{"report_id":"4a97251e-71b7-41ac-944e-ffc36941d302","version":6,"status":"done","tags":[],"date":"2025-11-03T23:57:28Z","url":{"schema":"http","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":0,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"title":"Watch movie Häxan 1922 on lookmovie2 in 1080p high definition","dom":{"size":7553,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"0c603fc9b3d79f3ca69e4d963a29fe80","sha1":"1bd344e60ebbd2254a06cbf0e74e7186e5996acf","sha256":"6ad84d28dfa2c6f4e0cd5b0266a76ab7d9677a326be19850e79a2e12812b42d3","sha512":"a3e94ac8db8dd9c8c4aaa97f31718c01b3242c28a00fa822a9265fef23c923dcef111d841a801ff1bd773f7ac05644108d12eed7dbedae364e3c6c6e1d6141f1","ssdeep":"192:BjK+QK9KyK03XK/KIqKI4Kn7KSKBKC3sKUKoNK8KGnKrKEKT3AKrKFpK+8h:o+tI/y6yekn+f8QZRtpGKuBjdu++8h","tlshash":"37f1ac90081a9400ab930cd273cf3e36ed4f51167146c8b6abfe68acede7d27925874d","dom_hash":"domhash08ae0081c1574fe7e013785c60b9d7d5","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":"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"}},"submit":{"url":{"schema":"http","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":0,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-08T23:57:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-11-02T22:12:55.494707Z","alert_count":0,"request_count":12,"received_data":273304,"sent_data":6396,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-11-02T22:15:46.374949Z","alert_count":0,"request_count":1,"received_data":199712,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"push-sdk.com","ip":{"addr":"23.88.8.123","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2022-10-25","domain_rank":36212,"first_seen":"2022-12-23T14:43:48Z","last_seen":"2025-11-03T19:15:13.753039Z","alert_count":0,"request_count":2,"received_data":55832,"sent_data":888,"comment":"","tags":null,"fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-11-02T22:15:49.745695Z","alert_count":0,"request_count":9,"received_data":4328192,"sent_data":4266,"comment":"","tags":null,"fingerprints":null},{"fqdn":"stats.lmofficial.to","ip":{"addr":"38.246.114.236","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":1617435,"first_seen":"2025-07-10T21:58:11.504027Z","last_seen":"2025-11-02T11:30:34.611828Z","alert_count":0,"request_count":3,"received_data":4891,"sent_data":1453,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-11-02T22:12:57.589972Z","alert_count":0,"request_count":3,"received_data":20132,"sent_data":1438,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-11-02T22:17:55.857863Z","alert_count":0,"request_count":1,"received_data":2921,"sent_data":515,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ww1.lookmovie.pn","ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"domain_registered":"unknown","domain_rank":126835,"first_seen":"2025-01-02T17:44:30Z","last_seen":"2025-11-02T11:30:34.512127Z","alert_count":34,"request_count":34,"received_data":8241380,"sent_data":39445,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"dl.opensubtitles.org","ip":{"addr":"104.26.7.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-12-03","domain_rank":1473355,"first_seen":"2014-11-05T12:01:51Z","last_seen":"2025-07-31T21:04:13.205744Z","alert_count":0,"request_count":1,"received_data":21648,"sent_data":549,"comment":"","tags":null,"fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.tolt.io","ip":{"addr":"18.208.242.28","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2022-03-14","domain_rank":0,"first_seen":"2022-12-27T20:33:22Z","last_seen":"2025-10-29T06:43:19.040461Z","alert_count":0,"request_count":2,"received_data":671,"sent_data":1077,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-11-02T22:13:19.243005Z","alert_count":0,"request_count":5,"received_data":101465,"sent_data":3337,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.opensubtitles.org","ip":{"addr":"104.26.7.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-12-03","domain_rank":3914329,"first_seen":"2014-12-29T23:56:46Z","last_seen":"2025-07-30T13:11:27.414308Z","alert_count":0,"request_count":1,"received_data":4406,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":[{"md5":"82ac36b23b1678fbc07f4ee768ad342f","sha1":"b1e1ba0e42d5a59965f2238629c6fe5fdea6bdab","sha256":"5668756063c42c4422c4778b9bee6e8a768b78bac30a45df8c3ab1f4b747064f","sha512":"035ed970d6e8a796f2b418e773e076402f201d7bc85589f4260ae9b5ea188ff3b80ee8eca4c360bb9d02f5be3f55263e86fc0e271d572451ab2078ce3d03258d","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","size":20132,"url":{"schema":"https","addr":"dl.opensubtitles.org/en/download/sub/12699218","fqdn":"dl.opensubtitles.org","domain":"opensubtitles.org","tld":"org"},"ip":{"addr":"104.26.7.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"archive":[{"path":"Haxan.AKA.Witchcraft.Through.the.Ages.1922.Criterion.720p.BluRay.x264-HANDJOB.srt","filename":"Haxan.AKA.Witchcraft.Through.the.Ages.1922.Criterion.720p.BluRay.x264-HANDJOB.srt","modified":"2025-11-04T00:57:12Z","Modified":"","magic":"SubRip, Non-ISO extended-ASCII text, with CRLF line terminators","size":43963,"md5":"ab4b03e8cd7678c3726e82c8c11eea8c","sha1":"ad8ee91b10053279d34b292529f40ccc0da1e344","sha256":"e0adc804d6c9d991ef1d216d09191d135750ad135981f5c135acd23dcce1c216","sha512":"812f83657db52c5542a8927988be54371080c7a0fc5c68197a5fc8a50f3cad05fd78f363efdacaca4d1f93fe6c4da6fd5d8b47c712ec715ae66c33e829d77c9f","alerts":{"urlquery":null,"analyzer":null}},{"path":"haxan.(12699218).nfo","filename":"haxan.(12699218).nfo","modified":"2025-11-04T00:57:12Z","Modified":"","magic":"Unicode text, UTF-8 text, with CRLF line terminators","size":6355,"md5":"52335a4318a08478d59754ea51262d89","sha1":"f1a2cb67011ba17edf811a3ef4774a08f81e05cb","sha256":"1de1d37f9ddd611131ac9daab4493817a3dd0eee2a84dc5378bf0ac3d90e5e8d","sha512":"f8421ae7598267af9e957eed3e419fd360180e05cf63700b49cbf3a4ab889922ed9eb54632e25fa93d5de25261c6d2a4f93815536f199f2debc95a0a2b7376b8","alerts":{"urlquery":null,"analyzer":null}}],"alerts":{"urlquery":null,"analyzer":null}}],"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"f818bf001461ff12202857dcf6aa11e5","sha1":"9d86bb2c19cdb2e46ce2e8aefd4d11a2d51284ac","sha256":"d9987f90a3c9852cc07d626d55af70ef8610199842107fdb2548c1dcaccffd2a","sha512":"3fe0ae631388477f9b12a6287fdb918b34f0d46c76c408f7c09a27ee23f02494f8795775991d0cb678249636d3a76ccf2e8a6d4f25b4416f0046fb27e47886e5","ssdeep":"","tlshash":"798000202008acfa28308338030222222822880032082a000208c08a2080c0ba8b02a0","size":27,"data":"","first_seen":"2025-11-03T23:57:41.115659Z","last_seen":"2026-04-11T16:24:47.198498Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"fa0d953b53e14571220e46a2909ccef5","sha1":"a39aebcfea2e358588f3ee07184d74621826fb52","sha256":"d26f0aaf761907f3d64d719545d8851cf7a73a5b92dc639c6160d0feaae09e8d","sha512":"f95ae5220b7add115112e1ff7bf1d01126dacafd1202be02a5720f1fe8b475c69cc338dcc4df7ab832712871db4d748cf5d409822511472f55d5641eb00aaceb","ssdeep":"","tlshash":"65a012c835d3a060c123313060e71e0e21013c921004c8049200e53424360226d4605c","size":82,"data":"","first_seen":"2024-08-22T17:16:37.4542Z","last_seen":"2026-04-11T16:24:47.217186Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=cLm1zuaUXPLFw7nzKiQTH1dX\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=bt5wozocy50p","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-04-13T13:13:15.283633Z","times_seen":396809,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=cLm1zuaUXPLFw7nzKiQTH1dX\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=bt5wozocy50p","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"01f03ab89155c721c4482b8b1f0fa83a","sha1":"7d0e3be8968c6385c6e5bef4e6c3e433a004a25c","sha256":"a720751052d90aa0142c798b154cf631c555e8501134c42360735a03d92ab76e","sha512":"6e939785e62d11fc4c6c8bd614750190709c8b1eadef0c68895e01503c258e5b6980a65cac53106ae4cfe0fea525c2780141c40d8e4a32b1aa977c33eedc4af7","ssdeep":"384:nXDk6vh67WoWE2u765luJnmjLU2cihJFnaeTbwo83yT:XDrqb7mjU8aeTTJ","tlshash":"7ac2b6c9fa52f06841e2f1b1486b145de9bb7d41e908249cf112cbe4af34a49913bf6f","size":26171,"data":"","first_seen":"2025-11-03T23:57:41.118187Z","last_seen":"2025-11-03T23:57:41.118187Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=cLm1zuaUXPLFw7nzKiQTH1dX\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=bt5wozocy50p","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7eb960afa922a8d7071f745c15d13d1e","sha1":"649bf3ece3c30bcb634115dc40bc5884f654c4ee","sha256":"e7d66ca3da2c55f1573ac249f1074a0261b352d9ddc91f27e2043e0ba0295cdd","sha512":"f4706ddcd4c8a9b7605b00357b247be9f7982a8f0675557564f51f90adc4f048eab9d6a71f210703e43d9c6b180bad2e1b8a37fbdc33df9593146e81ff35a3a7","ssdeep":"384:PXDk6vh67WoCE2u765luJnmjLU2cihJFnaeTbwo83yj:fDrQb7mjU8aeTTl","tlshash":"4782b6c9ba52f06841e2f1b1487b145dd9bb7d41a908249cf112cbe4af34a49923ff6f","size":19017,"data":"","first_seen":"2025-10-31T07:09:56.702435Z","last_seen":"2025-11-07T12:04:38.31817Z","times_seen":1624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"1d217358096897860dbb4aa14a42027e","sha1":"4a6af61ca3522a1ffcda6a6271d5866b45a7989b","sha256":"f5bc2b20b66bccf19a723df33fb16e348e70a412e04414d215c47c812a6af899","sha512":"159b4c7b842c38dd3d5662538b0c925e99e08af23451ecff8ce5faf80a2071d9849bffd42479e136f48084f9f25539b8fad2a55c1dbe9d84fcb82a20cbcd4b48","ssdeep":"","tlshash":"d301495e2353b23512bb31caa717910c18728153a240c08cb78c572a8f76fafd6df689","size":827,"data":"","first_seen":"2025-06-30T14:55:15.070627Z","last_seen":"2026-04-11T16:24:47.220778Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"48954dc8be88b726a424044a9ae05901","sha1":"ac67d7a35ec26ce796c7ef9773ef550096617164","sha256":"1fc289548c6f38f8c94ce92a6040332026937ee535e8c8b6147ecfed68654394","sha512":"87128ba9dd2c70e0f9a1446240a4c61d16ec122d766a2e3b165cb0b0b6bf5469bf347a0006a559e8b36a2d3f57d5f9df780022c2dce2e120999e9d2fa6e3556e","ssdeep":"","tlshash":"14a002c43dda6092d6b335b074f71e47715e78e46006cc50a618f5a43ab32327daa5bd","size":70,"data":"","first_seen":"2025-11-03T23:57:41.120795Z","last_seen":"2026-04-11T16:24:47.210127Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"0edc749e7f9defd60ef57960de2450fc","sha1":"81c75f69a963549b73b44fedcb4b57a6d78311aa","sha256":"9558c4a5446f7f2098fc5838589c650e96763a2ac277f20c4f6e4111a02e7d57","sha512":"fb312a46c14f225945916a98d186ea8d30fc91f502bffa005507ea3dc45446d749f674863178e1c952ed55ad330978e9eea826949e5b79fd508b3b9017865d39","ssdeep":"","tlshash":"e6b0128639c29150c11b3130b5a70c07302125d20001c9905268f9203572071299119f","size":88,"data":"","first_seen":"2025-11-03T23:57:41.121872Z","last_seen":"2026-04-11T16:24:47.194937Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"d09af5ed8d7ec5f55b4e0249af667445","sha1":"fada14cdf5fe52257afc9cb444adf9d61e23503c","sha256":"bb50ac5f29b09be144b87ce9484971ec42168b2d6222814f173df8d233eaa74d","sha512":"a17d3cf4a089f218f94128c4a72e50fbaacbbe9cc9c1fb7ee2151af6c00fed96d117bccd0175f54868194918f837ca955938b752e7804d978a254bc44e0facec","ssdeep":"","tlshash":"fca012c03cc36001c653343024971c02100524952017c8006310e0623b630213d061d9","size":81,"data":"","first_seen":"2024-08-22T17:16:37.504644Z","last_seen":"2026-04-11T16:24:47.23163Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"5d592ebd1387a06bacfd4516914c8c96","sha1":"439677d15d9f72ad1a655c5e5f28d9a510878f33","sha256":"770ae751ad2a2cdd47837cf7e64e7aa4dd4258d5253a6cb1d205488669d10aea","sha512":"9a44a08ef93795fdd1ca00bd45390fc187a5c7b4c33632201c32f2adff6547943556066bda7069c507cbddb84b432e4e1b039de64f90f1752be4323e6dd39e12","ssdeep":"","tlshash":"15a0128c3ed69060c12732f530e30d0650431ce040048d086100f16c3432033e84606c","size":86,"data":"","first_seen":"2024-08-22T17:16:37.475793Z","last_seen":"2026-04-11T16:24:47.229715Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"bc5ac4a3b94ca9e31f02e2a587a6479f","sha1":"251a38b7881fa6492a5f69e214f26eb2bcc3e078","sha256":"82738a0e44614f31fe2012ee31e239f5e5b592a8eb472e72e4f337409f58b8da","sha512":"fe18c34a06655906d62bbc5d8eeeaae93635db716e5fb88306a36f8f832bbcae3bbb986cae35c39ea2224e262ce38b91d2ac63e362aa4ba33b84043c208a346c","ssdeep":"","tlshash":"63f059b78890aeef047ba119020f1102729804477c18fa347f5d75562f1db0ec6b01c1","size":583,"data":"","first_seen":"2025-11-03T23:57:41.124563Z","last_seen":"2025-11-03T23:57:41.124563Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"9070600a080aed4dcf9fe841329582ec","sha1":"2a7cc7498a081299f52c0fb18894377c72187e1a","sha256":"393a62e283f56b0c0429149a6a73874adb63d4c51374b6a175f627305c6ba19f","sha512":"26701dee661c2f36b185b6a2a6f721640b515a0dfc4081c307d3c50b9ce5e2ee69e11dfaa959c7e251a89cf12614b8f9a90d5f4e8b3fb1e8ef6f18cb298eee7b","ssdeep":"","tlshash":"0fa012c03cd39011ca13343020b71c02a10124d56002d8406210e0613a630223d410da","size":83,"data":"","first_seen":"2024-08-22T17:16:37.447912Z","last_seen":"2026-04-11T16:24:47.230583Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/assets/player-d133adc282369337d344769c90f63f74.js","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"d133adc282369337d344769c90f63f74","sha1":"ed3fa6697b288c9f0d495d15fa094024146113b0","sha256":"7388eef645f6ddf050af54aea56f70f487471fa8724c2ee9f682184ed60fba35","sha512":"6c914619e4f48f7ba4c33c0592cd603a96a712d4249310ef05352b986a8a2b627da899f1392b7c0fe869035a73a9d5dad1019cb7d8352f989a67d3f388cb7483","ssdeep":"24576:x7fqHQgQ2ZHYzfuEMZERpPxzzo7uafROgeKs:xbqHQgQ2NCUZERpPxzzo7uaZOgeKs","tlshash":"c8254cd87292b06247e7b0b5903f120bb33b99696408c05cf529e9d93db8e4d917bf78","size":966083,"data":"","first_seen":"2025-11-03T23:57:41.09178Z","last_seen":"2025-11-03T23:57:41.09178Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"7610dc44725f68ea471b9a2f31540030","sha1":"8816f06f2355a6551fc19cb41fa5e655f66f30ca","sha256":"3c9f7e344dc1046c8cb45e5ab0c9eca1f606b7a3c63745b5e6be7ea26cbb3106","sha512":"74acd083be82181bd42bd5752f094441ea9783feaa1fe486572b3bac1808f4e976dccb909d1028dd45e4b064757effc204a9184e47a84b6358b806030f9bf347","ssdeep":"","tlshash":"2e71bc7099a954364273acd863e82b0b71e7d21dca93120a93fdcb514ffadc3e813654","size":3644,"data":"","first_seen":"2025-11-03T23:57:41.125959Z","last_seen":"2025-11-03T23:57:41.125959Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/assets/vendor-24ed5e5a3f933dd90aaca8fb28a5f615.js","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"24ed5e5a3f933dd90aaca8fb28a5f615","sha1":"aa7d3884928c571b363631d7ad575e64c8aa42b3","sha256":"6688d65430a12167920da2f05aca9769087529d2ec7db7a72f5498bbbdc0faa8","sha512":"ac894e208f4461c29308d10ba5df7f9092baae96423df9536ebe16998ff2d953651d424cabfe8c6c73bea3484920b50b875bebeaa538decba6066bda2dee91f3","ssdeep":"1536:NITMFC4dbMVRSGcgRDdUsY7qfIDMIL2u0lgK44R82g9p5q2lMVkxPDs4g2ib8vGH:NVbmwpcPYegDM62uqiq2wkxL+2ibaGea","tlshash":"4cf328997255782653eb21f1113f150bb23b2919e80980acb536e4ee7cb9c4c217bfbd","size":161310,"data":"","first_seen":"2024-08-22T17:16:37.457423Z","last_seen":"2026-04-11T16:24:47.174029Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"2e3344b3f3372cf2733035add774febc","sha1":"ae99fa372129f7e38cefc1a0ecd31a1628b3f97f","sha256":"96e58a609258b2b00615ee7b6e4bf4631e23911612645291fc889ab40f9dc90e","sha512":"f3be814019410763b7c4e35dd17d20d239210286800f3253ec9ae17fbb41da367190ee1b8291878cc32a5c5244c05b9c213549b653ac47e7be3508c1122fc893","ssdeep":"","tlshash":"12b0128b39c2a040c1173130b5971c02302125e10054ca806344f93435320b128c51df","size":89,"data":"","first_seen":"2025-11-03T23:57:41.126948Z","last_seen":"2026-04-11T16:24:47.247832Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/cLm1zuaUXPLFw7nzKiQTH1dX/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"07bd9db323e20c5712464eae395c4bbe","sha1":"ac8fec5c3ef6987c9bba9ec707575c133dc32876","sha256":"58e16769fc5ea29486677fff7b25f0acd26e0077ef0e0d0a1c5c56545bc7b77a","sha512":"c840b50405fd4d0c82ccff537be49125cdc04674237f1945e8963c276dba99bb39b275d952f5033a7ea3978af474d3a56e932709673d00b973454102489dcef1","ssdeep":"6144:KmRDQSxp9xWrL3fe2ioyvWCbhjXapYaqqPeGfFrFVCk6y27CKIRIR8LzWpKofGnZ:d9Q49YrL3feq2sFVUCTI6EKofqnZ","tlshash":"d50519dcb5427b619332bdf160671068673e9a56c458096db2d8c4f43eb8809b2a3ff7","size":829613,"data":"","first_seen":"2025-10-29T09:05:47.950022Z","last_seen":"2026-04-06T09:30:25.517807Z","times_seen":13349,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"a0de6150da8e7a6bf4c68c0acc0b16e4","sha1":"1aa10e503706aa58c6c1811f40bd38a95186372c","sha256":"038146ae6b7e521cc6f023c3c8a8b96a64e32547dbf3b81b87baaec2ce99ac52","sha512":"029770160cbf9c3bfd688b641b98c83967f96312c0649c98fe7da2e32a398da4546ce7f96941195df2e94f4db03a551939891935a83d22fc817894ce8928c4dd","ssdeep":"","tlshash":"ca21cc9aee3255319137518e63cf52593d10113b7041e9787afcc7082fe0b9527a078e","size":1253,"data":"","first_seen":"2025-11-03T23:57:41.127916Z","last_seen":"2025-11-03T23:57:41.127916Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=cLm1zuaUXPLFw7nzKiQTH1dX\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026bft=0dAFcWeA4fGXA6JKvgKv8XX-0g36zoZ45H86IO8lPGdXiCK-zJxRbaLWyCg0DynM2Q64B4W_QQy5eH4t4NUejTlP-vtj-WvzuPXA","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-04-13T13:13:15.283633Z","times_seen":396809,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.opensubtitles.org/libs/js/lm-os.js?v3","fqdn":"static.opensubtitles.org","domain":"opensubtitles.org","tld":"org"},"ip":{"addr":"104.26.7.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"21798ba897ff2db29e218bd9e284998b","sha1":"27a4e2d3735db1f3c6f80d74fc50ae30b056a5ce","sha256":"cb9e2654f0928d5a3afa2823687fac121dccf82a9ae6cca50a58aaff014fd65c","sha512":"fc38cb6e0a4aaa63f9b02ae0d0304b38bd2a3d177fb5c5a1b4a208e1461fcf6185a5df78a697efba12fc59549d5c2a44682d894ee4a83faa15aece0ed6ba9402","ssdeep":"","tlshash":"3a71631489730b301c9352f1f7ee3b5aa6b60123bd8ac951be9d8b8c5fd0a24c5133ca","size":3542,"data":"","first_seen":"2025-11-03T23:57:41.099212Z","last_seen":"2025-11-03T23:57:41.099212Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/assets/aa199fce/jquery.js","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"23c7c5d2d1317508e807a6c7f777d6ed","sha1":"ad16c4a132ad2a03b4951185fed46d55397b5e88","sha256":"416a3b2c3bf16d64f6b5b6d0f7b079df2267614dd6847fc2f3271b4409233c37","sha512":"58d2f17cfffc71560bf6c8fc267a7a7add0192e6cb3f7d638531bdbe12ff179b84666839c04ccaa17a75909b25ccf416c0f4f57b23224b194a0a0cc72ce4ce4d","ssdeep":"6144:pJChNVls+TCtlFhTzeKR7cYmD2zK8EAbEtPx+WI+Y7cFyW48L/dyVxNaIPfytrAP:xf7cYmD43APx+WI+Y7cFyMyDTPfCAeuH","tlshash":"2354a4d9f78d112e423231aaac2f12cdb77cd171560458aebd4d597c24a083d83baf7a","size":287630,"data":"","first_seen":"2023-03-07T01:03:32Z","last_seen":"2026-04-13T13:20:27.661672Z","times_seen":7964,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"dc472ed2bf1a47eb7abd157226fcee9d","sha1":"91ca7738571953ed611ff75165a6c21b7d320573","sha256":"0f1b91a3ed0b4dc95f3b44d0936864b92edc33408d8ea2499cfe5fb2664f2e60","sha512":"fe3aeb7aa471458480234351b2a0a9e8f31ef76f60cdee591d561a767de2d40044fb0e49cfd3ebcca2a43303391650f9db832d16ef84610c2ed199ab44a92031","ssdeep":"","tlshash":"fba012803ce51141c193303020f30d43301424d0101588005104f85039630316c150bc","size":74,"data":"","first_seen":"2025-11-03T23:57:41.128948Z","last_seen":"2026-04-11T16:24:47.211949Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ley5moUAAAAAJxloiuF--u_uS28aYUj-0E6tSfZ\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=cLm1zuaUXPLFw7nzKiQTH1dX\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=6xpnpamaq1nk","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"68302322987585e23fe67bc3771a2a1e","sha1":"9096351bf350e1c82f85c405c2df05bcc46b5634","sha256":"c7091320443cf15cd57f975a93bddde3bb2df0a511acd5f15a383aabfa2d7ac6","sha512":"9821ffec24fc07f4713892a14fb58fb622bf7618b3356f6486572895cf98e4f2348a7e73988f8ac182edf6482f928d6f2f1c3e4e43bc96a557dc619b05b0bb0e","ssdeep":"","tlshash":"3ad0a7eb1442cdf7cda0ddbb9743d1a678efd1b780a981f425e04ca22ee1c9510285ec","size":264,"data":"","first_seen":"2025-03-02T22:52:05.537345Z","last_seen":"2026-04-13T12:26:18.830878Z","times_seen":5765,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=cLm1zuaUXPLFw7nzKiQTH1dX\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=bt5wozocy50p","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"aa1026037cbf953dca382b237cb600bd","sha1":"e70be776ce46de72bde55df797e1f269cddfda65","sha256":"d1e68b779e2d04d6418f39c58fa0c1a6285696318b584d20effd26228141f4b2","sha512":"0cfc80d34d957d8e14e23aece9eaea21cb9ea39f77908c4e2609da92eac50fce0811f56349c11034ca4071ea9600b5cc0eb39f0118b10147f278547e4790501d","ssdeep":"","tlshash":"06a002941e67f57c492ef1afe2573188c66650c016abdc5098828fc06f7534dd262815","size":62,"data":"","first_seen":"2025-10-31T07:09:56.708719Z","last_seen":"2025-11-07T12:04:38.322888Z","times_seen":1626,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"f86dc1b8d5c64b41b02349bb863b4d42","sha1":"040033ede6be8f0a296e87e1f4757d4f61ad9aeb","sha256":"c7bae5de322c2a8d6a2138ed8269dbd0db2ae088729e973e68491e6b836ea2de","sha512":"28192ad9372c30ba7bb1a62b2ff237d8259fa6d5c66cdbe08387476561cef39c6606b9e2bfe3d224da66691e5447abcb01791e0bd07b3db2c607fb021c247fb2","ssdeep":"","tlshash":"8aa022c038e22000e22332b030eb2c0328002ce08000cc00b300f02038f3032bc0a0bc","size":69,"data":"","first_seen":"2025-11-03T23:57:41.130871Z","last_seen":"2026-04-11T16:24:47.253899Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"83949792573762da733fca28039776d4","sha1":"9d4f9f81151715cd7c1d66eb689cf29a9d73c4d3","sha256":"ec015db7ec0d21efcf679d129241c125b9e5aa4db8accf192e8bf91a4a35086f","sha512":"f2024df4934d3228dfe0681c5c32f3e48499159e9401d22987e2a5eec222eb090cf46e3474ffdc9fca478be17155712b71ef1bd18e9fdf4b325c46bec83a075f","ssdeep":"","tlshash":"b6a00184beda6152d2b33670a0e72c9ba15568a461088841a208f5692ab28326da66a9","size":71,"data":"","first_seen":"2024-08-22T17:16:37.471808Z","last_seen":"2026-04-11T16:24:47.223258Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"affa360e73137fb1ee43ad264bf63bc7","sha1":"8627025344da4613f2f2bb3b1d8e773ba5e59e88","sha256":"df1c2d17635247d7bbb0d70c2b1a5625dc69999c70da45afac1accabf2a17617","sha512":"dc49dcc82864701c47a13bedc5e14c3072636b221eb8138eabea0cb99cc069daef5c2ba407b4aa103cc6ef21c06901fbf84e36d1b38ea1614b77bd6b8b2fc2b6","ssdeep":"","tlshash":"fca002c57bd66462c263357070eb1c676155bce49018cc40a304f4653973032ad569ed","size":64,"data":"","first_seen":"2025-11-03T23:57:41.132319Z","last_seen":"2026-04-11T16:24:47.250693Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"60fd7c655978c83fb3b3b5ccee2dce31","sha1":"2288f7b3eaca65179ada633a68280e69e22088a6","sha256":"b93f16c03122f4a171d27237fdd8deb5a2c610fcf87bd3b33c7fc65bb0232f20","sha512":"b6c45f97b27f36c7d6fda5e3026178c633a6bde2d275344a5aa036a00ca332ddfb8418f0dd1c2d990fed074ff254b16c5c549ffb473045ca434a437d8e6e658d","ssdeep":"","tlshash":"5ab09bca74b3da00d11b353050ef0802552024b745a45c445220d4d4697603164529af","size":121,"data":"","first_seen":"2025-11-03T23:57:41.133085Z","last_seen":"2026-04-11T16:24:47.203055Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"4dda1e53380dea56285e3c9c6e925ed5","sha1":"9da3b2d2ef6e33d1931bf0356ba6b7b4345b77aa","sha256":"6f67115c565e435d0cc9081ee6f4f9dd825ce11a10f0cc2d8dc99fa84bc8c03e","sha512":"889fdd7bf30b6e64878a25ace3e73cb4953e8335f40b9c855af1a738ad3d4f9c92f9d060ede7daf08a16768936a365be379ec4d5ff255cad910e510c8a2187f4","ssdeep":"","tlshash":"dba0128434c65040c623313030935c02111524d02830d8405310f41534324213841098","size":75,"data":"","first_seen":"2024-08-22T17:16:37.471839Z","last_seen":"2026-04-11T16:24:47.216326Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"4b13ebd7bca52812272ffa228e093ade","sha1":"f0250050e4248adf3aaefee1a5937bad368c7482","sha256":"abb639a76534d6716ee636e46119116312a6cb51652eba1c71ba1ad1f1e13705","sha512":"2f88eeef220b6b360ac822f7a294a2e2299d86335e8ab9f654cb6e22df9f090f07b2e312cd97fbd6a3c7729716fbca78b982f615c6bc44087b97e6e3c9002e59","ssdeep":"","tlshash":"e1a012c03cc75051c513303031975c12100124952412c8006310e43736730213d011d9","size":81,"data":"","first_seen":"2024-08-22T17:16:37.487763Z","last_seen":"2026-04-11T16:24:47.200396Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"81cd056d560e92e39bf54a2dd4554ae0","sha1":"66feccb041d079db4652d95e996e500a0bcffa26","sha256":"3945aa927ee4ef00ed56b17c35b0f45e3c38d8b45ff36b7e28d3f510cc326be1","sha512":"79b9cb32a27c593f7690517fd8551c0ba4c60a8a05bef57bf06c579206c2799f90e9fad260c4216382c96982dbd7a02be88869201d8a637ecaa51ed588e0107a","ssdeep":"","tlshash":"f8f0591f6a97186513b7e5766b0f3b523b234117d00acc957e3e86446fc422736b07da","size":645,"data":"","first_seen":"2025-06-30T14:55:15.089743Z","last_seen":"2025-11-09T16:43:17.887618Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=cLm1zuaUXPLFw7nzKiQTH1dX\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=bt5wozocy50p","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3ef004093bef1e316086326204ef8670","sha1":"300dc36078711b8a520613936d6c36bae9c2bcff","sha256":"4e4b95d70052e0aba3b397faf7dd2960b7ea35c56494e253531ae764ca9de8de","sha512":"76e8d15a2d0e6f58493bcb745dd591bfc2dc0a8606afb5d483fcdcbbd7c1a79cea6f9ab46e8845954b0159f1a69eb3dae347e53992d8e12703b224d4ef528994","ssdeep":"","tlshash":"2870000c2c0a200e002a382000cf0088a02200000008a02020000e800e3028a3282808","size":22,"data":"","first_seen":"2025-10-31T07:09:56.703639Z","last_seen":"2025-11-07T12:04:38.308458Z","times_seen":1625,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=cLm1zuaUXPLFw7nzKiQTH1dX\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=bt5wozocy50p","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a4232702d3e722a86501033deff9ed92","sha1":"04747ceadc582934605427c78d4022ed8fbad85a","sha256":"14d6d3ba19766c3e2a5bfd9c2a30286a1e6271ce184936afa0d7a842bfe905ab","sha512":"e9e5c26a7b25d6cdcaeb313a7910e4f261298b6d12cd344047330db0bf2f5ab3d72ef074348754e1dcaf31e8d2cf6133de0c356d444651bca4fa4bd33c9cd4fe","ssdeep":"1536:c/N89wEcFicULSCTt17Ij4aTBx75E1V0LdclTjOqySq2/1+VO+3iUt1L3TXVO:nOFbqLt1I8aTBxtACAT2Sr1+5SUtFxO","tlshash":"7c63b02ba35338abde7e8b519be2fbde027d105a246304de16ab01c10e6ddd6579c1cc","size":71536,"data":"","first_seen":"2025-11-03T23:57:41.138046Z","last_seen":"2025-11-03T23:57:41.138046Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"137407b5bc9df5ace69c34b0b6aa1dc8","sha1":"7f7ab94980aca80eafa65dac8a1a2b0961f3dd1d","sha256":"ff70ba56a6ce3dfdf16238faea94793b4ec44d6d6e8cc0636f164d347795b080","sha512":"19ab0833a8a342ab97811b0bde2bab7911562792477da137d517e1c391e68b8533dec60a36d7983223c1dd0a3158d9a72ed5dd3ef3bbf8052067d496a2f5f083","ssdeep":"","tlshash":"4ca0118038e2a020cb233230a0b32c02a00a28e02020a880a220f0a0383202238820aa","size":77,"data":"","first_seen":"2024-08-22T17:16:37.478119Z","last_seen":"2026-04-11T16:24:47.185931Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"657494e5d87a3ffae287ad7fc9c5dbe4","sha1":"64fed82d3edc234363fe7f6161e19419424bf4d7","sha256":"a9dc999897c92ad77304144e7134f4cad2a64ed8bde6c49b2d0f7cc55d7e765e","sha512":"a74c82ae33f0bfc4fa7e8aaa0eb412989db0283be8147e60b0fa903e81e86e0c32ee91c185319920e19a8059842601681d3f0f40dcd36b4856c0a372ccf84eb8","ssdeep":"","tlshash":"43b092cd3493e920c123313020ef1d0a221138a350989c485200e4a4a876022a94659f","size":102,"data":"","first_seen":"2025-11-03T23:57:41.139498Z","last_seen":"2026-04-11T16:24:47.227523Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"83a37f593aacdca8c9010f83b9ce9477","sha1":"d2c6e442e5301f7f6c13b16ca153089d77697097","sha256":"6f45d5b317550b683da3719d23ece5130eee61a0fda5a0c614e6b7e365573733","sha512":"25067bbc61043ac6ccee48bd7a89d1e5d02ab20a64339bd1213e6a9d428839008ef40de0cb0c6a795d419ee04fd35d7ff72653b6d4291e7be6e03cb323db6a56","ssdeep":"","tlshash":"23b012c57ee35002c123f03020bb0c075681199401008802b214e01d7972031795106b","size":88,"data":"","first_seen":"2025-11-03T23:57:41.140266Z","last_seen":"2025-11-03T23:57:41.140266Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/cv/js/sender/v1/cast_sender.js?loadCastFramework=1","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b427175fa1078775eb792756e7b6d1e7","sha1":"4c55c0233d3d9002b3449c025f97821f8bb8900d","sha256":"ee147e859ad0f09aa50367974e38ab53e7c7054c4a51d400a7f45b0eb251454f","sha512":"af8d384188363378bc99c2e51523e74e1d18ba77d51bff7647a377a117499421f9e94477e09907925e46dad0a908b799a616d0b4855ffff064ba6350815063d3","ssdeep":"96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2","tlshash":"d191c68d7a70f4328aa138b6283f964ae37b50b5f4d4f0d5508ccce45a78e4a4726f6d","size":4272,"data":"","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-04-13T11:12:55.813298Z","times_seen":9027,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"694e56e274d4cfe805d5a3451cbdddea","sha1":"85e4f5f2b809f82dcf75a5ea23d74e1df8705be0","sha256":"e6c5120451f63f2f3f32a5d694da778fbb959eea49f87d7e9e519a152b4a787e","sha512":"51f75cbdaa817c015dab8b31ee4e41cdde447ca7e50b11505ddd9ba31c25e9566c8e0270591fbdc13060e946d76eb7b5f7d10c29aa12846c923772cd3415eecf","ssdeep":"","tlshash":"c9f0e1f328f164174ad803e9238f3f03579690272c903186c04ccc3c18745bd5290478","size":551,"data":"","first_seen":"2025-11-03T23:57:41.141013Z","last_seen":"2026-04-11T16:24:47.242465Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"529cb6a629864b4319dc53d3f68238b9","sha1":"e9ea9360134e87e9e822d6f5120c31f88db5f7e3","sha256":"2d1973adaa4bf544a889cb5108e318b69e5e995ff07c6e0eead3448279bc3cdf","sha512":"b39c03f130b8fbd6457b1e888f9cef43592f92643921e1b30940b9b2dc93a484ed099fa9ef61e5caabd73c0e5ed41853ecf69dd24df73cdde42b64889860eabb","ssdeep":"","tlshash":"69b012883dd29050cb333170b0b71c07e4937ae010009844a350f05028f3a3278564f9","size":96,"data":"","first_seen":"2024-08-22T17:16:37.484004Z","last_seen":"2026-04-11T16:24:47.196853Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/cLm1zuaUXPLFw7nzKiQTH1dX/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"07bd9db323e20c5712464eae395c4bbe","sha1":"ac8fec5c3ef6987c9bba9ec707575c133dc32876","sha256":"58e16769fc5ea29486677fff7b25f0acd26e0077ef0e0d0a1c5c56545bc7b77a","sha512":"c840b50405fd4d0c82ccff537be49125cdc04674237f1945e8963c276dba99bb39b275d952f5033a7ea3978af474d3a56e932709673d00b973454102489dcef1","ssdeep":"6144:KmRDQSxp9xWrL3fe2ioyvWCbhjXapYaqqPeGfFrFVCk6y27CKIRIR8LzWpKofGnZ:d9Q49YrL3feq2sFVUCTI6EKofqnZ","tlshash":"d50519dcb5427b619332bdf160671068673e9a56c458096db2d8c4f43eb8809b2a3ff7","size":829613,"data":"","first_seen":"2025-10-29T09:05:47.950022Z","last_seen":"2026-04-06T09:30:25.517807Z","times_seen":13349,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"94ce5edf0ed10906979780bfc5e4c5dd","sha1":"e9148a65c313f1dac98836fa8fd8a549ce932edb","sha256":"6e2b274161965d1c928ed5c748c29f505a07ef78fc946c0ee6f94affbef5a67c","sha512":"a625e830d4c4037c6ef921db15890da21c4e38c16988af157776f63621f3a124589b724afa245b7d45d7001266c5cb115bd6bed67d7fbdabd73968d015611e21","ssdeep":"","tlshash":"aea002c439d67055e26336b070fb1d47615668e45004cd40a204f4a439b34327d5e5ad","size":61,"data":"","first_seen":"2023-10-22T10:22:02Z","last_seen":"2026-04-13T12:55:55.208538Z","times_seen":189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"2942091db5b6f042c323cc35ff3b602a","sha1":"21cff4245bb79dec00fd587eb9636885b353c43d","sha256":"deebbeae283beba2fb8f452e22bc5cc64523fd3fe7b8e2279b8661245d47ef1a","sha512":"5cf8fe540742c98f39d840958ac160c364f7512885fe1e886735628ceab10a7a19f06f37b487ccec278149b15f972d76ec7372d23e5052fd3033dc17824359dc","ssdeep":"","tlshash":"fdb0128c3fea6020c12733b570f34d0610421ca000048d087110f0bc2472033e8460bc","size":90,"data":"","first_seen":"2025-11-03T23:57:41.14304Z","last_seen":"2026-04-11T16:24:47.206053Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"56f242d2d50c7edf224afc8d502e93df","sha1":"fe02bd4ae6a23ab48491327573bd2d0cbb303aee","sha256":"08784ad3c47fa299b0c95e7bfa0959dcf17cb362909e562f05b886425c90ce21","sha512":"6a95c8e766f091ed7c8031934c665c5200a5c438e8a3f51c6223b393152a27d4b1aa78dc782ad993843633ec088b4dcb53f85443144197e2e4fd7a4911f38741","ssdeep":"","tlshash":"0ba012c03cc75002c523303030972c02104224d53002c800a304e03677670313d013e9","size":83,"data":"","first_seen":"2024-08-22T17:16:37.48118Z","last_seen":"2026-04-11T16:24:47.241465Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"c30df127f42c787d9e7ff0b64c78a63d","sha1":"66d8ab00834abc63de4e087901c5e9605a46ef48","sha256":"d6e7baba06337dda71daa6d58997440bf55000342d688d928c1b9056f2f0c453","sha512":"9c29f3f1b09bab595a128a3189d1642f84c06b007ac7ace32b49dea975fc7a9ffe205c65560feb52b1c08bd23912f1286db3f8b090c22fd2fcbc773f163eb7ff","ssdeep":"","tlshash":"40a011883ee22080c2233a30a0e30c0ba00028a020008800a200fa2a2ab283228820a8","size":72,"data":"","first_seen":"2024-03-03T01:28:36Z","last_seen":"2026-04-11T16:24:47.197728Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=cLm1zuaUXPLFw7nzKiQTH1dX\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=bt5wozocy50p","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1b854dc374ef1f177c8b3b55e5e155a1","sha1":"2297c2e861681da5f4eb728508922de3f6acadf3","sha256":"2a07c9d5eea4bdae0e6620396bfda0322748d6a11e2dde032f7d1602a45164a8","sha512":"7843d09c106ee63179b5f1cf0bfcaef596043540cd8fd02cad9af444ef89b8003065ddcf370760540d3263332e9941ae7d3b16a3c70de78f9c234d18bac89296","ssdeep":"","tlshash":"a870000c2c0a200a002a3820000f008880220000000c8c0080008ec00e3028a328280a","size":22,"data":"","first_seen":"2025-10-31T07:09:56.706127Z","last_seen":"2025-11-07T12:04:38.30354Z","times_seen":1626,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/cLm1zuaUXPLFw7nzKiQTH1dX/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"07bd9db323e20c5712464eae395c4bbe","sha1":"ac8fec5c3ef6987c9bba9ec707575c133dc32876","sha256":"58e16769fc5ea29486677fff7b25f0acd26e0077ef0e0d0a1c5c56545bc7b77a","sha512":"c840b50405fd4d0c82ccff537be49125cdc04674237f1945e8963c276dba99bb39b275d952f5033a7ea3978af474d3a56e932709673d00b973454102489dcef1","ssdeep":"6144:KmRDQSxp9xWrL3fe2ioyvWCbhjXapYaqqPeGfFrFVCk6y27CKIRIR8LzWpKofGnZ:d9Q49YrL3feq2sFVUCTI6EKofqnZ","tlshash":"d50519dcb5427b619332bdf160671068673e9a56c458096db2d8c4f43eb8809b2a3ff7","size":829613,"data":"","first_seen":"2025-10-29T09:05:47.950022Z","last_seen":"2026-04-06T09:30:25.517807Z","times_seen":13349,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"d7651e42b78859920523c40f8f65cb9d","sha1":"fafb356dee7056f8982db09914b0d2d586385652","sha256":"83f50131c8374264c982de07efce08919e85cf8720e05e22e02fc69d5e53756b","sha512":"29451a7e54a638c8ad20cd3d91a1653e7c65edaaab586936e09417b41229eea126cc2692e1379eb4a146ddf2d4967212d47f1744a1f797dbca25ad2c818dc0e7","ssdeep":"","tlshash":"c0d022db900c6de1868320abc82d8b4c60ae2c28f9f0d0c0f40088d9c00113d5e57048","size":199,"data":"","first_seen":"2025-11-03T23:57:41.146003Z","last_seen":"2025-11-03T23:57:41.146003Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"4a18a80d67e4f8e5fdf6d9ac13ec1fb0","sha1":"ebccb8f868acd02ffc519d1b2b111fa184a41335","sha256":"7e9e4757b46b0ed8af0c15528ffffad877ea933e738ec1377fc55480f582b24e","sha512":"b6853c50abbbf5e2b3c570b3d68d5fbefcfdb61804ef241b5f165c013cd04a6db71e9c44e0425956d98b121aaee7c3bc463303f44d081d1302016585c2751da5","ssdeep":"","tlshash":"b4b092c5bbda54519a6b35b632e31c6ba03618d480048c51a284ec602426062690b5ad","size":111,"data":"","first_seen":"2025-11-03T23:57:41.14679Z","last_seen":"2026-04-11T16:24:47.201195Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"904ab8f26a773d315572381f78e7906f","sha1":"cce0474ccab6ce7fb499bcb754ecc3099bb92812","sha256":"01fb103342a7852fb43a588089af0dcf028fb8f4ecd8f3705b16f642d31972bb","sha512":"95700f23e5dbe6a8116bf670c23b159d5dab7811c52fe441f874b96d58230c9a99d2b2293122e8a4a606dcc069a7a0e5f42737716654b371f3b80fe7804fa69b","ssdeep":"","tlshash":"ecb0128c3dc75080c633317070a75c1755a37aa01800d8449350f41624f3e3178564f8","size":94,"data":"","first_seen":"2024-08-22T17:16:37.465761Z","last_seen":"2026-04-11T16:24:47.208471Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/assets/all-0614c871395387fa5845ae0c2131b88e.js","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"0614c871395387fa5845ae0c2131b88e","sha1":"6ce65884513574b835a679b5a174793b88d65002","sha256":"ce8c3e04e41f3ba5268db075d10f3b1f72b820e5edaa99359640d12746ac94f3","sha512":"b7f83faa492df7eba24804398bca5887962fa6462da08d45498eb642267716b3f27217cc07e7e56edb6dffe7faf85d6447fe60ace503a8bb05fcdbaaf100607a","ssdeep":"6144:ay8G6RujcHX6MQ47GKG4++ARXcZsd000iYP4PO4ILXmZbtTXp4HDi:aywRuI36R+ARsZsd000iYaO4IohXp4H2","tlshash":"5b34e8dcb2a5b071526771b5503f120bb33b187aa80c9464f179e8e17db8989827bf3d","size":241225,"data":"","first_seen":"2025-11-02T11:30:38.203169Z","last_seen":"2025-11-09T16:43:17.83747Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/cLm1zuaUXPLFw7nzKiQTH1dX/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"07bd9db323e20c5712464eae395c4bbe","sha1":"ac8fec5c3ef6987c9bba9ec707575c133dc32876","sha256":"58e16769fc5ea29486677fff7b25f0acd26e0077ef0e0d0a1c5c56545bc7b77a","sha512":"c840b50405fd4d0c82ccff537be49125cdc04674237f1945e8963c276dba99bb39b275d952f5033a7ea3978af474d3a56e932709673d00b973454102489dcef1","ssdeep":"6144:KmRDQSxp9xWrL3fe2ioyvWCbhjXapYaqqPeGfFrFVCk6y27CKIRIR8LzWpKofGnZ:d9Q49YrL3feq2sFVUCTI6EKofqnZ","tlshash":"d50519dcb5427b619332bdf160671068673e9a56c458096db2d8c4f43eb8809b2a3ff7","size":829613,"data":"","first_seen":"2025-10-29T09:05:47.950022Z","last_seen":"2026-04-06T09:30:25.517807Z","times_seen":13349,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=cLm1zuaUXPLFw7nzKiQTH1dX\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026bft=0dAFcWeA4fGXA6JKvgKv8XX-0g36zoZ45H86IO8lPGdXiCK-zJxRbaLWyCg0DynM2Q64B4W_QQy5eH4t4NUejTlP-vtj-WvzuPXA","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"97e7754e078f40c30caeee74afd4f090","sha1":"262959daeed4fb253337642fc4c826512d7c8c0e","sha256":"459cbea19e073681a280076d33c6c8fc3d0c2832d7a4bd15cc485453974e3295","sha512":"9558095f72d1d95be28c08a8246002f6d7ac01f7ab9dbc7108ae49b26ad2462b56f56583d0ff9b6f230e401586cbe39362c88fcd4551554f0ebbbb4ea5630ea1","ssdeep":"","tlshash":"66d0a9a212022df68c14ac710826005e1cca0923902693f4bece3c95afa4e85ba089bc","size":219,"data":"","first_seen":"2025-09-01T17:21:22.282495Z","last_seen":"2026-04-11T16:24:47.214575Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"622f5e31b5c20ff31d63a5d6aee66298","sha1":"f71e8b6b3e5d8d29646a41bb76954557915d263c","sha256":"84e527ea5d7674e404ab1792d6649980d0ed20510d403f230da025be2d20272d","sha512":"51629f08f888c88a201f2a04495d93d8e1059ca15642a08a7bd8edc5be64605e1e1f12a9c135aa532982bc5ba88f2a20fde264f8be044ac8d84f19c4f416a2ec","ssdeep":"","tlshash":"51a012883ed69060c12732b430e30d06105328a000048d045200e0ac3432033f84606c","size":84,"data":"","first_seen":"2025-11-03T23:57:41.148647Z","last_seen":"2026-04-11T16:24:47.246074Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"cd73218b8de969b43791bffe506f1f38","sha1":"ea744a9ef4e7c12399110d3466a7b3e11e372c40","sha256":"a548668dcbe0bc0cbf1842e4abfc24bd74015aff40c0e5f912c45e9d353867eb","sha512":"1a4d0fcb28cff3aa04055270affd35b9e27f592673a5abef34b35962281ce5eaaeb43f2b9f7bb8ce3f52f00d273c3b41db1cb871f6422965e010f885d222a078","ssdeep":"","tlshash":"82a002c43ed6a062d3b336bcb1f71d97a15568e85104cc40a614f46439731326d5a5ed","size":65,"data":"","first_seen":"2024-08-22T17:16:37.493822Z","last_seen":"2026-04-11T16:24:47.213661Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"63b8d43e15a769ab1628164a54199097","sha1":"cb952005262c49778f8054abed448d6da12273ec","sha256":"86b7c5d8d05a0ee2139acbef1b2e8cce6e55fe71bb9844ef477d1988f1c01626","sha512":"7ab70ee67cafb8e5732f46f1a17fdf216e6971cae70ace50cb3df475764fef59e90029d32451d5f499c9e293201dbd9d794fd1c66a3496167c9f6796a0ac0109","ssdeep":"","tlshash":"afa011803ac2a000ca3332b030a32c02202a28e03020c888a308f2a8ba3a03238023bc","size":77,"data":"","first_seen":"2024-08-22T17:16:37.49021Z","last_seen":"2026-04-11T16:24:47.252698Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"b580ae038cda05449225f9ef3fc4d1a3","sha1":"cb64f1f85db22806feedeb0e4bdf9c6e1ac678bb","sha256":"82c478aa7be9cd7d71940d754903e3c6d3148f275dd91d4e40af7ff846592241","sha512":"ea7960d495144c73a143b3705438e6922f6c0b5b72efacf0c1add9583823e14195a63ed9509afc14540043010081592943a5ccf355edd956ce6939588fadf227","ssdeep":"","tlshash":"43a011883aeaaa00c22330b032e30c02282228a800088800a200e8222822222b8022ea","size":76,"data":"","first_seen":"2025-11-03T23:57:41.150638Z","last_seen":"2026-04-11T16:24:47.217989Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"2817b8b7cf2c1bcac18cbac27baccfed","sha1":"b489a356361ca3b67c88445ef8578673a5763e4a","sha256":"3b5b5563eda82ebacdc48d18cc43575f341d33af7cfa464ab8b40da4856e6d25","sha512":"14886886ac92932cfd7605170fb196c75ce695d41e2292f30dd9ba8ca3212941524762475a97d3cc55ab292e33381e1483e58c6dbf2fc8b2e6cd8663f510c61a","ssdeep":"","tlshash":"86a022c83fcb30a0ca233a3030e30c032000a8e0c008ce00e228f8203b3f0322c8a0be","size":71,"data":"","first_seen":"2025-11-03T23:57:41.15156Z","last_seen":"2026-04-11T16:24:47.188009Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?onload=onRecaptchaLoaded\u0026render=6Ley5moUAAAAAJxloiuF--u_uS28aYUj-0E6tSfZ","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca77a2a42ac6e6e07bae365f3ba27190","sha1":"aa2e4291dc66df53047006e95e20cf9ec0910029","sha256":"00b330eb51e301bdc60ad21070dcc7b796dbdd173c96d965c96a9aa173266ef1","sha512":"6644b5f84da510f02b3d8b22c7030590496c2afdffb531f6227faecd02f1573d0322acf6879a9c1527790f0eac65091d883a3044a7fde2d8e3ea11092e91c419","ssdeep":"","tlshash":"312163721b08f0390f7209e1e2facbb1e891701df01884e8a512da841e7adcbce04959","size":1111,"data":"","first_seen":"2025-11-02T11:30:38.196131Z","last_seen":"2025-11-03T23:57:41.094962Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"7163406bfb4b2387aae7b98a32152821","sha1":"e8e8498cc9526219544779928037293fabc77150","sha256":"67ebb5a74169732cde2296118567dc8c4cd408b54a8b19c4231775da3ad314ec","sha512":"731163942685a0ce84dc2127e9532f83e4f6f646f8e5150c763a7c9a76aa0634fd27125c3f4f28e291894660d0775f0e616230e9e825e0b9611eb97646502105","ssdeep":"","tlshash":"edb09b443acb21c9855730f430f31e47311e15f910078e505965b59d74d13355ce91bd","size":122,"data":"","first_seen":"2025-11-03T23:57:41.152296Z","last_seen":"2026-04-11T16:24:47.192291Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"53e197ce2ce5d46618cfbecec02d8bd1","sha1":"d67f40a531402970cf37f530887e1a4174b24ccd","sha256":"23937b8d35ace63b854b4ddf791d6d6d0d234ec5117871fa1f64e1fe45f54684","sha512":"d40c52f4dd555ee1a43450bc57e24d476027de25fac14f2614008ec15e4b241d0f8ef6c5216f07a388fbb4cdf9f7d337b8456669fd1674880915cf66001b7364","ssdeep":"","tlshash":"2ea0118038c22002c223383020bb0c0220a028b000008c00a208e028a8b20a23c022aa","size":72,"data":"","first_seen":"2024-08-22T17:16:37.441411Z","last_seen":"2026-04-11T16:24:47.215378Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/html2canvas/1.4.1/html2canvas.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7530aa0b7587e627484c49fdf8f13f2","sha1":"b987dc0cc6cfcdc2e34499375f505470c5adb891","sha256":"e87e550794322e574a1fda0c1549a3c70dae5a93d9113417a429016838eab8cb","sha512":"04d6914276096223d2a871c36f9f01d3268f7c2bbe5a076cf06a7f814df792a06d80d4b8b523c7b8689bca87aa315fd326548a75ae855f3a04c981a34defaf5c","ssdeep":"1536:dLkw5M8eKEsqi5xpg+n1sPMecC9JmgxBQSFkkZQRlNM7IgeXzh:dLUtZSpg+aZmabZQz9","tlshash":"121457b46ba71cde0a7ef49b00172d838d981b67117fd1e8f24aada62d70702ceb1574","size":198689,"data":"","first_seen":"2023-03-08T20:20:59Z","last_seen":"2026-04-13T08:30:16.255131Z","times_seen":4682,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/assets/c90b44d7/video.js","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb9305cf1c1d32b2a5a161c98173a78d","sha1":"f112d04c39f33617ff16a6131f8cc8682de0d177","sha256":"210310bd6a91faa4d1822e82ff57f1640ee2d452feb4dfc83c6607afe0822efd","sha512":"cb9e6c3a99e30be1543677dbf737d816cd4c5edd9b3d96c24a3843e51efee038dbdf19bc637b346fd01236f5a6269c96ee42e2f2e52c32a6e722c20efd4f8231","ssdeep":"49152:p5iXHbP7kwBLWrLiMTyf9bzOIrll8WV0HSpH9C/3LLxub6o6NzQ:Lg","tlshash":"4595b50e6efb22a2491370394b5fa184f238951b1509d9587c4de7e85f44b3887fafe8","size":1951329,"data":"","first_seen":"2024-08-21T05:39:12.75567Z","last_seen":"2026-01-06T00:37:10.258618Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"3e03b94dcdb76c75e408ba25d8cb6894","sha1":"cc55f73b3cda6acce6368085b25465fdb8a40c24","sha256":"727942b7ade3e9626303358e918bec3669e38355c34246c75cd319b25309460f","sha512":"2b26f53dfcaa42e17c2947fc0123125144e85d9380a0cefb58f8b70a53952612dbb1c68737cb08d486a60746b68e4643084e9a3e70e85d42e4566017d6089b53","ssdeep":"","tlshash":"55b012883ec25040c63331b070a72c0754a37aa02000c849d344f06575f7a3178167fc","size":96,"data":"","first_seen":"2024-08-22T17:16:37.508806Z","last_seen":"2026-04-11T16:24:47.186859Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.lmofficial.to/script.js","fqdn":"stats.lmofficial.to","domain":"lmofficial.to","tld":"to"},"ip":{"addr":"38.246.114.236","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"14510a5b7aeeaa1060666fd2f1fcda4a","sha1":"9fe250161aac6d93d342fdf97f4a7c59566f16c1","sha256":"a656812a02ca34d8dc65b86430b3434eb5f17e56bd904b4761566cf542d08b55","sha512":"135d932f031243ba24bbb3903f3a928506516ac86f6f2d6cd9b6c99932286c2f67dbfb2b978a8c05e0456c4b8c0aa965ba3a718fbe089cdcc9d6843c849ef2f0","ssdeep":"","tlshash":"e45109f6b2d5b0f13f7438c0c1b9612467290a71782f9091babe1c898b1d81b5132e3c","size":2522,"data":"","first_seen":"2025-07-27T21:31:49.605781Z","last_seen":"2026-04-13T11:18:01.19631Z","times_seen":635,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"fed636e7ed6d19ca6e56177900c4a357","sha1":"e681cad1eddc9c2a2abaa5570368381d39142861","sha256":"ab96d056bf9f52e0b87c9e7a4e60e5d52965491c8ac098e621b84122f534a73b","sha512":"91be3ec920e67deb782c5bd87786fc683ed70981a4052ff0e0317d99e3a577cbdb5b3cd34afd2332548e915137d04d949ed09d318b43e6911e83dd342f32d1a3","ssdeep":"","tlshash":"19a012843ac12040c113317070e30c1760002494200088009140f02929a24315942459","size":73,"data":"","first_seen":"2023-05-27T11:40:22Z","last_seen":"2026-04-11T16:24:47.24958Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"10e32e759091087fa433d425ea1d2002","sha1":"f39173dfcd7044e307bc987ffbe7a71a213c8dd8","sha256":"5df7e16630c0c2fe62452112d49d18c733f14f537b61f82c7c8ad337ff416267","sha512":"e9b6b651040fb2a4bf8d9aec954da878b9952023864a68afb75f05cb5b5708adbabe27ee3126d14ac0696b0d26d046468cf684e1cf3481fa914be39d57f3c3b6","ssdeep":"","tlshash":"79b0128839d11084c563317070e31c07988b68a045008c416340f01124f373528551fc","size":88,"data":"","first_seen":"2025-11-03T23:57:41.15602Z","last_seen":"2026-04-11T16:24:47.244243Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"f9bc3c8335536c709264b7bd109faa31","sha1":"778c7f61a9a060288f2fed9052814dd775abc681","sha256":"6a627bd73e43d3e12a524ce2ca058df0387c82179498ad1cb709b2a105965821","sha512":"8bd65a064530775cffa427386cc20d8337a7a4f6781c1482ae2230386026b282224c3aacb2ca76ffcc1c05a9c4666edfc56d4188672f2473a99ebce95bf4fdfa","ssdeep":"","tlshash":"dba022c03ae22080c2333830b0e30c0b30003cf00000cc00e200fab83a33032ec020ac","size":66,"data":"","first_seen":"2024-08-22T17:16:37.457876Z","last_seen":"2026-04-11T16:24:47.20929Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"push-sdk.com/f/sdk.js?z=1500787","fqdn":"push-sdk.com","domain":"push-sdk.com","tld":"com"},"ip":{"addr":"23.88.8.123","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4d87b22393ed5eef57d01d86c6a88f6","sha1":"5e1aaee78cd735c23cc423fc863decca30aee219","sha256":"91cf9b34af48f3b62d706127b1140c89d8bb3a5455120acd2cfcfc41ab4ad5ee","sha512":"bba6ac4eafefb3415063cea1a572f7b56625300e5e671bedeb71eee84b72c532bd7815491602cc3a7059a2bfc1ace5a35ff6065709b60bbf9891e3849c82767c","ssdeep":"1536:/7LMSZcnLitlCr8WoeisV69SDG3nY+kH+sYK:/7L1Y2NViBYK","tlshash":"a933818877c6713412a7a4ac056f50daeb2b3c34944e890adc53f3a2297576eef23d74","size":54787,"data":"","first_seen":"2025-04-01T19:54:23.10118Z","last_seen":"2026-04-13T10:01:53.188896Z","times_seen":7998,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:02.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ww1.lookmovie.pn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 09:40:11 GMT\r\nexpires: Fri, 30 Oct 2026 09:40:11 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nage: 397011\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-04-13T13:10:55.535592Z","times_seen":302451,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":63,"dns":1,"connect":21,"send":0,"wait":22,"receive":1,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:02.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ww1.lookmovie.pn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 01 Nov 2025 07:02:38 GMT\r\nexpires: Sun, 01 Nov 2026 07:02:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 233664\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-04-13T13:12:42.851566Z","times_seen":210588,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ley5moUAAAAAJxloiuF--u_uS28aYUj-0E6tSfZ\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=cLm1zuaUXPLFw7nzKiQTH1dX\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=6xpnpamaq1nk","date":"2025-11-03T23:57:04.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15344\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 09:54:54 GMT\r\nexpires: Fri, 30 Oct 2026 09:54:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 16 Oct 2017 17:32:55 GMT\r\ncontent-type: font/woff2\r\nage: 396130\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15344, version 1.0","md5":"5d4aeb4e5f5ef754e307d7ffaef688bd","sha1":"06db651cdf354c64a7383ea9c77024ef4fb4cef8","sha256":"3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc","sha512":"7eb7c301df79d35a6a521fae9d3dccc0a695d3480b4d34c7d262dd0c67abec8437ed40e2920625e98aaeafba1d908dec69c3b07494ec7c29307de49e91c2ef48","ssdeep":"384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw","tlshash":"5162e16aef76dc7e4f1af1361c01b45404462290ba6155eff00d6e1d4eed1aff461392","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-13T13:05:45.848949Z","times_seen":537061,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/get-premium-2025/icons/download-black.svg","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:02.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/get-premium-2025/icons/download-black.svg HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218\r\nCookie: PHPSESSID=0eukvmut29qm3netvmnu9706dn; afsy_v1=23e2731ea660567ab22298ae16853f9b1542d49bb19be44de537a36adbf43b12a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22afsy_v1%22%3Bi%3A1%3Bs%3A148%3A%22%7B%22ip%22%3A%2291.90.42.154%22%2C%22url%22%3A%22%22%2C%22payload%22%3A%7B%22ref%22%3A%22os%22%2C%22utm_source%22%3A%22osub_sub%22%2C%22imdb%22%3A%22tt0013257%22%2C%22term%22%3A%22Haxan%22%2C%22sub%22%3A%2212699218%22%7D%2C%22system_key%22%3A%22tolt%22%7D%22%3B%7D; _csrf=9131a3944b126561170557e5820e074494399dd208cd5b2967c14ac755faff2ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22FvopAk_n2zDNI0oUWjZZZ1yiuD0Q0Vt4%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 23:57:01 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncache-control: max-age=604800\r\netag: W/\"68541798-144\"\r\nexpires: Wed, 05 Nov 2025 09:30:00 GMT\r\nlast-modified: Thu, 19 Jun 2025 13:58:48 GMT\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":324,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4ee828ddaa399aed121a9c5709cbe85b","sha1":"d59f4e5a13b60b8a9e89885b315929c1a7a2655a","sha256":"56696dd4055a459c4efe40b986734b2817efb86a67c6088d33442b5f58ca4ddb","sha512":"a87eb9fc19ad9421bc9ecf0a7fd51124706f2927c0e754d203cb498d3a7d11c3d9c9261a71eca90990e5ca420dc5ca65162ca2bf350616946036f4249db72fc7","ssdeep":"","tlshash":"d9e02666e51a561aaa844030a5f4100d40beb15f94f20dc491c0042be57284691dfaff","first_seen":"2025-11-03T23:57:41.067928Z","last_seen":"2026-04-11T16:24:47.143232Z","times_seen":8,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/assets/vendor-24ed5e5a3f933dd90aaca8fb28a5f615.js","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:02.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /assets/vendor-24ed5e5a3f933dd90aaca8fb28a5f615.js HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218\r\nCookie: PHPSESSID=0eukvmut29qm3netvmnu9706dn; afsy_v1=23e2731ea660567ab22298ae16853f9b1542d49bb19be44de537a36adbf43b12a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22afsy_v1%22%3Bi%3A1%3Bs%3A148%3A%22%7B%22ip%22%3A%2291.90.42.154%22%2C%22url%22%3A%22%22%2C%22payload%22%3A%7B%22ref%22%3A%22os%22%2C%22utm_source%22%3A%22osub_sub%22%2C%22imdb%22%3A%22tt0013257%22%2C%22term%22%3A%22Haxan%22%2C%22sub%22%3A%2212699218%22%7D%2C%22system_key%22%3A%22tolt%22%7D%22%3B%7D; _csrf=9131a3944b126561170557e5820e074494399dd208cd5b2967c14ac755faff2ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22FvopAk_n2zDNI0oUWjZZZ1yiuD0Q0Vt4%22%3B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 23:57:01 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\ncache-control: max-age=604800\r\netag: W/\"68e76cbc-2761e\"\r\nexpires: Wed, 05 Nov 2025 09:29:54 GMT\r\nlast-modified: Thu, 09 Oct 2025 08:05:16 GMT\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":161310,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31997)","md5":"24ed5e5a3f933dd90aaca8fb28a5f615","sha1":"aa7d3884928c571b363631d7ad575e64c8aa42b3","sha256":"6688d65430a12167920da2f05aca9769087529d2ec7db7a72f5498bbbdc0faa8","sha512":"ac894e208f4461c29308d10ba5df7f9092baae96423df9536ebe16998ff2d953651d424cabfe8c6c73bea3484920b50b875bebeaa538decba6066bda2dee91f3","ssdeep":"1536:NITMFC4dbMVRSGcgRDdUsY7qfIDMIL2u0lgK44R82g9p5q2lMVkxPDs4g2ib8vGH:NVbmwpcPYegDM62uqiq2wkxL+2ibaGea","tlshash":"4cf328997255782653eb21f1113f150bb23b2919e80980acb536e4ee7cb9c4c217bfbd","first_seen":"2024-08-22T17:16:37.457423Z","last_seen":"2026-04-11T16:24:47.174029Z","times_seen":32,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/html2canvas/1.4.1/html2canvas.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:02.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/html2canvas/1.4.1/html2canvas.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 03 Nov 2025 23:57:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 37629\r\ncf-ray: 998fcfcd795c8deb-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"61ec4640-92fd\"\r\nlast-modified: Sat, 22 Jan 2022 18:00:32 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 502577\r\nexpires: Sat, 24 Oct 2026 23:57:02 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hJm%2FUzL8BHSoVtaTrxCBmXwWbuMuBBAhNunG%2Bp145r0%2FVy5VBbHV8YYMlSR4wJyIDH86AtarFXkVM%2BffIfFoI8emxTF2P1L13t96dG4qPLU5mLgZlSbtZC%2FmV6wV3L%2Bt1UHHWU9v\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":198689,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64372)","md5":"d7530aa0b7587e627484c49fdf8f13f2","sha1":"b987dc0cc6cfcdc2e34499375f505470c5adb891","sha256":"e87e550794322e574a1fda0c1549a3c70dae5a93d9113417a429016838eab8cb","sha512":"04d6914276096223d2a871c36f9f01d3268f7c2bbe5a076cf06a7f814df792a06d80d4b8b523c7b8689bca87aa315fd326548a75ae855f3a04c981a34defaf5c","ssdeep":"1536:dLkw5M8eKEsqi5xpg+n1sPMecC9JmgxBQSFkkZQRlNM7IgeXzh:dLUtZSpg+aZmabZQz9","tlshash":"121457b46ba71cde0a7ef49b00172d838d981b67117fd1e8f24aada62d70702ceb1574","first_seen":"2023-03-08T20:20:59Z","last_seen":"2026-04-13T08:30:16.255131Z","times_seen":4682,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":32,"dns":2,"connect":1,"send":0,"wait":11,"receive":3,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"push-sdk.com/event?z=1500787","fqdn":"push-sdk.com","domain":"push-sdk.com","tld":"com"},"ip":{"addr":"23.88.8.123","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:03.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"push-sdk.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 11:06:22 GMT","end":"Tue, 25 Nov 2025 11:06:21 GMT"},"fingerprint":{"sha1":"BD:DD:75:88:5F:0F:2F:A6:EA:FF:1B:29:49:86:BB:EC:C1:90:4A:79","sha256":"89:8C:73:02:C1:8B:65:46:0D:EE:E7:41:24:34:AE:25:5A:28:56:20:4F:E2:7C:EB:1C:D8:91:6C:BC:2A:16:12"}}},"request":{"raw":"POST /event?z=1500787 HTTP/1.1\r\nHost: push-sdk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 83\r\nOrigin: https://ww1.lookmovie.pn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Mon, 03 Nov 2025 23:57:03 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: https://ww1.lookmovie.pn\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization, X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\ncache-control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store\r\npragma: no-cache\r\nexpires: Tue, 11 Jan 1994 00:00:00 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-13T13:12:12.581168Z","times_seen":13705127,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/assets/330939e7/scss/images/720p-quality.svg","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:03.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /assets/330939e7/scss/images/720p-quality.svg HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/assets/all-c421915f540d64642dc87a4ba8dcff15.css\r\nCookie: PHPSESSID=0eukvmut29qm3netvmnu9706dn; afsy_v1=23e2731ea660567ab22298ae16853f9b1542d49bb19be44de537a36adbf43b12a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22afsy_v1%22%3Bi%3A1%3Bs%3A148%3A%22%7B%22ip%22%3A%2291.90.42.154%22%2C%22url%22%3A%22%22%2C%22payload%22%3A%7B%22ref%22%3A%22os%22%2C%22utm_source%22%3A%22osub_sub%22%2C%22imdb%22%3A%22tt0013257%22%2C%22term%22%3A%22Haxan%22%2C%22sub%22%3A%2212699218%22%7D%2C%22system_key%22%3A%22tolt%22%7D%22%3B%7D; _csrf=9131a3944b126561170557e5820e074494399dd208cd5b2967c14ac755faff2ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22FvopAk_n2zDNI0oUWjZZZ1yiuD0Q0Vt4%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 23:57:03 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncache-control: max-age=604800\r\netag: W/\"68e76c87-89f\"\r\nexpires: Wed, 05 Nov 2025 09:29:58 GMT\r\nlast-modified: Thu, 09 Oct 2025 08:04:23 GMT\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2207,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bbd955e43d097221014b367981680d1a","sha1":"7d5651f62a2af413c8611522f8397e3b6f6a21d8","sha256":"7de49eb20def4a14feceb7ed81c4536bf1310918a88b81acd956b81085784e42","sha512":"51529e4eac7f7a0dd2e421a966892e0c26f9d4be0951077fe966a72256e57a432937adb84e2a8d703e118a32b5564a9a74250d14c622eacce91b13fbc2a64ef2","ssdeep":"","tlshash":"13411fc54630a1cc74ded8cebf4d6575202b406bbb354881d68ecd36929386e6a51e98","first_seen":"2025-11-03T23:57:41.072162Z","last_seen":"2026-04-11T16:24:47.159386Z","times_seen":5,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/cLm1zuaUXPLFw7nzKiQTH1dX/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=cLm1zuaUXPLFw7nzKiQTH1dX\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=bt5wozocy50p","date":"2025-11-03T23:57:04.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /recaptcha/releases/cLm1zuaUXPLFw7nzKiQTH1dX/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 353843\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 10:00:06 GMT\r\nexpires: Fri, 30 Oct 2026 10:00:06 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 25 Oct 2025 04:01:22 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 395818\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":829613,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (558)","md5":"07bd9db323e20c5712464eae395c4bbe","sha1":"ac8fec5c3ef6987c9bba9ec707575c133dc32876","sha256":"58e16769fc5ea29486677fff7b25f0acd26e0077ef0e0d0a1c5c56545bc7b77a","sha512":"c840b50405fd4d0c82ccff537be49125cdc04674237f1945e8963c276dba99bb39b275d952f5033a7ea3978af474d3a56e932709673d00b973454102489dcef1","ssdeep":"6144:KmRDQSxp9xWrL3fe2ioyvWCbhjXapYaqqPeGfFrFVCk6y27CKIRIR8LzWpKofGnZ:d9Q49YrL3feq2sFVUCTI6EKofqnZ","tlshash":"d50519dcb5427b619332bdf160671068673e9a56c458096db2d8c4f43eb8809b2a3ff7","first_seen":"2025-10-29T09:05:47.950022Z","last_seen":"2026-04-06T09:30:25.517807Z","times_seen":13349,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":33,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.lmofficial.to/api/send","fqdn":"stats.lmofficial.to","domain":"lmofficial.to","tld":"to"},"ip":{"addr":"38.246.114.236","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:05.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmofficial.to","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 09:07:59 GMT","end":"Sat, 17 Jan 2026 09:07:58 GMT"},"fingerprint":{"sha1":"18:79:96:54:09:F2:D0:26:53:15:CD:1D:75:FB:B4:45:76:23:8E:4F","sha256":"3E:6D:46:C6:F4:4E:6E:BB:EF:A6:1C:19:42:D5:76:11:E2:12:26:29:78:29:24:53:A2:89:26:BD:77:8C:99:FC"}}},"request":{"raw":"POST /api/send HTTP/1.1\r\nHost: stats.lmofficial.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww1.lookmovie.pn/\r\nContent-Type: application/json\r\nContent-Length: 364\r\nOrigin: https://ww1.lookmovie.pn\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Mon, 03 Nov 2025 23:57:05 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: *\r\nAccess-Control-Allow-Methods: GET, DELETE, POST, PUT\r\nAccess-Control-Max-Age: 86400\r\nCache-Control: no-cache\r\nX-DNS-Prefetch-Control: on\r\nContent-Security-Policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is cloud.umami.is;frame-ancestors 'self'\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":419,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"eed7d1b31bbbbd028b7667ab22074411","sha1":"d2885c319800dbca8b8f88e20e97f111678adf67","sha256":"08d97d57e4744b538f50e9bb553ef19ccfafa2b47139061a5f7c9b08ffb77d95","sha512":"9fd9c3f2547fd0852ee395c86f4d8db4e0ea6c74e955c0e334ae4ce88b7f8098cbab50cf4770b89f64a1c41c283a4eb3afbd2b0f4d3b47de2c37e077bb7c9ec7","ssdeep":"","tlshash":"19e0ab92811e7e6b79c297d0aa0e825b45dd8be218a52035ccfd21a5fb29dc2021795c","first_seen":"2025-11-03T23:57:41.073922Z","last_seen":"2025-11-03T23:57:41.073922Z","times_seen":1,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":-1,"dns":2,"connect":135,"send":0,"wait":148,"receive":0,"ssl":155},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.lmofficial.to/script.js","fqdn":"stats.lmofficial.to","domain":"lmofficial.to","tld":"to"},"ip":{"addr":"38.246.114.236","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:01.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmofficial.to","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 09:07:59 GMT","end":"Sat, 17 Jan 2026 09:07:58 GMT"},"fingerprint":{"sha1":"18:79:96:54:09:F2:D0:26:53:15:CD:1D:75:FB:B4:45:76:23:8E:4F","sha256":"3E:6D:46:C6:F4:4E:6E:BB:EF:A6:1C:19:42:D5:76:11:E2:12:26:29:78:29:24:53:A2:89:26:BD:77:8C:99:FC"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: stats.lmofficial.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Mon, 03 Nov 2025 23:57:02 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-DNS-Prefetch-Control: on\r\nContent-Security-Policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is cloud.umami.is;frame-ancestors 'self'\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: public, max-age=86400, must-revalidate\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 27 Jul 2025 22:26:06 GMT\r\nETag: W/\"9da-1984dfe4430\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2522,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2521)","md5":"14510a5b7aeeaa1060666fd2f1fcda4a","sha1":"9fe250161aac6d93d342fdf97f4a7c59566f16c1","sha256":"a656812a02ca34d8dc65b86430b3434eb5f17e56bd904b4761566cf542d08b55","sha512":"135d932f031243ba24bbb3903f3a928506516ac86f6f2d6cd9b6c99932286c2f67dbfb2b978a8c05e0456c4b8c0aa965ba3a718fbe089cdcc9d6843c849ef2f0","ssdeep":"","tlshash":"e45109f6b2d5b0f13f7438c0c1b9612467290a71782f9091babe1c898b1d81b5132e3c","first_seen":"2025-07-27T21:31:49.605781Z","last_seen":"2026-04-13T11:18:01.19631Z","times_seen":635,"resource_available":true,"data":null}},"time_used":759,"timings":{"blocked":299,"dns":37,"connect":134,"send":0,"wait":140,"receive":0,"ssl":145},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dosis/v34/HhyaU5sn9vOmLzloC_U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:02.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/dosis/v34/HhyaU5sn9vOmLzloC_U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ww1.lookmovie.pn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30744\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 28 Oct 2025 15:26:04 GMT\r\nexpires: Wed, 28 Oct 2026 15:26:04 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 17:03:39 GMT\r\ncontent-type: font/woff2\r\nage: 549058\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30744,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30744, version 1.0","md5":"87bc734caa77a6aa60700bab80b18f44","sha1":"3d65ee80d4a6cf3a4d435dc8327dc97ea8be3511","sha256":"1db3f2316b3766392a12f4a4e88221e3ce9e70b170fa4390994c47a9db10352e","sha512":"7d4a224248447a3f5cc12e592c393f2a69dc5bb8c56c3f8ecdb0bbe4a334ce708915339503afdebf6d4550de1df7a6a64feca7bc2b31030cb6ea030a67c34bd2","ssdeep":"768:/8sHNQDk7eXaE/AFBdtU5WxXCF9CvyMGHNfkqSrM4D0AvO0l:nHNI7XqrtU5OXCmwHqqSrjDvBl","tlshash":"a8d2f130c98b6d597b971c7db823156ecdbeb40d5fa78ee01c062e38a0afd150712a38","first_seen":"2025-06-03T03:08:20.355522Z","last_seen":"2026-04-13T10:53:05.563636Z","times_seen":2530,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":66,"dns":1,"connect":22,"send":0,"wait":52,"receive":8,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dosis/v34/HhyaU5sn9vOmLzloC_U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:02.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/dosis/v34/HhyaU5sn9vOmLzloC_U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ww1.lookmovie.pn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30744\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 28 Oct 2025 15:26:04 GMT\r\nexpires: Wed, 28 Oct 2026 15:26:04 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 17:03:39 GMT\r\ncontent-type: font/woff2\r\nage: 549058\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30744,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30744, version 1.0","md5":"87bc734caa77a6aa60700bab80b18f44","sha1":"3d65ee80d4a6cf3a4d435dc8327dc97ea8be3511","sha256":"1db3f2316b3766392a12f4a4e88221e3ce9e70b170fa4390994c47a9db10352e","sha512":"7d4a224248447a3f5cc12e592c393f2a69dc5bb8c56c3f8ecdb0bbe4a334ce708915339503afdebf6d4550de1df7a6a64feca7bc2b31030cb6ea030a67c34bd2","ssdeep":"768:/8sHNQDk7eXaE/AFBdtU5WxXCF9CvyMGHNfkqSrM4D0AvO0l:nHNI7XqrtU5OXCmwHqqSrjDvBl","tlshash":"a8d2f130c98b6d597b971c7db823156ecdbeb40d5fa78ee01c062e38a0afd150712a38","first_seen":"2025-06-03T03:08:20.355522Z","last_seen":"2026-04-13T10:53:05.563636Z","times_seen":2530,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/logo1.webp","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:01.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/logo1.webp HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218\r\nCookie: PHPSESSID=0eukvmut29qm3netvmnu9706dn; afsy_v1=23e2731ea660567ab22298ae16853f9b1542d49bb19be44de537a36adbf43b12a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22afsy_v1%22%3Bi%3A1%3Bs%3A148%3A%22%7B%22ip%22%3A%2291.90.42.154%22%2C%22url%22%3A%22%22%2C%22payload%22%3A%7B%22ref%22%3A%22os%22%2C%22utm_source%22%3A%22osub_sub%22%2C%22imdb%22%3A%22tt0013257%22%2C%22term%22%3A%22Haxan%22%2C%22sub%22%3A%2212699218%22%7D%2C%22system_key%22%3A%22tolt%22%7D%22%3B%7D; _csrf=9131a3944b126561170557e5820e074494399dd208cd5b2967c14ac755faff2ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22FvopAk_n2zDNI0oUWjZZZ1yiuD0Q0Vt4%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 23:57:01 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10856\r\netag: \"660e9646-2a68\"\r\nlast-modified: Thu, 04 Apr 2024 12:00:06 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10856,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"72d607ac83508d3e1fe32b4a4fa55e86","sha1":"f715a10e0ce897bb7df8952bca4065c25432a785","sha256":"b91a8aa6c2599c106ee7ffb45488cd1bad85572008b05c7c15750e539d69950d","sha512":"338337a01a1ccfebbadb742c4de020f5ff2e9305dba3dd8cf0eb420d55c211f9ad2efc9e54345b738b4ba696d041579a34417d5e6e48aa444090b2d368aa5a2c","ssdeep":"192:nxDYNMtKwb/4/y9r1OTiGf0LGe7inrK6n6oBIbKptU/UTEHsY94OCt:nFYNg7bg69rJGf0LBmeq6oB3U/Uo9hCt","tlshash":"5d22bf7c1d3b1355ea77de349cb02f9dd26d592ccb222b486d302b0512aa4e4748d5df","first_seen":"2023-05-07T19:35:35Z","last_seen":"2026-04-11T16:24:47.151232Z","times_seen":77,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/assets/vendor-0b877cf9fbfaf139a9d0a99f439b5a5a.css","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:02.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /assets/vendor-0b877cf9fbfaf139a9d0a99f439b5a5a.css HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218\r\nCookie: PHPSESSID=0eukvmut29qm3netvmnu9706dn; afsy_v1=23e2731ea660567ab22298ae16853f9b1542d49bb19be44de537a36adbf43b12a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22afsy_v1%22%3Bi%3A1%3Bs%3A148%3A%22%7B%22ip%22%3A%2291.90.42.154%22%2C%22url%22%3A%22%22%2C%22payload%22%3A%7B%22ref%22%3A%22os%22%2C%22utm_source%22%3A%22osub_sub%22%2C%22imdb%22%3A%22tt0013257%22%2C%22term%22%3A%22Haxan%22%2C%22sub%22%3A%2212699218%22%7D%2C%22system_key%22%3A%22tolt%22%7D%22%3B%7D; _csrf=9131a3944b126561170557e5820e074494399dd208cd5b2967c14ac755faff2ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22FvopAk_n2zDNI0oUWjZZZ1yiuD0Q0Vt4%22%3B%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 23:57:01 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\ncache-control: max-age=604800\r\netag: W/\"68e76cbc-1ddb\"\r\nexpires: Wed, 05 Nov 2025 09:29:54 GMT\r\nlast-modified: Thu, 09 Oct 2025 08:05:16 GMT\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7643,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7643), with no line terminators","md5":"0b877cf9fbfaf139a9d0a99f439b5a5a","sha1":"d011e0510399ac6fc6aa5c5efe755553de8c4406","sha256":"50b6247975b3f796c4573e6aeeb4fc5ed0de6b26233e713cec67224ecc646566","sha512":"a5dd405dad6211e23da1abec23350e6d95b6b45d879b523423cf8b281f7f712bb949d682c396ee9bca27dda661e60de0efd2d49d7151f8345e6bf2bac16938cc","ssdeep":"96:jgA6eA2+AbdEK7pcXVxZaIUCNMkSR+Ir9/4OKn5k8HOyLaN7QPSwHYz8oy:jiHc2KxSMr+4qLk8H7L47QPSwHYz8oy","tlshash":"abf134f8a1d5211d4e1ed3320d942ac6293e9c59d4225aede1f7da18e3cb988141ff8f","first_seen":"2025-06-30T14:55:15.031567Z","last_seen":"2026-04-11T16:24:47.163149Z","times_seen":27,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/assets/330939e7/scss/images/480p-quality.svg","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:03.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /assets/330939e7/scss/images/480p-quality.svg HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/assets/all-c421915f540d64642dc87a4ba8dcff15.css\r\nCookie: PHPSESSID=0eukvmut29qm3netvmnu9706dn; afsy_v1=23e2731ea660567ab22298ae16853f9b1542d49bb19be44de537a36adbf43b12a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22afsy_v1%22%3Bi%3A1%3Bs%3A148%3A%22%7B%22ip%22%3A%2291.90.42.154%22%2C%22url%22%3A%22%22%2C%22payload%22%3A%7B%22ref%22%3A%22os%22%2C%22utm_source%22%3A%22osub_sub%22%2C%22imdb%22%3A%22tt0013257%22%2C%22term%22%3A%22Haxan%22%2C%22sub%22%3A%2212699218%22%7D%2C%22system_key%22%3A%22tolt%22%7D%22%3B%7D; _csrf=9131a3944b126561170557e5820e074494399dd208cd5b2967c14ac755faff2ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22FvopAk_n2zDNI0oUWjZZZ1yiuD0Q0Vt4%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 23:57:03 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncache-control: max-age=604800\r\netag: W/\"68e76c87-3ca\"\r\nexpires: Wed, 05 Nov 2025 09:29:58 GMT\r\nlast-modified: Thu, 09 Oct 2025 08:04:23 GMT\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":970,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f6f2296febbc81242b525cf06292b111","sha1":"064346b8702a0b76a06dc589b6e7a4c9f42b980a","sha256":"00a08823bc9b8f28df0fa67561b2118856fb647b1e23caff6a4f848650f6af39","sha512":"a96eac404712e9251e1c3e6a3bebcaa738b92252de84598aef605bd169241edfa9f80b12fce62374487d7243b3f4eb9353170d9ca6927a8c484fe3689b1ad17e","ssdeep":"","tlshash":"c11102a4b035f48ca6ba559073dd7a61105d442fa3114989ef1c082cdac3c673b6379c","first_seen":"2025-11-03T23:57:41.077193Z","last_seen":"2026-04-11T16:24:47.13355Z","times_seen":5,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/p/w300/af7669822ccab3615cebeafe1f4a27a2.webp","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:04.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/p/w300/af7669822ccab3615cebeafe1f4a27a2.webp HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218\r\nCookie: PHPSESSID=0eukvmut29qm3netvmnu9706dn; afsy_v1=23e2731ea660567ab22298ae16853f9b1542d49bb19be44de537a36adbf43b12a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22afsy_v1%22%3Bi%3A1%3Bs%3A148%3A%22%7B%22ip%22%3A%2291.90.42.154%22%2C%22url%22%3A%22%22%2C%22payload%22%3A%7B%22ref%22%3A%22os%22%2C%22utm_source%22%3A%22osub_sub%22%2C%22imdb%22%3A%22tt0013257%22%2C%22term%22%3A%22Haxan%22%2C%22sub%22%3A%2212699218%22%7D%2C%22system_key%22%3A%22tolt%22%7D%22%3B%7D; _csrf=9131a3944b126561170557e5820e074494399dd208cd5b2967c14ac755faff2ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22FvopAk_n2zDNI0oUWjZZZ1yiuD0Q0Vt4%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 23:57:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 34190\r\netag: W/\"858e-7XGuauJbLBlkP/JSuIycmVLrfpQ\"\r\nx-powered-by: Express\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":34190,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7b65ca8a9e41d9c86bec57e35862560f","sha1":"ed71ae6ae25b2c19643ff252b88c9c9952eb7e94","sha256":"aa8ab0c7df43e3b6e641a333e0b19a5022fc454397654fcd3177832645fa63c6","sha512":"df5e1c1b28079393d92eb0c88de99bbc5a1dec3134adc47c6ec5c8c8880f50388838252517c4ebc8bf22efd94ee042af1c0375bcc296b41ef953fb44cd6eb175","ssdeep":"768:AyuuMwm19vqqzpvutpCxsGmvBjbLImEtVPK41k+cIav0Frjtc:wPkp4/gbLImEtVfeFvk6","tlshash":"52e2f1a91c8603be3253698c5be7d2359a9288d37f762dd71a6b4f49618d330df83884","first_seen":"2025-11-03T23:57:41.078094Z","last_seen":"2025-11-03T23:57:41.078094Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/movie-celebraty-min.png","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:02.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/movie-celebraty-min.png HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218\r\nCookie: PHPSESSID=0eukvmut29qm3netvmnu9706dn; afsy_v1=23e2731ea660567ab22298ae16853f9b1542d49bb19be44de537a36adbf43b12a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22afsy_v1%22%3Bi%3A1%3Bs%3A148%3A%22%7B%22ip%22%3A%2291.90.42.154%22%2C%22url%22%3A%22%22%2C%22payload%22%3A%7B%22ref%22%3A%22os%22%2C%22utm_source%22%3A%22osub_sub%22%2C%22imdb%22%3A%22tt0013257%22%2C%22term%22%3A%22Haxan%22%2C%22sub%22%3A%2212699218%22%7D%2C%22system_key%22%3A%22tolt%22%7D%22%3B%7D; _csrf=9131a3944b126561170557e5820e074494399dd208cd5b2967c14ac755faff2ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22FvopAk_n2zDNI0oUWjZZZ1yiuD0Q0Vt4%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 23:57:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 147704\r\ncache-control: max-age=604800\r\netag: \"661801e7-240f8\"\r\nexpires: Wed, 05 Nov 2025 09:29:58 GMT\r\nlast-modified: Thu, 11 Apr 2024 15:29:43 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":147704,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 607, 8-bit colormap, non-interlaced","md5":"412fd2cdc546d214b57106ccb70961ae","sha1":"c8affd9a935ea1641f5cfb645783e42e2e33e843","sha256":"26797e75bb581c53fa8b52cab8eda5ddface4b67d04737618a9f76232543aa36","sha512":"1b9ac5ab6752b02e98e62262c8a7d315927639728caf9be75a5dbb6ebc848c307a5e861ff6aa3e1d0fb0856594b67c52d4d8365b4b76747dcad1aa9719a11fbc","ssdeep":"3072:E8adeORjszxUieJX/bxYVsaWNzpOi2gHUnpncVU/yQYQSghKcLRz9QFaWhMiSH:E8pOazSZJX/1YGDD2gyncVhQw8j2ehH","tlshash":"2be302843bf062e0b01b61f161d8ab56bf1bda6c6203d8053fcd6c06dfd5259aa8f4e5","first_seen":"2025-11-03T23:57:41.079462Z","last_seen":"2026-04-11T16:24:47.156034Z","times_seen":5,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/assets/c90b44d7/video.js","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:02.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /assets/c90b44d7/video.js HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218\r\nCookie: PHPSESSID=0eukvmut29qm3netvmnu9706dn; afsy_v1=23e2731ea660567ab22298ae16853f9b1542d49bb19be44de537a36adbf43b12a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22afsy_v1%22%3Bi%3A1%3Bs%3A148%3A%22%7B%22ip%22%3A%2291.90.42.154%22%2C%22url%22%3A%22%22%2C%22payload%22%3A%7B%22ref%22%3A%22os%22%2C%22utm_source%22%3A%22osub_sub%22%2C%22imdb%22%3A%22tt0013257%22%2C%22term%22%3A%22Haxan%22%2C%22sub%22%3A%2212699218%22%7D%2C%22system_key%22%3A%22tolt%22%7D%22%3B%7D; _csrf=9131a3944b126561170557e5820e074494399dd208cd5b2967c14ac755faff2ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22FvopAk_n2zDNI0oUWjZZZ1yiuD0Q0Vt4%22%3B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 23:57:01 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\ncache-control: max-age=604800\r\netag: W/\"68e76c86-1dc661\"\r\nexpires: Wed, 05 Nov 2025 09:30:00 GMT\r\nlast-modified: Thu, 09 Oct 2025 08:04:22 GMT\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1951329,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (320)","md5":"e87001d3199d8431f95b29a9976b4baf","sha1":"769c092ca4ed7a6ac2aca1a462a04630d9c754b7","sha256":"786db0af6922321d7460480b3d9c3e357c75cd9739d00cf0dfc3f2611673228b","sha512":"c5e1c79251928a9e1579dfc688fa94e77f24c8765b0c8017b12d8270e6ece1d5b005fbda1c5217ae6d23f4238004cfd370ee4fc296115b6d1a60af7262b914b2","ssdeep":"24576:p5iXG+bP7kwBLWrLiMTyTrFDbzOIrll8WQ5I3nUBP:p5iXHbP7kwBLWrLiMTyf9bzOIrll8WVQ","tlshash":"6025a30e2eeb22a2445370794b5f6184f238911f5109d9987c4da7b85f85f348bfafe8","first_seen":"2025-11-03T23:57:41.080448Z","last_seen":"2026-01-06T00:37:10.19873Z","times_seen":3,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:02.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ww1.lookmovie.pn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 10:00:28 GMT\r\nexpires: Fri, 30 Oct 2026 10:00:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nage: 395794\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-04-13T13:01:33.164596Z","times_seen":18798,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":23,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/advertising/banner?bid=adv1\u0026w=1280","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:02.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /advertising/banner?bid=adv1\u0026w=1280 HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=0eukvmut29qm3netvmnu9706dn; afsy_v1=23e2731ea660567ab22298ae16853f9b1542d49bb19be44de537a36adbf43b12a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22afsy_v1%22%3Bi%3A1%3Bs%3A148%3A%22%7B%22ip%22%3A%2291.90.42.154%22%2C%22url%22%3A%22%22%2C%22payload%22%3A%7B%22ref%22%3A%22os%22%2C%22utm_source%22%3A%22osub_sub%22%2C%22imdb%22%3A%22tt0013257%22%2C%22term%22%3A%22Haxan%22%2C%22sub%22%3A%2212699218%22%7D%2C%22system_key%22%3A%22tolt%22%7D%22%3B%7D; _csrf=9131a3944b126561170557e5820e074494399dd208cd5b2967c14ac755faff2ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22FvopAk_n2zDNI0oUWjZZZ1yiuD0Q0Vt4%22%3B%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 23:57:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: no-store, no-cache, must-revalidate\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":342,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"0f02d65989d2c1e7fed7edc4a3372fef","sha1":"0bba48bcb41b772f61874e9d6ee27a8a16c6b316","sha256":"74022edaeee7626de33e67b9feb09e54f1b84b23248005b1dc40bf490ad9fd1f","sha512":"94bc2f2b3556827b21801fab90c7c8ab46655a9fc362f76323448ad63dd83e30bd94e6abf7f7a551f3df9969159153dd34e0addc6d128ff330f4338ef9f11596","ssdeep":"","tlshash":"4ee026354892935f0dc2e094903ce61791698553c42e1708b29d8a256f96a03f4e3d8c","first_seen":"2025-11-03T23:57:41.081915Z","last_seen":"2025-11-09T16:43:17.832662Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/cLm1zuaUXPLFw7nzKiQTH1dX/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:03.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /recaptcha/releases/cLm1zuaUXPLFw7nzKiQTH1dX/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ww1.lookmovie.pn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 353843\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 10:00:06 GMT\r\nexpires: Fri, 30 Oct 2026 10:00:06 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 25 Oct 2025 04:01:22 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 395817\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":829613,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (558)","md5":"07bd9db323e20c5712464eae395c4bbe","sha1":"ac8fec5c3ef6987c9bba9ec707575c133dc32876","sha256":"58e16769fc5ea29486677fff7b25f0acd26e0077ef0e0d0a1c5c56545bc7b77a","sha512":"c840b50405fd4d0c82ccff537be49125cdc04674237f1945e8963c276dba99bb39b275d952f5033a7ea3978af474d3a56e932709673d00b973454102489dcef1","ssdeep":"6144:KmRDQSxp9xWrL3fe2ioyvWCbhjXapYaqqPeGfFrFVCk6y27CKIRIR8LzWpKofGnZ:d9Q49YrL3feq2sFVUCTI6EKofqnZ","tlshash":"d50519dcb5427b619332bdf160671068673e9a56c458096db2d8c4f43eb8809b2a3ff7","first_seen":"2025-10-29T09:05:47.950022Z","last_seen":"2026-04-06T09:30:25.517807Z","times_seen":13349,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":9,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/slider-bg.webp","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:03.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/slider-bg.webp HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218\r\nCookie: PHPSESSID=0eukvmut29qm3netvmnu9706dn; afsy_v1=23e2731ea660567ab22298ae16853f9b1542d49bb19be44de537a36adbf43b12a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22afsy_v1%22%3Bi%3A1%3Bs%3A148%3A%22%7B%22ip%22%3A%2291.90.42.154%22%2C%22url%22%3A%22%22%2C%22payload%22%3A%7B%22ref%22%3A%22os%22%2C%22utm_source%22%3A%22osub_sub%22%2C%22imdb%22%3A%22tt0013257%22%2C%22term%22%3A%22Haxan%22%2C%22sub%22%3A%2212699218%22%7D%2C%22system_key%22%3A%22tolt%22%7D%22%3B%7D; _csrf=9131a3944b126561170557e5820e074494399dd208cd5b2967c14ac755faff2ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22FvopAk_n2zDNI0oUWjZZZ1yiuD0Q0Vt4%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 23:57:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 45784\r\netag: \"660e9646-b2d8\"\r\nlast-modified: Thu, 04 Apr 2024 12:00:06 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45784,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x789, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"be6e355750c11159252a9f94b4a08481","sha1":"5505608714e5005039fdee22877ea5811913f5f1","sha256":"47b0a084d29428d691c103d68b8cc73a3c60822713b2637ecacf83c5004b87ac","sha512":"1dd6a6e6b8c8d7242782da1d3d68c1c0aa5024514d40e20b253630f21f78c8e075333d973ef82b07fccf3d45d2add86946ffb5dde4f1d7548fa46ea1e1c82c81","ssdeep":"768:NHk+ARTUbVZT8aJmr5PxRI8lnrT4j6CKSEBIViFJU1Ymz91RwzpUaULzlK:q+gTCjT8d5PEErUGCbE8GZmz9opUb9K","tlshash":"342301e743f009159f0fb79882637fc88361869d17ca8e6186b7475fceec0466a6f4a1","first_seen":"2023-05-21T11:23:07Z","last_seen":"2026-04-11T16:24:47.123973Z","times_seen":57,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/p/w300/071dfdd00350636b0a41012a6ce39d6f.webp","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:04.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/p/w300/071dfdd00350636b0a41012a6ce39d6f.webp HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218\r\nCookie: PHPSESSID=0eukvmut29qm3netvmnu9706dn; afsy_v1=23e2731ea660567ab22298ae16853f9b1542d49bb19be44de537a36adbf43b12a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22afsy_v1%22%3Bi%3A1%3Bs%3A148%3A%22%7B%22ip%22%3A%2291.90.42.154%22%2C%22url%22%3A%22%22%2C%22payload%22%3A%7B%22ref%22%3A%22os%22%2C%22utm_source%22%3A%22osub_sub%22%2C%22imdb%22%3A%22tt0013257%22%2C%22term%22%3A%22Haxan%22%2C%22sub%22%3A%2212699218%22%7D%2C%22system_key%22%3A%22tolt%22%7D%22%3B%7D; _csrf=9131a3944b126561170557e5820e074494399dd208cd5b2967c14ac755faff2ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22FvopAk_n2zDNI0oUWjZZZ1yiuD0Q0Vt4%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 23:57:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22352\r\netag: W/\"5750-Cpt8tHfJACXkHb/Alj3Dk/cVp0Q\"\r\nx-powered-by: Express\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":22352,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7658480e78cf65d4e97ebf1c5430130c","sha1":"0a9b7cb477c90025e41dbfc0963dc393f715a744","sha256":"fd445810a43c8201777abbc12e912cdf16e21dfb1a83fc6f2699871068d65d06","sha512":"61b9c2b2ce4b055fb9f4cc1b6689b23d400cfbf2f3318d88b55d0e203e9ab203e2cd86fb320559df991bc61bffa7f0a4be6a293c0beb7f6d34bad1050ac855e8","ssdeep":"384:z3JkyR4o8F8kcgW2VO9aHEGMEpf+KxdroqZpb14ggS4JV3WrPgBbhZmg5SC:zCyRfvknVwaHFdpWKxBDV473Zmg5J","tlshash":"aaa2e177ea116a2fa4438b21020b23b8ca9d66c1ff6b1dd55e80df40620ffd57da9a41","first_seen":"2025-11-03T23:57:41.083299Z","last_seen":"2025-11-03T23:57:41.083299Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/assets/all-c421915f540d64642dc87a4ba8dcff15.css","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:02.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /assets/all-c421915f540d64642dc87a4ba8dcff15.css HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218\r\nCookie: PHPSESSID=0eukvmut29qm3netvmnu9706dn; afsy_v1=23e2731ea660567ab22298ae16853f9b1542d49bb19be44de537a36adbf43b12a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22afsy_v1%22%3Bi%3A1%3Bs%3A148%3A%22%7B%22ip%22%3A%2291.90.42.154%22%2C%22url%22%3A%22%22%2C%22payload%22%3A%7B%22ref%22%3A%22os%22%2C%22utm_source%22%3A%22osub_sub%22%2C%22imdb%22%3A%22tt0013257%22%2C%22term%22%3A%22Haxan%22%2C%22sub%22%3A%2212699218%22%7D%2C%22system_key%22%3A%22tolt%22%7D%22%3B%7D; _csrf=9131a3944b126561170557e5820e074494399dd208cd5b2967c14ac755faff2ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22FvopAk_n2zDNI0oUWjZZZ1yiuD0Q0Vt4%22%3B%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 23:57:01 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\ncache-control: max-age=604800\r\netag: W/\"69038496-6aa7b\"\r\nexpires: Thu, 06 Nov 2025 15:30:53 GMT\r\nlast-modified: Thu, 30 Oct 2025 15:30:30 GMT\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":436859,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65510), with no line terminators","md5":"c421915f540d64642dc87a4ba8dcff15","sha1":"d2227c1728cec0f380e020aa269ecf5e7f77e44a","sha256":"aa7a3a9fd185eefb4186586289309c717cb6e4827168e23cac6b1d156b1e829a","sha512":"df8dd12d1c6cb62ad166746bb90ea72e4cfa9e75f9dd5ff8511f913aa6cb89946de611235626a18bbdb4d1ddc8b2029aabfcd2c4746deb76e2fc5982fb47a8b9","ssdeep":"6144:tF+3OSjtrFvXdZ38p2LUfCqdZ0gWS3Gi5wAzlA+oWUuF783z92jcpD7z+lcv2x2m:tFRiXWUuF783z92yuGEIo","tlshash":"3794eb61e51424edba33c056b7c0bb8d3525f192e6260efef52b605c8ac72d616b3b1c","first_seen":"2025-11-02T11:30:38.219449Z","last_seen":"2025-11-09T16:43:17.842872Z","times_seen":3,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/p/w300/8ee16af2348fc4922dccd8987afcd251.webp","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:04.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/p/w300/8ee16af2348fc4922dccd8987afcd251.webp HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218\r\nCookie: PHPSESSID=0eukvmut29qm3netvmnu9706dn; afsy_v1=23e2731ea660567ab22298ae16853f9b1542d49bb19be44de537a36adbf43b12a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22afsy_v1%22%3Bi%3A1%3Bs%3A148%3A%22%7B%22ip%22%3A%2291.90.42.154%22%2C%22url%22%3A%22%22%2C%22payload%22%3A%7B%22ref%22%3A%22os%22%2C%22utm_source%22%3A%22osub_sub%22%2C%22imdb%22%3A%22tt0013257%22%2C%22term%22%3A%22Haxan%22%2C%22sub%22%3A%2212699218%22%7D%2C%22system_key%22%3A%22tolt%22%7D%22%3B%7D; _csrf=9131a3944b126561170557e5820e074494399dd208cd5b2967c14ac755faff2ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22FvopAk_n2zDNI0oUWjZZZ1yiuD0Q0Vt4%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 23:57:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6916\r\netag: W/\"1b04-8AeKV4kp4Y4NGDutNMCE3LiVZbc\"\r\nx-powered-by: Express\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6916,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d083c393d0af24bbd4f67278e57777b6","sha1":"f0078a578929e18e0d183bad34c084dcb89565b7","sha256":"b6e41ad6f56727cbe45a962ee85a979fa2de32e5ed3a08689f770c78a4b8be47","sha512":"105ed08f162af3ebdf88859748481fd876e89d69202a7d142bec870d9ab5cf39b2cfa943419878ad391625f896079808ab35bc0931056125e52907a96956b73c","ssdeep":"192:4RIv9d8YpZbK6y+rUNpyTShyfyS+r8WmtdxPror:4MhK6hihkfgr8WGU","tlshash":"c5e19e82794ed993367f867d4a5306adf0621c58f0e9d5320ae1412168be32d5bd1fa3","first_seen":"2025-11-03T23:57:41.084937Z","last_seen":"2025-11-03T23:57:41.084937Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/p/w300/3cf845ca35215ee43ef621b52e01b8c0.webp","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:04.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/p/w300/3cf845ca35215ee43ef621b52e01b8c0.webp HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218\r\nCookie: PHPSESSID=0eukvmut29qm3netvmnu9706dn; afsy_v1=23e2731ea660567ab22298ae16853f9b1542d49bb19be44de537a36adbf43b12a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22afsy_v1%22%3Bi%3A1%3Bs%3A148%3A%22%7B%22ip%22%3A%2291.90.42.154%22%2C%22url%22%3A%22%22%2C%22payload%22%3A%7B%22ref%22%3A%22os%22%2C%22utm_source%22%3A%22osub_sub%22%2C%22imdb%22%3A%22tt0013257%22%2C%22term%22%3A%22Haxan%22%2C%22sub%22%3A%2212699218%22%7D%2C%22system_key%22%3A%22tolt%22%7D%22%3B%7D; _csrf=9131a3944b126561170557e5820e074494399dd208cd5b2967c14ac755faff2ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22FvopAk_n2zDNI0oUWjZZZ1yiuD0Q0Vt4%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 23:57:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28866\r\netag: W/\"70c2-3bERxLrjwf5HyQUt9+YCU6JQvmU\"\r\nx-powered-by: Express\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":28866,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"46af93c15b4f6a6e038f52f1fbf67fbd","sha1":"ddb111c4bae3c1fe47c9052df7e60253a250be65","sha256":"9556d6ec4275e3b3c25ddff8e64053af257202edd1fbbc2c20e48f0bb7bf1955","sha512":"8883805d17bd026fa32be23e1b53bbf1570f932d21f3638af1b4830ee8c99e9236090d1ca60fed25a2c91baacbcea40a99e4a70be5cb1f62c2faa27c702465ab","ssdeep":"768:lOER0ljRpAAP4KgyzLdq+9kFcUI51tUHNZTeiC9tH:vqO0gyvdtwcbt6ZWf","tlshash":"78d2f25d36e96f8a9ad0d0bc528fdc5f9955c82bec815d6c9002a0aa5bd6fcdc900e0f","first_seen":"2025-11-03T23:57:41.08564Z","last_seen":"2025-11-03T23:57:41.08564Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ley5moUAAAAAJxloiuF--u_uS28aYUj-0E6tSfZ\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=cLm1zuaUXPLFw7nzKiQTH1dX\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=6xpnpamaq1nk","date":"2025-11-03T23:57:04.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/cLm1zuaUXPLFw7nzKiQTH1dX/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 09:40:51 GMT\r\nexpires: Thu, 06 Nov 2025 09:40:51 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nage: 396973\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-04-13T13:13:16.224735Z","times_seen":553802,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dl.opensubtitles.org/en/download/sub/12699218","fqdn":"dl.opensubtitles.org","domain":"opensubtitles.org","tld":"org"},"ip":{"addr":"104.26.7.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-03T23:57:12.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opensubtitles.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Oct 2025 20:57:41 GMT","end":"Sun, 18 Jan 2026 20:57:40 GMT"},"fingerprint":{"sha1":"CE:DA:5B:06:46:2F:40:2A:56:F3:0C:26:BE:61:73:D6:96:15:84:83","sha256":"E1:A0:11:1A:0F:17:38:E7:19:1C:BA:17:BC:0F:38:1B:26:93:39:00:19:8B:46:95:FF:9C:E8:E7:BA:6F:C5:6B"}}},"request":{"raw":"GET /en/download/sub/12699218 HTTP/1.1\r\nHost: dl.opensubtitles.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 03 Nov 2025 23:57:12 GMT\r\ncontent-type: application/zip\r\ncontent-length: 20132\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, nofollow\r\naccept-language: ro\r\ncontent-disposition: attachment; filename=\"haxan.(1922).rum.1cd.(12699218).zip\"\r\npragma: public\r\nexpires: Mon, 1 Apr 2006 01:23:45 GMT\r\ncontent-transfer-encoding: Binary\r\ncache-control: must-revalidate, post-check=0, pre-check=0\r\ndownload-quota: 200\r\nx-cache-backend: lw5\r\nage: 0\r\nx-var-cache: MISS\r\nx-via: lb2\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=6,cfOrigin;dur=174\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D62szg9%2Fzl0V7Wl63hEoIxsw3u6vkrQBPTDZOvBS0rwG%2FCiHcrHYwLL5Jtg4f72A492EgsGOg%2FdS8gC6jPlFi8AwOwY08byCzlG%2Bdppza%2Bnq9g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nset-cookie: PHPSESSID=qyupzvQ2C16oicbRbT-LXYwcO-9; HttpOnly; Path=/; Domain=opensubtitles.org; Max-Age=21600; Expires=Tue, 04 Nov 2025 05:57:12 GMT\nserver=1; Path=/; Domain=opensubtitles.org; Max-Age=3600; Expires=Tue, 04 Nov 2025 00:57:12 GMT\npref_mk=%7B%22tv%22%3A0%2C%22m%22%3A1%7D; Path=/; Domain=opensubtitles.org; Max-Age=315360000; Expires=Thu, 01 Nov 2035 23:57:12 GMT\r\ncf-ray: 998fd00ae9f456bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20132,"size_decoded":0,"mime_type":"application/zip","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","md5":"82ac36b23b1678fbc07f4ee768ad342f","sha1":"b1e1ba0e42d5a59965f2238629c6fe5fdea6bdab","sha256":"5668756063c42c4422c4778b9bee6e8a768b78bac30a45df8c3ab1f4b747064f","sha512":"035ed970d6e8a796f2b418e773e076402f201d7bc85589f4260ae9b5ea188ff3b80ee8eca4c360bb9d02f5be3f55263e86fc0e271d572451ab2078ce3d03258d","ssdeep":"384:QSUlqexBEIsibBXKu5Dc1SmWaVK+JyidWO38MEQ55K:QfBENu6SOb4SnGq5K","tlshash":"0592e1f4a56465d02bb3e23f4dadb11f87d00a818a4502cbc646e77d7232ef34266387","first_seen":"2025-11-03T23:57:41.086916Z","last_seen":"2025-11-03T23:57:41.086916Z","times_seen":1,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":41,"dns":22,"connect":1,"send":0,"wait":183,"receive":47,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/assets/player-ecb85467bf59af2e714761f7e6dd9d2d.css","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:01.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /assets/player-ecb85467bf59af2e714761f7e6dd9d2d.css HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218\r\nCookie: PHPSESSID=0eukvmut29qm3netvmnu9706dn; afsy_v1=23e2731ea660567ab22298ae16853f9b1542d49bb19be44de537a36adbf43b12a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22afsy_v1%22%3Bi%3A1%3Bs%3A148%3A%22%7B%22ip%22%3A%2291.90.42.154%22%2C%22url%22%3A%22%22%2C%22payload%22%3A%7B%22ref%22%3A%22os%22%2C%22utm_source%22%3A%22osub_sub%22%2C%22imdb%22%3A%22tt0013257%22%2C%22term%22%3A%22Haxan%22%2C%22sub%22%3A%2212699218%22%7D%2C%22system_key%22%3A%22tolt%22%7D%22%3B%7D; _csrf=9131a3944b126561170557e5820e074494399dd208cd5b2967c14ac755faff2ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22FvopAk_n2zDNI0oUWjZZZ1yiuD0Q0Vt4%22%3B%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 23:57:01 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\ncache-control: max-age=604800\r\netag: W/\"68e76cd3-f9cf\"\r\nexpires: Wed, 05 Nov 2025 09:30:00 GMT\r\nlast-modified: Thu, 09 Oct 2025 08:05:39 GMT\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63951,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (63949), with no line terminators","md5":"ecb85467bf59af2e714761f7e6dd9d2d","sha1":"f4bffa2aec78405cb7b340d0ebf5174428f59856","sha256":"b78fe7a3f02517d4025ff25ca6b41c0a1307f561f9c552534f7be9ad0c166e69","sha512":"cb134693c85a01c06703c42999a58e8d282a5ec61a8caf160484b6fa4b2e3ef09d6bbec579d4c8ce6bf04dd9d8099b89fa3958046b33a7fc0717902908770072","ssdeep":"768:Ja4ibtycKa9ErIbHXcrP+k8WxV15+vl3TcF6PzctDgT9OhY0zbbhqoYOl76:yX9Er3rP+k8WxBgT9OhY0zbbhqoYO16","tlshash":"f5539365f014dafc423fc145eec0f756913df422eda169ade21b7f688edb196102b288","first_seen":"2025-11-03T23:57:41.087697Z","last_seen":"2026-04-11T16:24:47.164799Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/get-premium-2025/icons/ads-black.svg","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:02.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/get-premium-2025/icons/ads-black.svg HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218\r\nCookie: PHPSESSID=0eukvmut29qm3netvmnu9706dn; afsy_v1=23e2731ea660567ab22298ae16853f9b1542d49bb19be44de537a36adbf43b12a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22afsy_v1%22%3Bi%3A1%3Bs%3A148%3A%22%7B%22ip%22%3A%2291.90.42.154%22%2C%22url%22%3A%22%22%2C%22payload%22%3A%7B%22ref%22%3A%22os%22%2C%22utm_source%22%3A%22osub_sub%22%2C%22imdb%22%3A%22tt0013257%22%2C%22term%22%3A%22Haxan%22%2C%22sub%22%3A%2212699218%22%7D%2C%22system_key%22%3A%22tolt%22%7D%22%3B%7D; _csrf=9131a3944b126561170557e5820e074494399dd208cd5b2967c14ac755faff2ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22FvopAk_n2zDNI0oUWjZZZ1yiuD0Q0Vt4%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 23:57:01 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncache-control: max-age=604800\r\netag: W/\"68541798-64b\"\r\nexpires: Wed, 05 Nov 2025 09:30:00 GMT\r\nlast-modified: Thu, 19 Jun 2025 13:58:48 GMT\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1611,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b286108774a115ad5843ea2e5582f185","sha1":"babb54771300ce071b375d7c822aa0280a6bf171","sha256":"21a70c6ba27fe4fb99836b6293b87a27615f10d252eefc7fb37570c22292c4e5","sha512":"fe19fb409235dce63e497aca6042fdf1d5a9e862cdf344b366de447be18ba6e679fe7352b8d08f48bfd6296be0de6e84d05da3a3125dd8d7f85dfd47b3a40c44","ssdeep":"","tlshash":"703158fa12f94eb579c247005fc435de2139a28b71f102c0a7661c736cb53ab66b9728","first_seen":"2025-11-03T23:57:41.088543Z","last_seen":"2026-04-11T16:24:47.155168Z","times_seen":8,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Dosis:300,400,600,700|Nunito:400,600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:02.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"1D:8E:3A:85:91:AC:63:71:94:8B:0E:61:45:34:D9:86:AB:A6:E2:CE","sha256":"E6:93:4E:53:89:15:41:28:27:59:AA:84:50:96:96:1E:2A:98:7E:08:60:AE:68:62:AE:DD:86:AB:DB:0F:FE:2B"}}},"request":{"raw":"GET /css?family=Dosis:300,400,600,700|Nunito:400,600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 03 Nov 2025 23:57:02 GMT\r\ndate: Mon, 03 Nov 2025 23:57:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8490,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f510a56ba2344b6f9a605a3ed31c2473","sha1":"ac5f92242d7128cf836d9824da514c1ca9604f1d","sha256":"7925b737eea83356dcc92ba76911c5e9ff2a50a38a214284164338f65e1184bb","sha512":"b3496ad8960fef35cab62b40502e679bf06a211bae7dddf0d63d9082989776d1a7aeb8d5fe6fd694341a76e197511e422d2bc40aa6bce36771435974faf7b658","ssdeep":"192:ctnBySgOBTSqEB1SZrBWEH+yptkUkH0yXLkeH:cRSg/l6DT","tlshash":"0102cd91046ba400eb871dc223ce7e32ed5ea2557454c57daffd4888ec9bc362366b0e","first_seen":"2025-09-22T15:37:58.618477Z","last_seen":"2026-04-05T16:41:26.846531Z","times_seen":24,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:03.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ww1.lookmovie.pn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 09:55:03 GMT\r\nexpires: Fri, 30 Oct 2026 09:55:03 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nage: 396120\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-04-13T13:12:42.840566Z","times_seen":209275,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/ads/global1_desk.gif","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:03.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/ads/global1_desk.gif HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218\r\nCookie: PHPSESSID=0eukvmut29qm3netvmnu9706dn; afsy_v1=23e2731ea660567ab22298ae16853f9b1542d49bb19be44de537a36adbf43b12a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22afsy_v1%22%3Bi%3A1%3Bs%3A148%3A%22%7B%22ip%22%3A%2291.90.42.154%22%2C%22url%22%3A%22%22%2C%22payload%22%3A%7B%22ref%22%3A%22os%22%2C%22utm_source%22%3A%22osub_sub%22%2C%22imdb%22%3A%22tt0013257%22%2C%22term%22%3A%22Haxan%22%2C%22sub%22%3A%2212699218%22%7D%2C%22system_key%22%3A%22tolt%22%7D%22%3B%7D; _csrf=9131a3944b126561170557e5820e074494399dd208cd5b2967c14ac755faff2ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22FvopAk_n2zDNI0oUWjZZZ1yiuD0Q0Vt4%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 23:57:03 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1219797\r\ncache-control: max-age=604800\r\netag: \"69038466-129cd5\"\r\nexpires: Thu, 06 Nov 2025 15:30:53 GMT\r\nlast-modified: Thu, 30 Oct 2025 15:29:42 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1219797,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 970 x 250","md5":"a4089db8ae6690d92fb2181c57dc65ad","sha1":"d000c149c3e8fa898c684d05a1fe7d5147d315ef","sha256":"4845c6dcdb45242d227dc32b43498a569361a2c20e9dd08f498a9e8503c48f43","sha512":"97c3255f5155b41cc41495153b4c8a00a2b6d8a930619952289c38daafbb71551398086286b6330bcefdc83bb3a8e8ced753d3f3511c92d4ebd7d38f9043f083","ssdeep":"24576:JKaaRJZsxOymIY0wuwHccnNTdzcD8+Q2sb:JwJZswj84R1NcQgE","tlshash":"0b25337965624971d09a16b4a2d32b090eb7789e2280b84711fcb31d6bc7c7be9f1d83","first_seen":"2025-11-03T23:57:41.090562Z","last_seen":"2025-11-09T16:43:17.856144Z","times_seen":2,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:01.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"1D:8E:3A:85:91:AC:63:71:94:8B:0E:61:45:34:D9:86:AB:A6:E2:CE","sha256":"E6:93:4E:53:89:15:41:28:27:59:AA:84:50:96:96:1E:2A:98:7E:08:60:AE:68:62:AE:DD:86:AB:DB:0F:FE:2B"}}},"request":{"raw":"GET /css2?family=Poppins:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 03 Nov 2025 23:57:02 GMT\r\ndate: Mon, 03 Nov 2025 23:57:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5993,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9c51d4ed0528132b3a6be429dca636b5","sha1":"18cc681e66f5b6696a4ff89774e53aef2a51af00","sha256":"45a8505a86014b27b96db52f81bf4dbced7a8eb9b419d28e89bcfccb334b49b2","sha512":"3fa61799ef336da5f4c9a0a0fcf7d14fdb09e2e18cbc1488eae44a06b61beca3831c9eadd77b22a16a84e8041074d74d51429e23a1a6e8ce9b56860ed682e800","ssdeep":"96:SO1arO1aTJc+ukO1aaN3OEanOEaCJc+ukOEauN3OXa3OXavJc+ukOXaON3OxMac8:4hHdPgKQcXr3lVwa3RzJZ","tlshash":"15c19cd1087be114ab831cc123cf7d36ee1e9255b810e5786bfd0c98adabc654362b2d","first_seen":"2025-09-17T11:27:36.868673Z","last_seen":"2026-04-13T13:42:27.406Z","times_seen":5964,"resource_available":false,"data":null}},"time_used":574,"timings":{"blocked":256,"dns":1,"connect":20,"send":0,"wait":32,"receive":0,"ssl":256},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/assets/player-d133adc282369337d344769c90f63f74.js","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:02.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /assets/player-d133adc282369337d344769c90f63f74.js HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218\r\nCookie: PHPSESSID=0eukvmut29qm3netvmnu9706dn; afsy_v1=23e2731ea660567ab22298ae16853f9b1542d49bb19be44de537a36adbf43b12a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22afsy_v1%22%3Bi%3A1%3Bs%3A148%3A%22%7B%22ip%22%3A%2291.90.42.154%22%2C%22url%22%3A%22%22%2C%22payload%22%3A%7B%22ref%22%3A%22os%22%2C%22utm_source%22%3A%22osub_sub%22%2C%22imdb%22%3A%22tt0013257%22%2C%22term%22%3A%22Haxan%22%2C%22sub%22%3A%2212699218%22%7D%2C%22system_key%22%3A%22tolt%22%7D%22%3B%7D; _csrf=9131a3944b126561170557e5820e074494399dd208cd5b2967c14ac755faff2ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22FvopAk_n2zDNI0oUWjZZZ1yiuD0Q0Vt4%22%3B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 23:57:01 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\ncache-control: max-age=604800\r\netag: W/\"68e76cd3-ebdc3\"\r\nexpires: Wed, 05 Nov 2025 09:30:00 GMT\r\nlast-modified: Thu, 09 Oct 2025 08:05:39 GMT\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":966083,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2600)","md5":"d133adc282369337d344769c90f63f74","sha1":"ed3fa6697b288c9f0d495d15fa094024146113b0","sha256":"7388eef645f6ddf050af54aea56f70f487471fa8724c2ee9f682184ed60fba35","sha512":"6c914619e4f48f7ba4c33c0592cd603a96a712d4249310ef05352b986a8a2b627da899f1392b7c0fe869035a73a9d5dad1019cb7d8352f989a67d3f388cb7483","ssdeep":"24576:x7fqHQgQ2ZHYzfuEMZERpPxzzo7uafROgeKs:xbqHQgQ2NCUZERpPxzzo7uaZOgeKs","tlshash":"c8254cd87292b06247e7b0b5903f120bb33b99696408c05cf529e9d93db8e4d917bf78","first_seen":"2025-11-03T23:57:41.09178Z","last_seen":"2025-11-03T23:57:41.09178Z","times_seen":1,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/android-icon-192x192.png","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:03.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /android-icon-192x192.png HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218\r\nCookie: PHPSESSID=0eukvmut29qm3netvmnu9706dn; afsy_v1=23e2731ea660567ab22298ae16853f9b1542d49bb19be44de537a36adbf43b12a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22afsy_v1%22%3Bi%3A1%3Bs%3A148%3A%22%7B%22ip%22%3A%2291.90.42.154%22%2C%22url%22%3A%22%22%2C%22payload%22%3A%7B%22ref%22%3A%22os%22%2C%22utm_source%22%3A%22osub_sub%22%2C%22imdb%22%3A%22tt0013257%22%2C%22term%22%3A%22Haxan%22%2C%22sub%22%3A%2212699218%22%7D%2C%22system_key%22%3A%22tolt%22%7D%22%3B%7D; _csrf=9131a3944b126561170557e5820e074494399dd208cd5b2967c14ac755faff2ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22FvopAk_n2zDNI0oUWjZZZ1yiuD0Q0Vt4%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 23:57:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 11644\r\ncache-control: max-age=604800\r\netag: \"660e9645-2d7c\"\r\nexpires: Wed, 05 Nov 2025 09:33:46 GMT\r\nlast-modified: Thu, 04 Apr 2024 12:00:05 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11644,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"3a60f6127d6c7e4c05e4984679c2e923","sha1":"9271ccd51604b6f88cd9f806dab113a3a149a9d7","sha256":"a83e583931d4d3e34189732010661b00c11ad1cb6455da23032d957269a39026","sha512":"3a0ddf32720e4b19aa2d969061a6f2ebb99c9c49b0328321fd0bb138ec6d49d479b92c1e8aee5bf555cef6de639a499d1a84ff4b35c1cadaba63c2c78dd5e1a0","ssdeep":"192:ZRBnpbXTI/d1dnB6yK2cu4VSPa6M47V/13rcjz9S8nuBfdfptxqe10pECMwkEek1:/XC16lw4VSPa6VR/1IjxJnIOe1JCVem","tlshash":"7132afcbc3857eab46c016a7ddd775d3938ddbc4aa73a0443108f59869a0f4a7b7901c","first_seen":"2023-05-07T19:35:35Z","last_seen":"2026-04-11T16:24:47.183903Z","times_seen":82,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.tolt.io/v1/referrals","fqdn":"api.tolt.io","domain":"tolt.io","tld":"io"},"ip":{"addr":"18.208.242.28","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:04.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"api.tolt.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 27 Sep 2025 00:00:00 GMT","end":"Mon, 26 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D9:C4:88:13:05:CA:C5:EC:A5:E3:8B:04:68:2E:1C:C7:A5:09:E9:04","sha256":"6B:4B:B2:54:51:72:1D:CD:F2:0D:C2:FF:F4:E7:E7:66:29:2C:57:B0:EE:7C:27:A4:11:55:4F:56:B6:BC:6D:70"}}},"request":{"raw":"POST /v1/referrals HTTP/1.1\r\nHost: api.tolt.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-Type: application/json\r\nContent-Length: 76\r\nOrigin: https://ww1.lookmovie.pn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-origin: *\r\ncontent-length: 72\r\ncontent-type: application/json; charset=utf-8\r\ndate: Mon, 03 Nov 2025 23:57:04 GMT\r\netag: W/\"48-Waho1XfX30ZopF2vlwf1bBwP+Vo\"\r\nx-powered-by: Express\r\nx-envoy-upstream-service-time: 18\r\nserver: envoy\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":72,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0ec6852ef83b04511e1ae604351c372c","sha1":"59a868d577d7df4668a45daf9707f56c1c0ff95a","sha256":"7be5d7c5ae35bdfa56af88eadb9a8149e072182ac1afc66d14054ce223750050","sha512":"11ba8d9142572224ab8e278dc88568b03cda42e279fdf75bab76f6df3f1a5de85ab401806735123700d57b0009cf7393ca4ac2d58d3295bbb66624b58434b327","ssdeep":"","tlshash":"49a022e0a30f220a300303c303c00828003c08c8c2303ec8c00cf22c2082a2a8f0e30c","first_seen":"2025-11-03T23:57:41.093281Z","last_seen":"2025-11-03T23:57:41.093281Z","times_seen":1,"resource_available":false,"data":null}},"time_used":677,"timings":{"blocked":-1,"dns":95,"connect":98,"send":0,"wait":115,"receive":0,"ssl":270},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/cLm1zuaUXPLFw7nzKiQTH1dX/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=cLm1zuaUXPLFw7nzKiQTH1dX\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026bft=0dAFcWeA4fGXA6JKvgKv8XX-0g36zoZ45H86IO8lPGdXiCK-zJxRbaLWyCg0DynM2Q64B4W_QQy5eH4t4NUejTlP-vtj-WvzuPXA","date":"2025-11-03T23:57:05.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /recaptcha/releases/cLm1zuaUXPLFw7nzKiQTH1dX/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 353843\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 10:00:06 GMT\r\nexpires: Fri, 30 Oct 2026 10:00:06 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 25 Oct 2025 04:01:22 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 395819\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":829613,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (558)","md5":"07bd9db323e20c5712464eae395c4bbe","sha1":"ac8fec5c3ef6987c9bba9ec707575c133dc32876","sha256":"58e16769fc5ea29486677fff7b25f0acd26e0077ef0e0d0a1c5c56545bc7b77a","sha512":"c840b50405fd4d0c82ccff537be49125cdc04674237f1945e8963c276dba99bb39b275d952f5033a7ea3978af474d3a56e932709673d00b973454102489dcef1","ssdeep":"6144:KmRDQSxp9xWrL3fe2ioyvWCbhjXapYaqqPeGfFrFVCk6y27CKIRIR8LzWpKofGnZ:d9Q49YrL3feq2sFVUCTI6EKofqnZ","tlshash":"d50519dcb5427b619332bdf160671068673e9a56c458096db2d8c4f43eb8809b2a3ff7","first_seen":"2025-10-29T09:05:47.950022Z","last_seen":"2026-04-06T09:30:25.517807Z","times_seen":13349,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/get-premium-2025/icons/arrow-back.svg","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:01.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/get-premium-2025/icons/arrow-back.svg HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218\r\nCookie: PHPSESSID=0eukvmut29qm3netvmnu9706dn; afsy_v1=23e2731ea660567ab22298ae16853f9b1542d49bb19be44de537a36adbf43b12a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22afsy_v1%22%3Bi%3A1%3Bs%3A148%3A%22%7B%22ip%22%3A%2291.90.42.154%22%2C%22url%22%3A%22%22%2C%22payload%22%3A%7B%22ref%22%3A%22os%22%2C%22utm_source%22%3A%22osub_sub%22%2C%22imdb%22%3A%22tt0013257%22%2C%22term%22%3A%22Haxan%22%2C%22sub%22%3A%2212699218%22%7D%2C%22system_key%22%3A%22tolt%22%7D%22%3B%7D; _csrf=9131a3944b126561170557e5820e074494399dd208cd5b2967c14ac755faff2ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22FvopAk_n2zDNI0oUWjZZZ1yiuD0Q0Vt4%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 23:57:01 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncache-control: max-age=604800\r\netag: W/\"68541798-172\"\r\nexpires: Wed, 05 Nov 2025 09:30:00 GMT\r\nlast-modified: Thu, 19 Jun 2025 13:58:48 GMT\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":370,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cbb91b344e6beaa8c776d44ce337f76c","sha1":"aaab6434727a62c9e44edfdb81dedd1226d06c1e","sha256":"bf98b69ce6dd822ce677f320f9958fdaba53917691249af7265b6d10fddf0f4d","sha512":"c3626c64b191ebcc0fe969a2ff3d844c3d73171a5ec39bc810534238ecaa36b5f73ff6e09d0c7fa1c58d0ae31b2ea91f13427a03ae80a7b7e406589598dc006c","ssdeep":"","tlshash":"c7e068e23268ce08e8f44000aaae1948823ee87cf2b045c6e3022805801369a352f72c","first_seen":"2025-11-03T23:57:41.09407Z","last_seen":"2026-04-11T16:24:47.169011Z","times_seen":4,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?onload=onRecaptchaLoaded\u0026render=6Ley5moUAAAAAJxloiuF--u_uS28aYUj-0E6tSfZ","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:02.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:39:48 GMT","end":"Mon, 05 Jan 2026 08:39:47 GMT"},"fingerprint":{"sha1":"34:96:E3:91:95:41:1D:19:32:0F:BF:D5:FD:64:58:3A:9D:78:2B:60","sha256":"62:50:CF:99:9A:03:0D:F9:C6:E2:3B:D5:E6:B0:6E:95:82:57:DA:D5:48:A7:C5:39:E6:47:48:BB:08:13:FE:83"}}},"request":{"raw":"GET /recaptcha/api.js?onload=onRecaptchaLoaded\u0026render=6Ley5moUAAAAAJxloiuF--u_uS28aYUj-0E6tSfZ HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Mon, 03 Nov 2025 23:57:02 GMT\r\ndate: Mon, 03 Nov 2025 23:57:02 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1111,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1111), with no line terminators","md5":"ca77a2a42ac6e6e07bae365f3ba27190","sha1":"aa2e4291dc66df53047006e95e20cf9ec0910029","sha256":"00b330eb51e301bdc60ad21070dcc7b796dbdd173c96d965c96a9aa173266ef1","sha512":"6644b5f84da510f02b3d8b22c7030590496c2afdffb531f6227faecd02f1573d0322acf6879a9c1527790f0eac65091d883a3044a7fde2d8e3ea11092e91c419","ssdeep":"","tlshash":"312163721b08f0390f7209e1e2facbb1e891701df01884e8a512da841e7adcbce04959","first_seen":"2025-11-02T11:30:38.196131Z","last_seen":"2025-11-03T23:57:41.094962Z","times_seen":2,"resource_available":true,"data":null}},"time_used":545,"timings":{"blocked":234,"dns":1,"connect":21,"send":0,"wait":34,"receive":0,"ssl":250},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.tolt.io/v1/referrals","fqdn":"api.tolt.io","domain":"tolt.io","tld":"io"},"ip":{"addr":"18.208.242.28","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:03.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"api.tolt.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 27 Sep 2025 00:00:00 GMT","end":"Mon, 26 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D9:C4:88:13:05:CA:C5:EC:A5:E3:8B:04:68:2E:1C:C7:A5:09:E9:04","sha256":"6B:4B:B2:54:51:72:1D:CD:F2:0D:C2:FF:F4:E7:E7:66:29:2C:57:B0:EE:7C:27:A4:11:55:4F:56:B6:BC:6D:70"}}},"request":{"raw":"OPTIONS /v1/referrals HTTP/1.1\r\nHost: api.tolt.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-requested-with\r\nReferer: https://ww1.lookmovie.pn/\r\nOrigin: https://ww1.lookmovie.pn\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\naccess-control-allow-headers: content-type,x-requested-with\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: *\r\ndate: Mon, 03 Nov 2025 23:57:04 GMT\r\nvary: Access-Control-Request-Headers\r\nx-powered-by: Express\r\nx-envoy-upstream-service-time: 1\r\nserver: envoy\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-13T13:12:12.581168Z","times_seen":13705127,"resource_available":true,"data":null}},"time_used":1023,"timings":{"blocked":462,"dns":97,"connect":93,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/p/w300/b2ef866f1b88cffa17da794f06377320.webp","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:04.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/p/w300/b2ef866f1b88cffa17da794f06377320.webp HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218\r\nCookie: PHPSESSID=0eukvmut29qm3netvmnu9706dn; afsy_v1=23e2731ea660567ab22298ae16853f9b1542d49bb19be44de537a36adbf43b12a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22afsy_v1%22%3Bi%3A1%3Bs%3A148%3A%22%7B%22ip%22%3A%2291.90.42.154%22%2C%22url%22%3A%22%22%2C%22payload%22%3A%7B%22ref%22%3A%22os%22%2C%22utm_source%22%3A%22osub_sub%22%2C%22imdb%22%3A%22tt0013257%22%2C%22term%22%3A%22Haxan%22%2C%22sub%22%3A%2212699218%22%7D%2C%22system_key%22%3A%22tolt%22%7D%22%3B%7D; _csrf=9131a3944b126561170557e5820e074494399dd208cd5b2967c14ac755faff2ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22FvopAk_n2zDNI0oUWjZZZ1yiuD0Q0Vt4%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 23:57:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19762\r\netag: W/\"4d32-eWONSrx2qN7l0OSOTuo0yRd0BOs\"\r\nx-powered-by: Express\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":19762,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ec77de10c1869990500fff094c0b91b0","sha1":"79638d4abc76a8dee5d0e48e4eea34c9177404eb","sha256":"a15e64b9555a55db34eb162e4027f3c1e3c49f933fd398164655a9cd70ba662b","sha512":"7207c6295b8994c318e5e901cc433d6310877c3c92a28e3e92ea677d158fe20a32fa0c13e2442dacd648edc0b653f5cc8e289a93a39893e4477d9dbe8dc17f8a","ssdeep":"384:QpLW+mUWKOTNyPJKNDVcx1dcgn8FTjWuRCk8iduYjSfVIz0:cLW+LAKeSIg8FucCk8iUYjS9F","tlshash":"ca92c062d97b674eb89072103bbe67076472eb9f8e4112a52d3800919f5f924f60f2b4","first_seen":"2025-11-03T23:57:41.096196Z","last_seen":"2025-11-03T23:57:41.096196Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=cLm1zuaUXPLFw7nzKiQTH1dX\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=bt5wozocy50p","date":"2025-11-03T23:57:04.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15344\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 09:54:54 GMT\r\nexpires: Fri, 30 Oct 2026 09:54:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 16 Oct 2017 17:32:55 GMT\r\ncontent-type: font/woff2\r\nage: 396130\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15344, version 1.0","md5":"5d4aeb4e5f5ef754e307d7ffaef688bd","sha1":"06db651cdf354c64a7383ea9c77024ef4fb4cef8","sha256":"3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc","sha512":"7eb7c301df79d35a6a521fae9d3dccc0a695d3480b4d34c7d262dd0c67abec8437ed40e2920625e98aaeafba1d908dec69c3b07494ec7c29307de49e91c2ef48","ssdeep":"384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw","tlshash":"5162e16aef76dc7e4f1af1361c01b45404462290ba6155eff00d6e1d4eed1aff461392","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-13T13:05:45.848949Z","times_seen":537061,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/api/v1/security/movie-access?id_movie=119338\u0026hash=OHf6XMAIxK_yDDBuoP-TtQ\u0026expires=1762235821","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:03.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /api/v1/security/movie-access?id_movie=119338\u0026hash=OHf6XMAIxK_yDDBuoP-TtQ\u0026expires=1762235821 HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218\r\nCookie: PHPSESSID=0eukvmut29qm3netvmnu9706dn; afsy_v1=23e2731ea660567ab22298ae16853f9b1542d49bb19be44de537a36adbf43b12a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22afsy_v1%22%3Bi%3A1%3Bs%3A148%3A%22%7B%22ip%22%3A%2291.90.42.154%22%2C%22url%22%3A%22%22%2C%22payload%22%3A%7B%22ref%22%3A%22os%22%2C%22utm_source%22%3A%22osub_sub%22%2C%22imdb%22%3A%22tt0013257%22%2C%22term%22%3A%22Haxan%22%2C%22sub%22%3A%2212699218%22%7D%2C%22system_key%22%3A%22tolt%22%7D%22%3B%7D; _csrf=9131a3944b126561170557e5820e074494399dd208cd5b2967c14ac755faff2ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22FvopAk_n2zDNI0oUWjZZZ1yiuD0Q0Vt4%22%3B%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 23:57:03 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: no-store, no-cache, must-revalidate\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\nlast-modified: Monday, 03-Nov-2025 23:57:03 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11690,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"6d839a56948977b15643dc1ebcbe8146","sha1":"d466263600901e17559e5904863d7859451b6e53","sha256":"fcf79ef276c0924c8a31a661aae78adfd33a1b0c681c02242ecdbcf6fb716799","sha512":"f97f3a32af523e1d2163cf8cdb67efd96184019cb06f16bda53a21ce70e0a3afee2aea07cadbc4360fa982827e183a2ba7c384e9c0f8a06c06e19128c537881a","ssdeep":"192:KmHb7Mynz+2xH/kCDZlFncdML5GlflfRqp6PJSP2bf5HYyJIHK15HyPWgJPvNqJe:Lb7Myn62xH/5DZlFnSm5GldfRqp6hS+S","tlshash":"6432ac3684602ff90ec9a2f817f1bc3444f8a181d4d9cd1d55ddcea908ac669e652fe3","first_seen":"2025-11-03T23:57:41.097109Z","last_seen":"2025-11-03T23:57:41.097109Z","times_seen":1,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=cLm1zuaUXPLFw7nzKiQTH1dX","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=cLm1zuaUXPLFw7nzKiQTH1dX\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=bt5wozocy50p","date":"2025-11-03T23:57:04.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:46 GMT","end":"Mon, 05 Jan 2026 08:37:45 GMT"},"fingerprint":{"sha1":"2C:0B:CF:F3:2B:F7:F0:76:D4:B1:1F:DB:E2:21:58:B5:EC:B7:6A:FF","sha256":"DE:F5:87:79:4F:56:FB:34:64:B9:21:C9:8F:92:27:D5:ED:C7:A3:88:BD:53:84:65:7D:EF:99:09:59:84:48:BE"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=cLm1zuaUXPLFw7nzKiQTH1dX HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=cLm1zuaUXPLFw7nzKiQTH1dX\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=bt5wozocy50p\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Mon, 03 Nov 2025 23:57:04 GMT\r\ndate: Mon, 03 Nov 2025 23:57:04 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"b79caeed08076f66c6ec66896ee38c28","sha1":"9758dcb40baace03822d8d7369910adc1adf8af6","sha256":"f1e9dbd176cb410ce3ccf7a85573b54040101e61e4fd30fe47826848b40eaf8d","sha512":"efec54da89726feb1fdde81edccc6c62ad40a349d93e62def28260b31f1442ea7f397f9023ef7bd076bab625e5fd7a2f05c3d486d16a69090a36ae7477aaf673","ssdeep":"","tlshash":"41b012230910c82d0d0a0112c577d7f8e011417cdba1c4f082762fd409205a74204901","first_seen":"2025-10-29T09:05:47.979236Z","last_seen":"2026-04-06T09:30:25.558041Z","times_seen":11301,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/get-premium-2025/icons/hd-black.svg","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:01.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/get-premium-2025/icons/hd-black.svg HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218\r\nCookie: PHPSESSID=0eukvmut29qm3netvmnu9706dn; afsy_v1=23e2731ea660567ab22298ae16853f9b1542d49bb19be44de537a36adbf43b12a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22afsy_v1%22%3Bi%3A1%3Bs%3A148%3A%22%7B%22ip%22%3A%2291.90.42.154%22%2C%22url%22%3A%22%22%2C%22payload%22%3A%7B%22ref%22%3A%22os%22%2C%22utm_source%22%3A%22osub_sub%22%2C%22imdb%22%3A%22tt0013257%22%2C%22term%22%3A%22Haxan%22%2C%22sub%22%3A%2212699218%22%7D%2C%22system_key%22%3A%22tolt%22%7D%22%3B%7D; _csrf=9131a3944b126561170557e5820e074494399dd208cd5b2967c14ac755faff2ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22FvopAk_n2zDNI0oUWjZZZ1yiuD0Q0Vt4%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 23:57:01 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncache-control: max-age=604800\r\netag: W/\"68541798-4e2\"\r\nexpires: Wed, 05 Nov 2025 09:30:00 GMT\r\nlast-modified: Thu, 19 Jun 2025 13:58:48 GMT\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1250,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cc504364855df20d5f864844419b6f29","sha1":"2ff9a6f0ff89a92e67bc5bced5cc93959c5bdccf","sha256":"e5f0fed164083ae347157676abb42287eb3fe25ce3015b485fa2ac1f400fb215","sha512":"7d99556e2ae5ba8d17ee7e3148e40c56a90804fab230914da5a64b907496e2d54dcc0d3976799f036d558fbdd9c4bbcf8c59db570df8029c748049f9af1fa149","ssdeep":"","tlshash":"3a21caf1a7ca53d048d1c3a2baf8a68c3237f394725f11c457ce9d658c96177a3082a1","first_seen":"2025-11-03T23:57:41.098421Z","last_seen":"2026-04-11T16:24:47.116519Z","times_seen":8,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.opensubtitles.org/libs/js/lm-os.js?v3","fqdn":"static.opensubtitles.org","domain":"opensubtitles.org","tld":"org"},"ip":{"addr":"104.26.7.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:02.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opensubtitles.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Oct 2025 20:57:41 GMT","end":"Sun, 18 Jan 2026 20:57:40 GMT"},"fingerprint":{"sha1":"CE:DA:5B:06:46:2F:40:2A:56:F3:0C:26:BE:61:73:D6:96:15:84:83","sha256":"E1:A0:11:1A:0F:17:38:E7:19:1C:BA:17:BC:0F:38:1B:26:93:39:00:19:8B:46:95:FF:9C:E8:E7:BA:6F:C5:6B"}}},"request":{"raw":"GET /libs/js/lm-os.js?v3 HTTP/1.1\r\nHost: static.opensubtitles.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 03 Nov 2025 23:57:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Nov 2024 15:00:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QKpep5nryw%2FxQag4GKmgvS5BAWqBWVNpJYd0yz7Y3%2B3oKIAsHf%2BF6Hah%2FcJHU%2BNTYXkOSn730VYkb6RASIbXMIOo%2Bv9T0LrWJ3uqcfX%2BhUOe00PzCgKnhQ%3D%3D\"}]}\r\nexpires: Sun, 19 Jul 2026 06:13:43 GMT\r\ncache-control: public, max-age=31536000\r\nx-cache-backend: lw1\r\nage: 2058123\r\nx-var-cache: HIT\r\nx-var-cache-hits: 5816\r\nx-via: lb2\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\netag: W/\"67473413-dd6\"\r\ncontent-encoding: br\r\ncf-ray: 998fcfc7d9ec2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3542,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document, ASCII text","md5":"21798ba897ff2db29e218bd9e284998b","sha1":"27a4e2d3735db1f3c6f80d74fc50ae30b056a5ce","sha256":"cb9e2654f0928d5a3afa2823687fac121dccf82a9ae6cca50a58aaff014fd65c","sha512":"fc38cb6e0a4aaa63f9b02ae0d0304b38bd2a3d177fb5c5a1b4a208e1461fcf6185a5df78a697efba12fc59549d5c2a44682d894ee4a83faa15aece0ed6ba9402","ssdeep":"","tlshash":"3a71631489730b301c9352f1f7ee3b5aa6b60123bd8ac951be9d8b8c5fd0a24c5133ca","first_seen":"2025-11-03T23:57:41.099212Z","last_seen":"2025-11-03T23:57:41.099212Z","times_seen":1,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":42,"dns":26,"connect":1,"send":0,"wait":18,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/ft-bg.webp","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:02.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/ft-bg.webp HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/assets/all-c421915f540d64642dc87a4ba8dcff15.css\r\nCookie: PHPSESSID=0eukvmut29qm3netvmnu9706dn; afsy_v1=23e2731ea660567ab22298ae16853f9b1542d49bb19be44de537a36adbf43b12a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22afsy_v1%22%3Bi%3A1%3Bs%3A148%3A%22%7B%22ip%22%3A%2291.90.42.154%22%2C%22url%22%3A%22%22%2C%22payload%22%3A%7B%22ref%22%3A%22os%22%2C%22utm_source%22%3A%22osub_sub%22%2C%22imdb%22%3A%22tt0013257%22%2C%22term%22%3A%22Haxan%22%2C%22sub%22%3A%2212699218%22%7D%2C%22system_key%22%3A%22tolt%22%7D%22%3B%7D; _csrf=9131a3944b126561170557e5820e074494399dd208cd5b2967c14ac755faff2ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22FvopAk_n2zDNI0oUWjZZZ1yiuD0Q0Vt4%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 23:57:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22956\r\netag: \"660e9646-59ac\"\r\nlast-modified: Thu, 04 Apr 2024 12:00:06 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22956,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x426, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d7e8d36e3a04cdee49fd9e453197dc5f","sha1":"2b974a466e166d95e9fed637a7a75034f5ba1648","sha256":"5a79deb011ce6daa86a9a7efd7d788bf63d8b267ac1e2282a71cb49072d93a54","sha512":"92b427bfaaed77e71876cfb98e6e2f1d29ea61f59924ca7e3925aa1af15180bd9371968fb8bdd05cf2e067947ef925b300bcf38b9e1466d041053d5cc7214816","ssdeep":"384:RZ81G9JtrAm0DeTrI1MPqd9uXBE+FOxv94tx8FHAnDHm/k2t6z5wfv/D:RCSxf0us1MCmTQv94tx8+DG/kG6z5Gr","tlshash":"7da2e05f3860f6e0566b3e19624644cb5cc24e74780072e36f59a498afe9f18e3f21a2","first_seen":"2023-05-07T19:35:35Z","last_seen":"2026-04-11T16:24:47.137569Z","times_seen":71,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:02.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ww1.lookmovie.pn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 10:00:28 GMT\r\nexpires: Fri, 30 Oct 2026 10:00:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nage: 395794\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-04-13T13:01:33.164596Z","times_seen":18798,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:04.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ww1.lookmovie.pn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 09:52:24 GMT\r\nexpires: Fri, 30 Oct 2026 09:52:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nage: 396279\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-04-13T13:12:42.850819Z","times_seen":198604,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/cLm1zuaUXPLFw7nzKiQTH1dX/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ley5moUAAAAAJxloiuF--u_uS28aYUj-0E6tSfZ\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=cLm1zuaUXPLFw7nzKiQTH1dX\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=6xpnpamaq1nk","date":"2025-11-03T23:57:04.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /recaptcha/releases/cLm1zuaUXPLFw7nzKiQTH1dX/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42504\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 09:37:26 GMT\r\nexpires: Fri, 30 Oct 2026 09:37:26 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 25 Oct 2025 04:01:22 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 397178\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82951,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ffdfb5b0145456858a3f521cd582dd14","sha1":"ca6ada749c730f981e0e6c00af2e4e0bc0fabea4","sha256":"0d25f9cfcf4f9a9f5eebb90c37ff6e85f78d56436c5bdb1981645104b0432161","sha512":"b279ffabef9bf6dd79b48c5f589d13f7528f7cda12d83931e9e89f723925511cd0f237e5655db0036207b7b4215a94cae2a58aa8c2341cb2d82f0300b7bc23f9","ssdeep":"1536:1fGNbFoZJSUYOOaLnAW8+IcTOIZCdthXwW5l1Dx7:1GRFauOxLA/+IcTOhLX1","tlshash":"15838e7338513b39fc2b9b616186b9edf21cc423e5514bfab6457a20c3db1968253b07","first_seen":"2025-10-29T09:05:47.986347Z","last_seen":"2026-04-06T09:30:25.542775Z","times_seen":11677,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.lmofficial.to/api/send","fqdn":"stats.lmofficial.to","domain":"lmofficial.to","tld":"to"},"ip":{"addr":"38.246.114.236","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:04.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmofficial.to","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 09:07:59 GMT","end":"Sat, 17 Jan 2026 09:07:58 GMT"},"fingerprint":{"sha1":"18:79:96:54:09:F2:D0:26:53:15:CD:1D:75:FB:B4:45:76:23:8E:4F","sha256":"3E:6D:46:C6:F4:4E:6E:BB:EF:A6:1C:19:42:D5:76:11:E2:12:26:29:78:29:24:53:A2:89:26:BD:77:8C:99:FC"}}},"request":{"raw":"OPTIONS /api/send HTTP/1.1\r\nHost: stats.lmofficial.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://ww1.lookmovie.pn/\r\nOrigin: https://ww1.lookmovie.pn\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.28.0\r\nDate: Mon, 03 Nov 2025 23:57:05 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: *\r\nAccess-Control-Allow-Methods: GET, DELETE, POST, PUT\r\nAccess-Control-Max-Age: 86400\r\nCache-Control: no-cache\r\nX-DNS-Prefetch-Control: on\r\nContent-Security-Policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is cloud.umami.is;frame-ancestors 'self'\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch\r\nallow: OPTIONS, POST\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-13T13:12:12.581168Z","times_seen":13705127,"resource_available":true,"data":null}},"time_used":721,"timings":{"blocked":290,"dns":1,"connect":135,"send":0,"wait":137,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/cLm1zuaUXPLFw7nzKiQTH1dX/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=cLm1zuaUXPLFw7nzKiQTH1dX\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026bft=0dAFcWeA4fGXA6JKvgKv8XX-0g36zoZ45H86IO8lPGdXiCK-zJxRbaLWyCg0DynM2Q64B4W_QQy5eH4t4NUejTlP-vtj-WvzuPXA","date":"2025-11-03T23:57:05.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /recaptcha/releases/cLm1zuaUXPLFw7nzKiQTH1dX/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42504\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 09:37:26 GMT\r\nexpires: Fri, 30 Oct 2026 09:37:26 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 25 Oct 2025 04:01:22 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 397179\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82951,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ffdfb5b0145456858a3f521cd582dd14","sha1":"ca6ada749c730f981e0e6c00af2e4e0bc0fabea4","sha256":"0d25f9cfcf4f9a9f5eebb90c37ff6e85f78d56436c5bdb1981645104b0432161","sha512":"b279ffabef9bf6dd79b48c5f589d13f7528f7cda12d83931e9e89f723925511cd0f237e5655db0036207b7b4215a94cae2a58aa8c2341cb2d82f0300b7bc23f9","ssdeep":"1536:1fGNbFoZJSUYOOaLnAW8+IcTOIZCdthXwW5l1Dx7:1GRFauOxLA/+IcTOhLX1","tlshash":"15838e7338513b39fc2b9b616186b9edf21cc423e5514bfab6457a20c3db1968253b07","first_seen":"2025-10-29T09:05:47.986347Z","last_seen":"2026-04-06T09:30:25.542775Z","times_seen":11677,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/cv/js/sender/v1/cast_sender.js?loadCastFramework=1","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:02.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /cv/js/sender/v1/cast_sender.js?loadCastFramework=1 HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cloudview\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"cloudview\"\r\nreport-to: {\"group\":\"cloudview\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/cloudview\"}]}\r\ncontent-length: 2007\r\ndate: Mon, 03 Nov 2025 23:57:02 GMT\r\nexpires: Mon, 03 Nov 2025 23:57:02 GMT\r\ncache-control: private, max-age=3000\r\nlast-modified: Tue, 16 Feb 2021 23:57:06 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4272,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1143)","md5":"b427175fa1078775eb792756e7b6d1e7","sha1":"4c55c0233d3d9002b3449c025f97821f8bb8900d","sha256":"ee147e859ad0f09aa50367974e38ab53e7c7054c4a51d400a7f45b0eb251454f","sha512":"af8d384188363378bc99c2e51523e74e1d18ba77d51bff7647a377a117499421f9e94477e09907925e46dad0a908b799a616d0b4855ffff064ba6350815063d3","ssdeep":"96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2","tlshash":"d191c68d7a70f4328aa138b6283f964ae37b50b5f4d4f0d5508ccce45a78e4a4726f6d","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-04-13T11:12:55.813298Z","times_seen":9027,"resource_available":true,"data":null}},"time_used":497,"timings":{"blocked":219,"dns":1,"connect":8,"send":0,"wait":16,"receive":1,"ssl":240},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/assets/aa199fce/jquery.js","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:02.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /assets/aa199fce/jquery.js HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218\r\nCookie: PHPSESSID=0eukvmut29qm3netvmnu9706dn; afsy_v1=23e2731ea660567ab22298ae16853f9b1542d49bb19be44de537a36adbf43b12a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22afsy_v1%22%3Bi%3A1%3Bs%3A148%3A%22%7B%22ip%22%3A%2291.90.42.154%22%2C%22url%22%3A%22%22%2C%22payload%22%3A%7B%22ref%22%3A%22os%22%2C%22utm_source%22%3A%22osub_sub%22%2C%22imdb%22%3A%22tt0013257%22%2C%22term%22%3A%22Haxan%22%2C%22sub%22%3A%2212699218%22%7D%2C%22system_key%22%3A%22tolt%22%7D%22%3B%7D; _csrf=9131a3944b126561170557e5820e074494399dd208cd5b2967c14ac755faff2ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22FvopAk_n2zDNI0oUWjZZZ1yiuD0Q0Vt4%22%3B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 23:57:01 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\ncache-control: max-age=604800\r\netag: W/\"68e76c9f-4638e\"\r\nexpires: Wed, 05 Nov 2025 09:41:46 GMT\r\nlast-modified: Thu, 09 Oct 2025 08:04:47 GMT\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":287630,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"23c7c5d2d1317508e807a6c7f777d6ed","sha1":"ad16c4a132ad2a03b4951185fed46d55397b5e88","sha256":"416a3b2c3bf16d64f6b5b6d0f7b079df2267614dd6847fc2f3271b4409233c37","sha512":"58d2f17cfffc71560bf6c8fc267a7a7add0192e6cb3f7d638531bdbe12ff179b84666839c04ccaa17a75909b25ccf416c0f4f57b23224b194a0a0cc72ce4ce4d","ssdeep":"6144:pJChNVls+TCtlFhTzeKR7cYmD2zK8EAbEtPx+WI+Y7cFyW48L/dyVxNaIPfytrAP:xf7cYmD43APx+WI+Y7cFyMyDTPfCAeuH","tlshash":"2354a4d9f78d112e423231aaac2f12cdb77cd171560458aebd4d597c24a083d83baf7a","first_seen":"2023-03-07T01:03:32Z","last_seen":"2026-04-13T13:20:27.661672Z","times_seen":7964,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"push-sdk.com/f/sdk.js?z=1500787","fqdn":"push-sdk.com","domain":"push-sdk.com","tld":"com"},"ip":{"addr":"23.88.8.123","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:02.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"push-sdk.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 11:06:22 GMT","end":"Tue, 25 Nov 2025 11:06:21 GMT"},"fingerprint":{"sha1":"BD:DD:75:88:5F:0F:2F:A6:EA:FF:1B:29:49:86:BB:EC:C1:90:4A:79","sha256":"89:8C:73:02:C1:8B:65:46:0D:EE:E7:41:24:34:AE:25:5A:28:56:20:4F:E2:7C:EB:1C:D8:91:6C:BC:2A:16:12"}}},"request":{"raw":"GET /f/sdk.js?z=1500787 HTTP/1.1\r\nHost: push-sdk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Mon, 03 Nov 2025 23:57:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 15242\r\ncontent-encoding: gzip\r\ncache-control: no-cache, max-age=0, must-revalidate, proxy-revalidate\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":54787,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54745), with no line terminators","md5":"f4d87b22393ed5eef57d01d86c6a88f6","sha1":"5e1aaee78cd735c23cc423fc863decca30aee219","sha256":"91cf9b34af48f3b62d706127b1140c89d8bb3a5455120acd2cfcfc41ab4ad5ee","sha512":"bba6ac4eafefb3415063cea1a572f7b56625300e5e671bedeb71eee84b72c532bd7815491602cc3a7059a2bfc1ace5a35ff6065709b60bbf9891e3849c82767c","ssdeep":"1536:/7LMSZcnLitlCr8WoeisV69SDG3nY+kH+sYK:/7L1Y2NViBYK","tlshash":"a933818877c6713412a7a4ac056f50daeb2b3c34944e890adc53f3a2297576eef23d74","first_seen":"2025-04-01T19:54:23.10118Z","last_seen":"2026-04-13T10:01:53.188896Z","times_seen":7998,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":82,"dns":2,"connect":27,"send":0,"wait":27,"receive":1,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/favicon-16x16.png","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:03.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218\r\nCookie: PHPSESSID=0eukvmut29qm3netvmnu9706dn; afsy_v1=23e2731ea660567ab22298ae16853f9b1542d49bb19be44de537a36adbf43b12a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22afsy_v1%22%3Bi%3A1%3Bs%3A148%3A%22%7B%22ip%22%3A%2291.90.42.154%22%2C%22url%22%3A%22%22%2C%22payload%22%3A%7B%22ref%22%3A%22os%22%2C%22utm_source%22%3A%22osub_sub%22%2C%22imdb%22%3A%22tt0013257%22%2C%22term%22%3A%22Haxan%22%2C%22sub%22%3A%2212699218%22%7D%2C%22system_key%22%3A%22tolt%22%7D%22%3B%7D; _csrf=9131a3944b126561170557e5820e074494399dd208cd5b2967c14ac755faff2ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22FvopAk_n2zDNI0oUWjZZZ1yiuD0Q0Vt4%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 23:57:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 1360\r\ncache-control: max-age=604800\r\netag: \"660e9646-550\"\r\nexpires: Wed, 05 Nov 2025 09:41:16 GMT\r\nlast-modified: Thu, 04 Apr 2024 12:00:06 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1360,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"733b20b53ffbc74cc5dd6b4abd8e6d05","sha1":"3271e2f142f4fd1a5c5f32b5401be31d360bd9d1","sha256":"f9005bac0961a03007c553bf6d2d4638ee3d4d09320ecc08c821798fb17623d9","sha512":"71a3d0d532e9421853048c8406e4c2727002e83318181609e070000cdf781aa27be6cab88b6bb6d2a4e9b3cdfd55208084e273a56c932ea5e31e6d79243c0056","ssdeep":"","tlshash":"d92186cae326b41181ae4dc2ba3271828ba572d7664dcbddea31d010461f63896f6f85","first_seen":"2023-05-07T19:35:35Z","last_seen":"2026-04-11T16:24:47.076995Z","times_seen":83,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ley5moUAAAAAJxloiuF--u_uS28aYUj-0E6tSfZ\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=cLm1zuaUXPLFw7nzKiQTH1dX\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=6xpnpamaq1nk","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:03.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:46 GMT","end":"Mon, 05 Jan 2026 08:37:45 GMT"},"fingerprint":{"sha1":"2C:0B:CF:F3:2B:F7:F0:76:D4:B1:1F:DB:E2:21:58:B5:EC:B7:6A:FF","sha256":"DE:F5:87:79:4F:56:FB:34:64:B9:21:C9:8F:92:27:D5:ED:C7:A3:88:BD:53:84:65:7D:EF:99:09:59:84:48:BE"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6Ley5moUAAAAAJxloiuF--u_uS28aYUj-0E6tSfZ\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=cLm1zuaUXPLFw7nzKiQTH1dX\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=6xpnpamaq1nk HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 03 Nov 2025 23:57:03 GMT\r\ncontent-security-policy: script-src 'nonce-xb3ezSE1bxRgv0-awMsr3A' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7448,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"aa47a1c8d76b7717850fe02f31c2452a","sha1":"780f79360cbc96272bcbf3827d62ab22e95d377b","sha256":"83ba2221fde46fb020c915bb0d69bf85765b803b656cd0f3b3012e3b4d00833a","sha512":"a67d5727ed38acd1f16894269bd4a7daf4d3a783c052b415f20459b56ce23302a238822b3d61c2f885e6f0225463efba93c97ef986b4ac476a08cec85aadce7d","ssdeep":"192:rjK+QK9KyK03XK/KIqKI4Kn7KSKBKC3sKUKoNK8KGnKrKEKT3AKrKFpK5gH:C+tI/y6yekn+f8QZRtpGKuBjdu+5c","tlshash":"2ae19c80081a9810ab930cd273cf3e36ed4f51257186c8b6affd59a8ede7d27925874d","first_seen":"2025-11-03T23:57:41.104622Z","last_seen":"2025-11-03T23:57:41.104622Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=cLm1zuaUXPLFw7nzKiQTH1dX\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=bt5wozocy50p","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:03.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:46 GMT","end":"Mon, 05 Jan 2026 08:37:45 GMT"},"fingerprint":{"sha1":"2C:0B:CF:F3:2B:F7:F0:76:D4:B1:1F:DB:E2:21:58:B5:EC:B7:6A:FF","sha256":"DE:F5:87:79:4F:56:FB:34:64:B9:21:C9:8F:92:27:D5:ED:C7:A3:88:BD:53:84:65:7D:EF:99:09:59:84:48:BE"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=cLm1zuaUXPLFw7nzKiQTH1dX\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=bt5wozocy50p HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 03 Nov 2025 23:57:03 GMT\r\ncontent-security-policy: script-src 'nonce-L4alBM8Kw_LH1yZoUEe3Xg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":80449,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (56645)","md5":"87d581e0e72116a444b9ab71c772a14d","sha1":"f5362841d33df3bc648ccda115512eeb316104f7","sha256":"b0aa985ee895e1e5a1a31c116a20000c7ebdfa6c96c31f8c11b3542257b56148","sha512":"357d85c212dd7b8b0672ab49164b72479e6c0b0703e200b0e7834a9b0dc2f8352d64b1462e9f6b785a99498910f22f64d9f8a88b18634d23e23469982bc3fab7","ssdeep":"1536:/zz2/N89wEcFicULSCTt17Ij4aTBx75E1V0LdclTjOqySq2/1+VO+3iUt1L3TXVl:/dOFbqLt1I8aTBxtACAT2Sr1+5SUtFxl","tlshash":"6773bf265213386adfbb4ec2a7d6bfbe516e1055209304ea17ff04844daad9653ac3cc","first_seen":"2025-11-03T23:57:41.105585Z","last_seen":"2025-11-03T23:57:41.105585Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/cLm1zuaUXPLFw7nzKiQTH1dX/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=cLm1zuaUXPLFw7nzKiQTH1dX","date":"2025-11-03T23:57:04.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /recaptcha/releases/cLm1zuaUXPLFw7nzKiQTH1dX/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 353843\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 10:00:06 GMT\r\nexpires: Fri, 30 Oct 2026 10:00:06 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 25 Oct 2025 04:01:22 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 395818\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":829613,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (558)","md5":"07bd9db323e20c5712464eae395c4bbe","sha1":"ac8fec5c3ef6987c9bba9ec707575c133dc32876","sha256":"58e16769fc5ea29486677fff7b25f0acd26e0077ef0e0d0a1c5c56545bc7b77a","sha512":"c840b50405fd4d0c82ccff537be49125cdc04674237f1945e8963c276dba99bb39b275d952f5033a7ea3978af474d3a56e932709673d00b973454102489dcef1","ssdeep":"6144:KmRDQSxp9xWrL3fe2ioyvWCbhjXapYaqqPeGfFrFVCk6y27CKIRIR8LzWpKofGnZ:d9Q49YrL3feq2sFVUCTI6EKofqnZ","tlshash":"d50519dcb5427b619332bdf160671068673e9a56c458096db2d8c4f43eb8809b2a3ff7","first_seen":"2025-10-29T09:05:47.950022Z","last_seen":"2026-04-06T09:30:25.517807Z","times_seen":13349,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/get-premium-2025/icons/arrow-top-right.svg","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:01.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/get-premium-2025/icons/arrow-top-right.svg HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218\r\nCookie: PHPSESSID=0eukvmut29qm3netvmnu9706dn; afsy_v1=23e2731ea660567ab22298ae16853f9b1542d49bb19be44de537a36adbf43b12a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22afsy_v1%22%3Bi%3A1%3Bs%3A148%3A%22%7B%22ip%22%3A%2291.90.42.154%22%2C%22url%22%3A%22%22%2C%22payload%22%3A%7B%22ref%22%3A%22os%22%2C%22utm_source%22%3A%22osub_sub%22%2C%22imdb%22%3A%22tt0013257%22%2C%22term%22%3A%22Haxan%22%2C%22sub%22%3A%2212699218%22%7D%2C%22system_key%22%3A%22tolt%22%7D%22%3B%7D; _csrf=9131a3944b126561170557e5820e074494399dd208cd5b2967c14ac755faff2ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22FvopAk_n2zDNI0oUWjZZZ1yiuD0Q0Vt4%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 23:57:01 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncache-control: max-age=604800\r\netag: W/\"68541798-25b\"\r\nexpires: Wed, 05 Nov 2025 09:30:00 GMT\r\nlast-modified: Thu, 19 Jun 2025 13:58:48 GMT\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":603,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"66ae2e4ea5f13039a6107e964593b9cc","sha1":"9d875684f1e6dc187143574335dfc753772bea2c","sha256":"ec8af9941d4deeb7f95cfd260e2cbcb61a57b2c1e74865d8c06d44b03fbef81d","sha512":"4de073eaf74772c4673f91322707feb2f89a43e472bdd451877c7f13a806d66a95ff2ab9562f3431ed17b6a7318a0bcbd51524250e886f29a34b09a492fa523c","ssdeep":"","tlshash":"52f0467913487f8ab0d11f02f278ca98f958f1a1fd728244eba304989cf8a771619041","first_seen":"2025-11-03T23:57:41.106647Z","last_seen":"2026-04-11T16:24:47.115617Z","times_seen":8,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dosis/v34/HhyaU5sn9vOmLzloC_U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:02.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/dosis/v34/HhyaU5sn9vOmLzloC_U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ww1.lookmovie.pn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30744\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 28 Oct 2025 15:26:04 GMT\r\nexpires: Wed, 28 Oct 2026 15:26:04 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 17:03:39 GMT\r\ncontent-type: font/woff2\r\nage: 549058\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30744,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30744, version 1.0","md5":"87bc734caa77a6aa60700bab80b18f44","sha1":"3d65ee80d4a6cf3a4d435dc8327dc97ea8be3511","sha256":"1db3f2316b3766392a12f4a4e88221e3ce9e70b170fa4390994c47a9db10352e","sha512":"7d4a224248447a3f5cc12e592c393f2a69dc5bb8c56c3f8ecdb0bbe4a334ce708915339503afdebf6d4550de1df7a6a64feca7bc2b31030cb6ea030a67c34bd2","ssdeep":"768:/8sHNQDk7eXaE/AFBdtU5WxXCF9CvyMGHNfkqSrM4D0AvO0l:nHNI7XqrtU5OXCmwHqqSrjDvBl","tlshash":"a8d2f130c98b6d597b971c7db823156ecdbeb40d5fa78ee01c062e38a0afd150712a38","first_seen":"2025-06-03T03:08:20.355522Z","last_seen":"2026-04-13T10:53:05.563636Z","times_seen":2530,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-03T23:57:01.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218 HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 23:57:01 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: no-store, no-cache, must-revalidate\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\nset-cookie: PHPSESSID=0eukvmut29qm3netvmnu9706dn; expires=Tue, 03-Nov-2026 23:57:01 GMT; Max-Age=31536000; path=/; HttpOnly\nafsy_v1=23e2731ea660567ab22298ae16853f9b1542d49bb19be44de537a36adbf43b12a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22afsy_v1%22%3Bi%3A1%3Bs%3A148%3A%22%7B%22ip%22%3A%2291.90.42.154%22%2C%22url%22%3A%22%22%2C%22payload%22%3A%7B%22ref%22%3A%22os%22%2C%22utm_source%22%3A%22osub_sub%22%2C%22imdb%22%3A%22tt0013257%22%2C%22term%22%3A%22Haxan%22%2C%22sub%22%3A%2212699218%22%7D%2C%22system_key%22%3A%22tolt%22%7D%22%3B%7D; expires=Fri, 02-Jan-2026 23:57:01 GMT; Max-Age=5184000; path=/; HttpOnly; SameSite=Lax\n_csrf=9131a3944b126561170557e5820e074494399dd208cd5b2967c14ac755faff2ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22FvopAk_n2zDNI0oUWjZZZ1yiuD0Q0Vt4%22%3B%7D; path=/; HttpOnly; SameSite=Lax\r\nlast-modified: Monday, 03-Nov-2025 23:57:01 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":83841,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2749)","md5":"936c32dad5a0f7b2425e85372ac135ab","sha1":"38dae1edeebc796fb78144232cc47a4f2e79300c","sha256":"699b894c3ae35ddcc3700bc082b13410d595d21ae17d43e6b220b9f277e53739","sha512":"20950e83858c6b046f4f021711927a15c7ba95b613fdf4d60cffd781c18ed6c0fe85e54f2d43521e0337c7ad76f81996f4be450aedb5b6185d2b072453916bb1","ssdeep":"1536:Jm6K65GZFpTNlhfXAju4Sl8Nb1Hb2lUx9vmDOq+enc:NK65GZFpTNlhfXAju4SCNb1F9ODOq+ec","tlshash":"1f834d3124f1187f0dd381a036686b0bae96e587ea5fa64433bc0bc65fd7e92cd53258","first_seen":"2025-11-03T23:57:41.107547Z","last_seen":"2025-11-03T23:57:41.107547Z","times_seen":1,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":55,"dns":9,"connect":16,"send":0,"wait":143,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/videojs-landscape-fullscreen@1.6.1/dist/videojs-landscape-fullscreen.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:02.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/videojs-landscape-fullscreen@1.6.1/dist/videojs-landscape-fullscreen.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww1.lookmovie.pn/\r\nOrigin: https://ww1.lookmovie.pn\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 1.6.1\r\nx-jsd-version-type: version\r\netag: W/\"855-JHtI33uv2AWaJUc1sEct/tzVlJw\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 03 Nov 2025 23:57:03 GMT\r\nage: 1769962\r\nx-served-by: cache-fra-eddf8230075-FRA, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 869\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2133,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2062)","md5":"36557a5f076bda56df6b75d3168c9d94","sha1":"247b48df7bafd8059a254735b0472dfedcd5949c","sha256":"f581271f32be33a917b97c06da52a287ea91152aaa94f62d6c4b388b5bf0c6ca","sha512":"8e537d1765fa9166df76bc54fdb59aab7cc6691501d275d0f90b3b002dacbf18410903bfa0890c8c5af64c3c5b4030eb1323cd62fd759159651a658038194a5e","ssdeep":"","tlshash":"e1412ee8b857f05248631cdedb2f624bb1364d2dc9c47c09b669e0ac8e35b58820f65d","first_seen":"2023-07-08T00:28:53Z","last_seen":"2026-04-11T16:24:47.12233Z","times_seen":5,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":82,"dns":2,"connect":28,"send":0,"wait":27,"receive":9,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/get-premium-2025/premium-bg.png","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:03.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/get-premium-2025/premium-bg.png HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/assets/all-c421915f540d64642dc87a4ba8dcff15.css\r\nCookie: PHPSESSID=0eukvmut29qm3netvmnu9706dn; afsy_v1=23e2731ea660567ab22298ae16853f9b1542d49bb19be44de537a36adbf43b12a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22afsy_v1%22%3Bi%3A1%3Bs%3A148%3A%22%7B%22ip%22%3A%2291.90.42.154%22%2C%22url%22%3A%22%22%2C%22payload%22%3A%7B%22ref%22%3A%22os%22%2C%22utm_source%22%3A%22osub_sub%22%2C%22imdb%22%3A%22tt0013257%22%2C%22term%22%3A%22Haxan%22%2C%22sub%22%3A%2212699218%22%7D%2C%22system_key%22%3A%22tolt%22%7D%22%3B%7D; _csrf=9131a3944b126561170557e5820e074494399dd208cd5b2967c14ac755faff2ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22FvopAk_n2zDNI0oUWjZZZ1yiuD0Q0Vt4%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 23:57:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 2247494\r\ncache-control: max-age=604800\r\netag: \"68541798-224b46\"\r\nexpires: Wed, 05 Nov 2025 09:30:02 GMT\r\nlast-modified: Thu, 19 Jun 2025 13:58:48 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2247494,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2720 x 1618, 8-bit/color RGBA, non-interlaced","md5":"c602e90802230a490d3f023409278110","sha1":"d925f27ef242097a8a9b4786d68776a83f9ff59b","sha256":"18c023a211789b082e0912ae5d9b031e839a1d0e7de1abf6eb680b01d1311645","sha512":"a014d1a3009a13638d376f380cb82aa6c7f5dc3cce09c86a919afc24a4897d1cca1e22c1c24edc5a22a496b45e2b88b03de0129a7a2bdc51961d19689e291ff0","ssdeep":"24576:AlM6YUOwXTdEP5pmIPuj8MynSDS8W1bDjaB+6o+q+graymV/o:PnU7BopzPuj8MynSDsFD+BzzUlm9o","tlshash":"ea25331295b616fd440a2d403779e07b4f6270af0ae437adf5d64c4beaa88d499fe303","first_seen":"2025-11-03T23:57:41.109412Z","last_seen":"2026-04-11T16:24:47.083872Z","times_seen":5,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=cLm1zuaUXPLFw7nzKiQTH1dX\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026bft=0dAFcWeA4fGXA6JKvgKv8XX-0g36zoZ45H86IO8lPGdXiCK-zJxRbaLWyCg0DynM2Q64B4W_QQy5eH4t4NUejTlP-vtj-WvzuPXA","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:05.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:46 GMT","end":"Mon, 05 Jan 2026 08:37:45 GMT"},"fingerprint":{"sha1":"2C:0B:CF:F3:2B:F7:F0:76:D4:B1:1F:DB:E2:21:58:B5:EC:B7:6A:FF","sha256":"DE:F5:87:79:4F:56:FB:34:64:B9:21:C9:8F:92:27:D5:ED:C7:A3:88:BD:53:84:65:7D:EF:99:09:59:84:48:BE"}}},"request":{"raw":"GET /recaptcha/api2/bframe?hl=en\u0026v=cLm1zuaUXPLFw7nzKiQTH1dX\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026bft=0dAFcWeA4fGXA6JKvgKv8XX-0g36zoZ45H86IO8lPGdXiCK-zJxRbaLWyCg0DynM2Q64B4W_QQy5eH4t4NUejTlP-vtj-WvzuPXA HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 03 Nov 2025 23:57:05 GMT\r\ncontent-security-policy: script-src 'nonce-T6wKhCmKDuOAvgkeuGoLdg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7623,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"7ad43b6a6abae3122f50dde0171ab7b5","sha1":"354b357fce93d0e9babcd055abaea0c4a690ed15","sha256":"c528de1f7f7cd5b8cd8e7764d73d13ced3bac69cfb64a6417c4954e4aef47b28","sha512":"c88f6ca99dabf013209c6480707fe159a5560d463a48ff915248adf440b654b4b6f5ebf81b33d68737c8ca83ad85b0794590b2b191f239b32896dae821d06f15","ssdeep":"192:NjK+QK9KyK03XK/KIqKI4Kn7KSKBKC3sKUKoNK8KGnKrKEKT3AKrKFpKvxp:M+tI/y6yekn+f8QZRtpGKuBjdu+vxp","tlshash":"55f1ab80081a9400ab930cd273cf3e36ed4f51267146c8b6ebfe59a8ede7d26925874d","first_seen":"2025-11-03T23:57:41.110267Z","last_seen":"2025-11-03T23:57:41.110267Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dosis/v34/HhyaU5sn9vOmLzloC_U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:02.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/dosis/v34/HhyaU5sn9vOmLzloC_U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ww1.lookmovie.pn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30744\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 28 Oct 2025 15:26:04 GMT\r\nexpires: Wed, 28 Oct 2026 15:26:04 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 17:03:39 GMT\r\ncontent-type: font/woff2\r\nage: 549058\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30744,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30744, version 1.0","md5":"87bc734caa77a6aa60700bab80b18f44","sha1":"3d65ee80d4a6cf3a4d435dc8327dc97ea8be3511","sha256":"1db3f2316b3766392a12f4a4e88221e3ce9e70b170fa4390994c47a9db10352e","sha512":"7d4a224248447a3f5cc12e592c393f2a69dc5bb8c56c3f8ecdb0bbe4a334ce708915339503afdebf6d4550de1df7a6a64feca7bc2b31030cb6ea030a67c34bd2","ssdeep":"768:/8sHNQDk7eXaE/AFBdtU5WxXCF9CvyMGHNfkqSrM4D0AvO0l:nHNI7XqrtU5OXCmwHqqSrjDvBl","tlshash":"a8d2f130c98b6d597b971c7db823156ecdbeb40d5fa78ee01c062e38a0afd150712a38","first_seen":"2025-06-03T03:08:20.355522Z","last_seen":"2026-04-13T10:53:05.563636Z","times_seen":2530,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":51,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/get-premium-2025/icons/close-circle.svg","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:01.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/get-premium-2025/icons/close-circle.svg HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218\r\nCookie: PHPSESSID=0eukvmut29qm3netvmnu9706dn; afsy_v1=23e2731ea660567ab22298ae16853f9b1542d49bb19be44de537a36adbf43b12a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22afsy_v1%22%3Bi%3A1%3Bs%3A148%3A%22%7B%22ip%22%3A%2291.90.42.154%22%2C%22url%22%3A%22%22%2C%22payload%22%3A%7B%22ref%22%3A%22os%22%2C%22utm_source%22%3A%22osub_sub%22%2C%22imdb%22%3A%22tt0013257%22%2C%22term%22%3A%22Haxan%22%2C%22sub%22%3A%2212699218%22%7D%2C%22system_key%22%3A%22tolt%22%7D%22%3B%7D; _csrf=9131a3944b126561170557e5820e074494399dd208cd5b2967c14ac755faff2ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22FvopAk_n2zDNI0oUWjZZZ1yiuD0Q0Vt4%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 23:57:01 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncache-control: max-age=604800\r\netag: W/\"68541798-220\"\r\nexpires: Wed, 05 Nov 2025 09:30:00 GMT\r\nlast-modified: Thu, 19 Jun 2025 13:58:48 GMT\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":544,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7aa19e9f68bfe2df60870c6ffcfe8013","sha1":"e9a2fcf082cbe254156e064c83b0645a2ee78bd3","sha256":"5c91348288a5d1c85301da200687006da9cbacd56aa27b1ca5cf37e8911e7b01","sha512":"2d26e0e44312e8484b882983edd3f739c11d17cf490b9eef3926f305ee1b94c9c2e7e5b09682850bbac675f159c04c98920bffcc34a12728bc9d5353e4b46cd6","ssdeep":"","tlshash":"c8f0e27a6277bb4e5ffac6c0d5442dd80168f8f0bc0a03b08785443c6593677613c988","first_seen":"2025-11-03T23:57:41.111401Z","last_seen":"2026-04-11T16:24:47.119486Z","times_seen":4,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/assets/all-0614c871395387fa5845ae0c2131b88e.js","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:02.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /assets/all-0614c871395387fa5845ae0c2131b88e.js HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218\r\nCookie: PHPSESSID=0eukvmut29qm3netvmnu9706dn; afsy_v1=23e2731ea660567ab22298ae16853f9b1542d49bb19be44de537a36adbf43b12a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22afsy_v1%22%3Bi%3A1%3Bs%3A148%3A%22%7B%22ip%22%3A%2291.90.42.154%22%2C%22url%22%3A%22%22%2C%22payload%22%3A%7B%22ref%22%3A%22os%22%2C%22utm_source%22%3A%22osub_sub%22%2C%22imdb%22%3A%22tt0013257%22%2C%22term%22%3A%22Haxan%22%2C%22sub%22%3A%2212699218%22%7D%2C%22system_key%22%3A%22tolt%22%7D%22%3B%7D; _csrf=9131a3944b126561170557e5820e074494399dd208cd5b2967c14ac755faff2ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22FvopAk_n2zDNI0oUWjZZZ1yiuD0Q0Vt4%22%3B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 23:57:01 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\ncache-control: max-age=604800\r\netag: W/\"69038496-3ae49\"\r\nexpires: Thu, 06 Nov 2025 15:30:53 GMT\r\nlast-modified: Thu, 30 Oct 2025 15:30:30 GMT\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":241225,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65361)","md5":"0614c871395387fa5845ae0c2131b88e","sha1":"6ce65884513574b835a679b5a174793b88d65002","sha256":"ce8c3e04e41f3ba5268db075d10f3b1f72b820e5edaa99359640d12746ac94f3","sha512":"b7f83faa492df7eba24804398bca5887962fa6462da08d45498eb642267716b3f27217cc07e7e56edb6dffe7faf85d6447fe60ace503a8bb05fcdbaaf100607a","ssdeep":"6144:ay8G6RujcHX6MQ47GKG4++ARXcZsd000iYP4PO4ILXmZbtTXp4HDi:aywRuI36R+ARsZsd000iYaO4IohXp4H2","tlshash":"5b34e8dcb2a5b071526771b5503f120bb33b187aa80c9464f179e8e17db8989827bf3d","first_seen":"2025-11-02T11:30:38.203169Z","last_seen":"2025-11-09T16:43:17.83747Z","times_seen":3,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/assets/4c256fd5/fonts/ionicons.ttf?v=2.0.1","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:02.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /assets/4c256fd5/fonts/ionicons.ttf?v=2.0.1 HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/assets/all-c421915f540d64642dc87a4ba8dcff15.css\r\nCookie: PHPSESSID=0eukvmut29qm3netvmnu9706dn; afsy_v1=23e2731ea660567ab22298ae16853f9b1542d49bb19be44de537a36adbf43b12a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22afsy_v1%22%3Bi%3A1%3Bs%3A148%3A%22%7B%22ip%22%3A%2291.90.42.154%22%2C%22url%22%3A%22%22%2C%22payload%22%3A%7B%22ref%22%3A%22os%22%2C%22utm_source%22%3A%22osub_sub%22%2C%22imdb%22%3A%22tt0013257%22%2C%22term%22%3A%22Haxan%22%2C%22sub%22%3A%2212699218%22%7D%2C%22system_key%22%3A%22tolt%22%7D%22%3B%7D; _csrf=9131a3944b126561170557e5820e074494399dd208cd5b2967c14ac755faff2ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22FvopAk_n2zDNI0oUWjZZZ1yiuD0Q0Vt4%22%3B%7D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 23:57:02 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 188508\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\netag: \"69038469-2e05c\"\r\nexpires: Mon, 10 Nov 2025 23:57:02 GMT\r\nlast-modified: Thu, 30 Oct 2025 15:29:45 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":188508,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 14 names, Macintosh","md5":"dd4781d1acc57ba4c4808d1b44301201","sha1":"956116ebe4b3a315b1a43009567e6f8ad0a9a720","sha256":"5e700835ec05293a3d0f9e354e7d038319d34521cd279e782198dff6d1dd58f2","sha512":"96ffdedf1fbcd54d957bb218bb6cc8dca1873443f37dc51071c75bbef4698d3b974c9864546614c8e859b6a23f12ad9e54057a08c485a12213ce550f351dd262","ssdeep":"3072:devphGNEm96ksZlU9WZEwXnwY3Xv8KLyVT8s+mW0uu2r9FsysMgWp/:dBEm9Z26kXWb+mN+cp2/","tlshash":"25048e0bf7cfda4bd125a67e44f69b1319a8d0106e2353dbebce364994e76c40c6a0c9","first_seen":"2023-04-08T05:42:46Z","last_seen":"2026-04-13T11:05:06.335955Z","times_seen":2897,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/api/v2/download/movies/manifest?id=119338","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:03.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /api/v2/download/movies/manifest?id=119338 HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218\r\nCookie: PHPSESSID=0eukvmut29qm3netvmnu9706dn; afsy_v1=23e2731ea660567ab22298ae16853f9b1542d49bb19be44de537a36adbf43b12a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22afsy_v1%22%3Bi%3A1%3Bs%3A148%3A%22%7B%22ip%22%3A%2291.90.42.154%22%2C%22url%22%3A%22%22%2C%22payload%22%3A%7B%22ref%22%3A%22os%22%2C%22utm_source%22%3A%22osub_sub%22%2C%22imdb%22%3A%22tt0013257%22%2C%22term%22%3A%22Haxan%22%2C%22sub%22%3A%2212699218%22%7D%2C%22system_key%22%3A%22tolt%22%7D%22%3B%7D; _csrf=9131a3944b126561170557e5820e074494399dd208cd5b2967c14ac755faff2ca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22FvopAk_n2zDNI0oUWjZZZ1yiuD0Q0Vt4%22%3B%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 23:57:03 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: no-store, no-cache, must-revalidate\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\nlast-modified: Monday, 03-Nov-2025 23:57:03 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2407,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"598f457c7aa0ae5d7ede1164b6036a77","sha1":"37d4b5dcc5195e8306ac7124eb88aca72219783b","sha256":"ab10b094ead498a280c8bc0d1ec48516c337be26eedb2d2e1e53cee820f852fb","sha512":"f8b8820934f48bfc4a2464452b3b14bfca681814bf1824ee6ff6697b40f265fb41fadde1ac1362e1490666847c6f23b4466aa76997f828ab04c099e82b2cdb0e","ssdeep":"","tlshash":"5541b9bb5bc6ebffe46171f812ae8922541b90632af3c4095d638d6fb4b1604f750163","first_seen":"2025-11-03T23:57:41.114268Z","last_seen":"2025-11-03T23:57:41.114268Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/cLm1zuaUXPLFw7nzKiQTH1dX/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ley5moUAAAAAJxloiuF--u_uS28aYUj-0E6tSfZ\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=cLm1zuaUXPLFw7nzKiQTH1dX\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=6xpnpamaq1nk","date":"2025-11-03T23:57:04.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /recaptcha/releases/cLm1zuaUXPLFw7nzKiQTH1dX/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 353843\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 10:00:06 GMT\r\nexpires: Fri, 30 Oct 2026 10:00:06 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 25 Oct 2025 04:01:22 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 395818\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":829613,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (558)","md5":"07bd9db323e20c5712464eae395c4bbe","sha1":"ac8fec5c3ef6987c9bba9ec707575c133dc32876","sha256":"58e16769fc5ea29486677fff7b25f0acd26e0077ef0e0d0a1c5c56545bc7b77a","sha512":"c840b50405fd4d0c82ccff537be49125cdc04674237f1945e8963c276dba99bb39b275d952f5033a7ea3978af474d3a56e932709673d00b973454102489dcef1","ssdeep":"6144:KmRDQSxp9xWrL3fe2ioyvWCbhjXapYaqqPeGfFrFVCk6y27CKIRIR8LzWpKofGnZ:d9Q49YrL3feq2sFVUCTI6EKofqnZ","tlshash":"d50519dcb5427b619332bdf160671068673e9a56c458096db2d8c4f43eb8809b2a3ff7","first_seen":"2025-10-29T09:05:47.950022Z","last_seen":"2026-04-06T09:30:25.517807Z","times_seen":13349,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@300;400;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ww1.lookmovie.pn/movies/play/0013257-haxan-1922?ref=os\u0026utm_source=osub_sub\u0026imdb=tt0013257\u0026term=Haxan\u0026sub=12699218","date":"2025-11-03T23:57:02.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"1D:8E:3A:85:91:AC:63:71:94:8B:0E:61:45:34:D9:86:AB:A6:E2:CE","sha256":"E6:93:4E:53:89:15:41:28:27:59:AA:84:50:96:96:1E:2A:98:7E:08:60:AE:68:62:AE:DD:86:AB:DB:0F:FE:2B"}}},"request":{"raw":"GET /css2?family=Poppins:wght@300;400;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 03 Nov 2025 23:57:02 GMT\r\ndate: Mon, 03 Nov 2025 23:57:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3591,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9927b411b54997ce4c5ed8645eebeccd","sha1":"65028c9ccddcd30a66447fd117b97ca2afd03456","sha256":"773d93ffe14736bf0d21ae1da17bfe5bb692e588efb106e62f2e14f8d4b27b31","sha512":"bc89a333f9c66f03cb14e2b620dd21cf9ee4aa2beda7bd80b3e8744c3c8e6a565872d0c4226317d4245c842af5118527f855504cc1d103f466848931c5f81970","ssdeep":"","tlshash":"e1719dd1087be114ab831cc123ce7d36ef1e9255b410e5786bfd0c98adabc654362b2d","first_seen":"2025-09-17T06:36:19.723239Z","last_seen":"2026-04-13T09:50:11.508335Z","times_seen":356,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}