumfestive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flixgo.unblockedsite.pw/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 29 May 2025 23:07:07 GMT
Content-Type: application/javascript
Content-Length: 23626
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
set-cookie: 4b4e7ab587d59b22ad7bcd2439afc363_F-2408-sb2=0; expires=Thu, 29 May 2025 23:07:07 GMT; secure; SameSite=None
x-envoy-upstream-service-time: 3
Host: equilibriumfestive.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: e0208d3d570ad0b733056a1850f3c190
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| matomo.hellohi.me/matomo.js | 104.21.16.1 | 404 Not Found | 0 B |
URL GET matomo.hellohi.me/matomo.js IP104.21.16.1:443
Requested byhttps://flixgo.unblockedsite.pw/ CertificateIssuerGoogle Trust Services Subjecthellohi.me Fingerprint8B:62:21:60:9D:C5:78:C7:58:77:08:D3:F9:B2:7D:65:07:98:BA:2C ValidityFri, 16 May 2025 01:36:28 GMT - Thu, 14 Aug 2025 02:35:13 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /matomo.js HTTP/1.1
Host: matomo.hellohi.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flixgo.unblockedsite.pw/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Thu, 29 May 2025 23:07:08 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=vGLkbbUFNXnki0nCdjHSsgkK2YThDBGnWq1HfkXOkLgtTOHpxAoV0W5wNldgQ9H6SA53ufHBfutPRrQnXVHAt8GDiZZM%2BtllM2Ea3mSTow%3D%3D"}]}
cache-control: max-age=14400
cf-cache-status: EXPIRED
vary: accept-encoding
content-encoding: br
cf-ray: 9479a56e7aa456a5-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| metrica-yandex.com/metrika/tag.js?1001 | 104.21.64.1 | 200 OK | 60 kB |
URL GET metrica-yandex.com/metrika/tag.js?1001 IP104.21.64.1:443
Requested byhttps://flixgo.unblockedsite.pw/ CertificateIssuerGoogle Trust Services Subjectmetrica-yandex.com Fingerprint10:B2:A3:B2:E2:B7:A3:63:72:4E:BC:30:5F:49:E3:66:41:9C:73:1A ValidityTue, 29 Apr 2025 20:13:30 GMT - Mon, 28 Jul 2025 21:13:02 GMT
File typeJavaScript source, ASCII text, with very long lines (60271), with no line terminators Hashea67b2343fc359662afdae5d4c8c8e03 7f07219a8cd9d6d5c17e20bd7e80fac0281c2b18 5e31460a6eacabdc5895ad2ad898a4a570ac88f2794c61ddce6b0beee304eb11
GET /metrika/tag.js?1001 HTTP/1.1
Host: metrica-yandex.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flixgo.unblockedsite.pw/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 29 May 2025 23:07:07 GMT
content-type: application/javascript; charset=UTF-8
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
last-modified: Tue, 22 Apr 2025 10:50:51 GMT
etag: W/"6807748b-eb6f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: br
age: 1138674
cf-cache-status: HIT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=CF5yUv2h8SGKBaIiizMg9k7Tp8cFr%2BqEoFPuaAPegoyPVcTj%2F00BeR2EthhF4OERdetfxK6vNHnTCSWt%2FazCOyd4mYRNefBp2IXQij%2FqI0w%3D"}]}
cf-ray: 9479a56b8b0ab505-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| flixgo.unblockedsite.pw/app/apx19.js | 104.21.48.69 | 200 OK | 9.2 kB |
URL GET flixgo.unblockedsite.pw/app/apx19.js IP104.21.48.69:443
Requested byhttps://flixgo.unblockedsite.pw/ CertificateIssuerGoogle Trust Services Subjectunblockedsite.pw Fingerprint03:40:9D:7A:8B:60:5F:A6:A5:6E:06:6A:BE:46:80:DA:4E:99:13:B2 ValiditySat, 17 May 2025 00:22:04 GMT - Fri, 15 Aug 2025 01:19:21 GMT
File typeJavaScript source, ASCII text, with very long lines (9183), with no line terminators Hash2344c3f05f624d595f6fb920e4d74ded eb4d1404ac2d5eecd307f4588aeeab5c8ef463f1 3a28fe59e4a2af96d8edeeb12d7040c574cf71fa88fccb5cf49e9c0a1d4e4c7a
GET /app/apx19.js HTTP/1.1
Host: flixgo.unblockedsite.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flixgo.unblockedsite.pw/
Cookie: view=1; PHPSESSID=ccha0llspu41q1mdlsshchetur
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 29 May 2025 23:07:07 GMT
content-type: application/javascript; charset=UTF-8
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
last-modified: Wed, 21 May 2025 23:09:55 GMT
etag: W/"682e5d43-23df"
content-encoding: br
cache-control: max-age=14400
cf-cache-status: MISS
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=mcKKXO%2FW%2BPJxNNyrYex3dn7iEVUki64ksvzkf9dayoizW7yxjVuiX7IU3sQeQ0dMYLvFdK9pxQcNQRsxyWCIGJ2URdPg2Lq6IM7keerNMki6Ju73EA%3D%3D"}]}
cf-ray: 9479a56aec7c5693-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| flixgo.unblockedsite.pw/hy.js?q22q2q2 | 104.21.48.69 | 200 OK | 56 kB |
URL GET flixgo.unblockedsite.pw/hy.js?q22q2q2 IP104.21.48.69:443
Requested byhttps://flixgo.unblockedsite.pw/ CertificateIssuerGoogle Trust Services Subjectunblockedsite.pw Fingerprint03:40:9D:7A:8B:60:5F:A6:A5:6E:06:6A:BE:46:80:DA:4E:99:13:B2 ValiditySat, 17 May 2025 00:22:04 GMT - Fri, 15 Aug 2025 01:19:21 GMT
File typeJavaScript source, ASCII text, with very long lines (56131), with no line terminators Hash667d77da844b6d5ad62b2f26e77b4b12 01ae61192a38af73a93c67468fb8271d7bbfa4f6 f240ce7fa62cd81d92f29081815f2cd2376ea6867887d17d5625009ebdf355b1
GET /hy.js?q22q2q2 HTTP/1.1
Host: flixgo.unblockedsite.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flixgo.unblockedsite.pw/
Cookie: view=1; PHPSESSID=ccha0llspu41q1mdlsshchetur
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 29 May 2025 23:07:07 GMT
content-type: application/javascript; charset=UTF-8
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
last-modified: Wed, 21 May 2025 23:17:02 GMT
etag: W/"682e5eee-db43"
content-encoding: br
cache-control: max-age=14400
cf-cache-status: MISS
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=f9ktLbw9duCsTtZ5hC2YRg8H2vYUDwYk33U8fX%2Fu1a2XWVN%2FJvC46kJY7WC%2BwjcKBEPYmzbQHyU77ClFWqUdxLgjZXSuP28X4oY3MLYS66EZ24uKYQ%3D%3D"}]}
cf-ray: 9479a56aec7e5693-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| flixgo.unblockedsite.pw/app/x12.js | 104.21.48.69 | 200 OK | 11 kB |
URL GET flixgo.unblockedsite.pw/app/x12.js IP104.21.48.69:443
Requested byhttps://flixgo.unblockedsite.pw/ CertificateIssuerGoogle Trust Services Subjectunblockedsite.pw Fingerprint03:40:9D:7A:8B:60:5F:A6:A5:6E:06:6A:BE:46:80:DA:4E:99:13:B2 ValiditySat, 17 May 2025 00:22:04 GMT - Fri, 15 Aug 2025 01:19:21 GMT
File typeJavaScript source, ASCII text, with very long lines (11180), with no line terminators Hash94efa3c05291ac5cccd32cc3a11c9724 3a033e4d6f5e5eaf76030a81c8a05c619de436c2 58c753f7ffcb584d2ed43470ec9bdd30a4cd4723f368d83de6163413d5555102
GET /app/x12.js HTTP/1.1
Host: flixgo.unblockedsite.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flixgo.unblockedsite.pw/
Cookie: view=1; PHPSESSID=ccha0llspu41q1mdlsshchetur
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 29 May 2025 23:07:07 GMT
content-type: application/javascript; charset=UTF-8
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
last-modified: Wed, 21 May 2025 23:09:55 GMT
etag: W/"682e5d43-2bac"
content-encoding: br
cache-control: max-age=14400
cf-cache-status: MISS
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Kt7ss8a2F8d%2Fqem2Gf6Quv3%2Fb%2BPfvRG0ipT887gz4ETpXed3UPeflCyXKYZolIiZZnAuOxDSJNTLa6Snt0qlvuczlTYWtZqW6BRs6c5ac73mW2aNAQ%3D%3D"}]}
cf-ray: 9479a56aec845693-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| equilibriumfestive.com/22/00/54/2200540f09f939738419313a1a090c32.js | 172.240.108.84 | 200 OK | 104 kB |
URL GET equilibriumfestive.com/22/00/54/2200540f09f939738419313a1a090c32.js IP172.240.108.84:443
Requested byhttps://flixgo.unblockedsite.pw/ CertificateIssuerLet's Encrypt Subjectequilibriumfestive.com Fingerprint17:DD:F5:C0:D6:24:2C:3F:E6:C8:94:31:FE:17:86:D6:F3:F1:31:94 ValiditySat, 19 Apr 2025 10:04:40 GMT - Fri, 18 Jul 2025 10:04:39 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size104 kB (104411 bytes) Hash3764ca55a7f674aafc98a7a8e1d4373c 460e9453a4f54ac358ae3db5c841ff19260b6ea0 32cd14d293cee279329c3808122dcf0aa190f05694caf61dcfda8b518bd988c6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /22/00/54/2200540f09f939738419313a1a090c32.js HTTP/1.1
Host: equilibriumfestive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flixgo.unblockedsite.pw/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 29 May 2025 23:07:07 GMT
Content-Type: application/javascript
Content-Length: 32723
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 4
Host: equilibriumfestive.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 3f3fcb95252f580ff92471ba786a1f50
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| matomo3.org/l2.js | 104.21.85.227 | 200 OK | 17 B |
IP104.21.85.227:443
Requested byhttps://flixgo.unblockedsite.pw/ CertificateIssuerGoogle Trust Services Subjectmatomo3.org Fingerprint8A:06:F9:A7:D8:1F:4F:5C:FE:94:3A:74:AA:37:98:1F:FB:BB:85:D3 ValiditySat, 26 Apr 2025 08:31:16 GMT - Fri, 25 Jul 2025 09:29:43 GMT
Hash1b783e218274d6f0f60ebb285254928b 0c17420fb2950e0c605818435a66d26607cf463d 2bb629349ecec11c7e749a6c0833a58719e347c00af6a3d1debb3e49f99a5da9
GET /l2.js HTTP/1.1
Host: matomo3.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flixgo.unblockedsite.pw/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 29 May 2025 23:07:07 GMT
content-type: application/javascript
server: cloudflare
last-modified: Wed, 21 May 2025 21:27:34 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=pU69ZaKlpj7r670F8ccCXLexcZ8dRAIg9PDa2XXG51Xz2rb9a4k02LTaIUUiu%2B37p23g7oy8CASRmfoRG7J0zy4minfjpdMN9w%3D%3D"}]}
age: 696596
cf-cache-status: HIT
etag: W/"682e4546-11"
content-encoding: br
cf-ray: 9479a56bafc70b59-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| matomo3.org/l1.js | 104.21.85.227 | 200 OK | 17 B |
IP104.21.85.227:443
Requested byhttps://flixgo.unblockedsite.pw/ CertificateIssuerGoogle Trust Services Subjectmatomo3.org Fingerprint8A:06:F9:A7:D8:1F:4F:5C:FE:94:3A:74:AA:37:98:1F:FB:BB:85:D3 ValiditySat, 26 Apr 2025 08:31:16 GMT - Fri, 25 Jul 2025 09:29:43 GMT
Hash3c9d85f944382c9ae337da34d7574dda 6cf3a128a59a0f8d41ad504037fc743e211c5fac d411a49b78172355e4ed6708eaeaf20a74765897d6c2690809c6d48173914479
GET /l1.js HTTP/1.1
Host: matomo3.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flixgo.unblockedsite.pw/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 29 May 2025 23:07:07 GMT
content-type: application/javascript
server: cloudflare
last-modified: Wed, 21 May 2025 21:27:22 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=XMvaSFVw%2BIIL42DEn1TuCz0TRPt5U9U8zYO23BkS4GdIQgH77mXdkHOcl4g4hpF4y%2BFP02Yzw96q40XoO9IqCKMBQJpCLGlyXw%3D%3D"}]}
age: 696596
cf-cache-status: HIT
etag: W/"682e453a-11"
content-encoding: br
cf-ray: 9479a56bafca0b59-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| flixgo.unblockedsite.pw/favicon.ico | 104.21.48.69 | 200 OK | 11 kB |
URL GET flixgo.unblockedsite.pw/favicon.ico IP104.21.48.69:443
Requested byhttps://flixgo.unblockedsite.pw/ CertificateIssuerGoogle Trust Services Subjectunblockedsite.pw Fingerprint03:40:9D:7A:8B:60:5F:A6:A5:6E:06:6A:BE:46:80:DA:4E:99:13:B2 ValiditySat, 17 May 2025 00:22:04 GMT - Fri, 15 Aug 2025 01:19:21 GMT
File typeHTML document, ASCII text, with very long lines (6790) Hash76cef564e86377ff6f2f9dce1c775c83 4a36f14992f903f53ba0a0c87b03c510a31ea058 eb5fe9d0ac74e860d2497ca11ea6f6caea3f946a4661ae9bc16f233831c43592
GET /favicon.ico HTTP/1.1
Host: flixgo.unblockedsite.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flixgo.unblockedsite.pw/
Cookie: view=1; PHPSESSID=ccha0llspu41q1mdlsshchetur
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 29 May 2025 23:07:09 GMT
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3VKeZB2VWSpx99HU%2B3GRinLK4gnRfJvQ2sT6WhUS65Jx46LaLKvzu3Jow5VBBX6ZAL5dLllSQxTz2jXzN6UEw8KVLhQcVBW%2FmhvzaxSVM%2BqvE9Jz6JVblW8IlnjDj%2BJsFqKAihnpQA1P8w%3D%3D"}],"group":"cf-nel","max_age":604800}
set-cookie: view=1; expires=Fri, 30-May-2025 23:07:09 GMT; Max-Age=86400
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
cf-ray: 9479a575ee1c712b-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6680&min_rtt=2017&rtt_var=3744&sent=70&recv=90&lost=0&retrans=0&sent_bytes=7465&recv_bytes=5835&delivery_rate=358176&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=12000&unsent_bytes=0&cid=a3db13ab936897a1&ts=2145&x=80"
|
|
| fonts.googleapis.com/css2?family=Roboto:wght@400&display=swap | 142.250.74.10 | 200 OK | 5.7 kB |
URL GET fonts.googleapis.com/css2?family=Roboto:wght@400&display=swap IP142.250.74.10:443
Requested byhttps://flixgo.unblockedsite.pw/ CertificateIssuerGoogle Trust Services Subjectupload.video.google.com FingerprintE8:3A:D1:2C:16:97:56:94:8B:01:F8:ED:EB:81:17:F8:D7:6C:B2:41 ValidityTue, 29 Apr 2025 19:29:18 GMT - Tue, 22 Jul 2025 19:29:17 GMT
File typeASCII text, with very long lines (1572) Hashdce8b1041389e28a34e22250feed115a 9c290194b85035fb588c9e25fa515c676172b920 1ede014f47795c3d04812b724ef687909970f776d37854e7312a5ad859c84e41
GET /css2?family=Roboto:wght@400&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flixgo.unblockedsite.pw/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 29 May 2025 23:07:07 GMT
date: Thu, 29 May 2025 23:07:07 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| flixgo.unblockedsite.pw/zpp/zpp4.js?q22q2q2 | 104.21.48.69 | 200 OK | 39 kB |
URL GET flixgo.unblockedsite.pw/zpp/zpp4.js?q22q2q2 IP104.21.48.69:443
Requested byhttps://flixgo.unblockedsite.pw/ CertificateIssuerGoogle Trust Services Subjectunblockedsite.pw Fingerprint03:40:9D:7A:8B:60:5F:A6:A5:6E:06:6A:BE:46:80:DA:4E:99:13:B2 ValiditySat, 17 May 2025 00:22:04 GMT - Fri, 15 Aug 2025 01:19:21 GMT
File typeJavaScript source, ASCII text, with very long lines (38995), with no line terminators Hash7dc63553536847077855df4f82f1ec18 146c3aac34cb4e7e1e9c692ccd0161b2e4f018de 3a18b1964d1d209c46d754459b9ef98d4a9a85065e245f8311be727ffee3f960
GET /zpp/zpp4.js?q22q2q2 HTTP/1.1
Host: flixgo.unblockedsite.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flixgo.unblockedsite.pw/
Cookie: view=1; PHPSESSID=ccha0llspu41q1mdlsshchetur
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 29 May 2025 23:07:07 GMT
content-type: application/javascript; charset=UTF-8
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
last-modified: Wed, 21 May 2025 23:09:55 GMT
etag: W/"682e5d43-9853"
content-encoding: br
cache-control: max-age=14400
cf-cache-status: MISS
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=8iJCclRYOBR06C50bxnHkHK9a4BKT9x40r2Z3WIVz5L3XYdsbVdju%2F4SaU%2BMP9UVgHIZxPXUkSiRNk%2BVle3EktytiVga%2FA3ENIr0U%2Br3CUrzbQgZdQ%3D%3D"}]}
cf-ray: 9479a56aec825693-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| flixgo.unblockedsite.pw/app/apx14.js | 104.21.48.69 | 200 OK | 7.7 kB |
URL GET flixgo.unblockedsite.pw/app/apx14.js IP104.21.48.69:443
Requested byhttps://flixgo.unblockedsite.pw/ CertificateIssuerGoogle Trust Services Subjectunblockedsite.pw Fingerprint03:40:9D:7A:8B:60:5F:A6:A5:6E:06:6A:BE:46:80:DA:4E:99:13:B2 ValiditySat, 17 May 2025 00:22:04 GMT - Fri, 15 Aug 2025 01:19:21 GMT
File typeJavaScript source, ASCII text, with very long lines (7663), with no line terminators Hashdfb1f327618e201778f2de85cfbcd173 fceb89a2221463e5bc5a71feff1247683ab08cc5 dc03bc8b63938916a73dd976e186d05559ddc61da2725e1063b7936fa9f0fc33
GET /app/apx14.js HTTP/1.1
Host: flixgo.unblockedsite.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flixgo.unblockedsite.pw/
Cookie: view=1; PHPSESSID=ccha0llspu41q1mdlsshchetur
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 29 May 2025 23:07:07 GMT
content-type: application/javascript; charset=UTF-8
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
last-modified: Wed, 21 May 2025 23:09:55 GMT
etag: W/"682e5d43-1def"
content-encoding: br
cache-control: max-age=14400
cf-cache-status: MISS
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=HRIYcelwooYH9K5SYdfhHQC3RLPp2gj5yfthE7WgrtFho1h5vdB0C5Wvn07nPHXiNdwqig4Jc8OutC4UoOL42oQOc6Wg6NowQup37zYEswwbMEF8Cg%3D%3D"}]}
cf-ray: 9479a56aec835693-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| flixgo.unblockedsite.pw/user.php | 104.21.48.69 | 200 OK | 0 B |
URL POST flixgo.unblockedsite.pw/user.php IP104.21.48.69:443
Requested byhttps://flixgo.unblockedsite.pw/ CertificateIssuerGoogle Trust Services Subjectunblockedsite.pw Fingerprint03:40:9D:7A:8B:60:5F:A6:A5:6E:06:6A:BE:46:80:DA:4E:99:13:B2 ValiditySat, 17 May 2025 00:22:04 GMT - Fri, 15 Aug 2025 01:19:21 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /user.php HTTP/1.1
Host: flixgo.unblockedsite.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Content-Length: 39
Origin: https://flixgo.unblockedsite.pw
DNT: 1
Connection: keep-alive
Referer: https://flixgo.unblockedsite.pw/
Cookie: view=1; PHPSESSID=ccha0llspu41q1mdlsshchetur
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 29 May 2025 23:07:08 GMT
content-type: text/html; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VP8hfQU5WgM2uZO1%2Bl4836uXsK7KXxTH5RedK45temGi7RrvlY9KbafO6FsRFPLWdftbIBedataCM%2BZ12IAX77IzuMI4fBgO5yiq1wVniwIxgy9hSY5r6bgfXsgYxDkFXAsI7BfIXPpNaw%3D%3D"}],"group":"cf-nel","max_age":604800}
cf-cache-status: DYNAMIC
vary: accept-encoding
content-encoding: br
cf-ray: 9479a56dedb8712b-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7323&min_rtt=2017&rtt_var=3277&sent=67&recv=88&lost=0&retrans=0&sent_bytes=6749&recv_bytes=5464&delivery_rate=358176&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=12000&unsent_bytes=0&cid=a3db13ab936897a1&ts=908&x=80"
|
|