r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5fe582397f3003b225cb9058e02c2190
68174a54a8f6c4de9247ccea2dcae3c9b76bdb9f
238a2ef5b61d56353d0a5e97ec3092b8f2792cde7cecf40e1a858f8c129d3a9d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "238A2EF5B61D56353D0A5E97EC3092B8F2792CDE7CECF40E1A858F8C129D3A9D"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11044
Expires: Fri, 27 Jan 2023 08:26:06 GMT
Date: Fri, 27 Jan 2023 05:22:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2405562765b49b2782ebd2e2994851d5
be7ac8e558f7875bb1fb86ab5ec674424a5ff269
422cfa907461cb7b93b9089d600052f9e94951e5e0c93d97651905002e48ad3e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "422CFA907461CB7B93B9089D600052F9E94951E5E0C93D97651905002E48AD3E"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13191
Expires: Fri, 27 Jan 2023 09:01:53 GMT
Date: Fri, 27 Jan 2023 05:22:02 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 27 Jan 2023 04:35:19 GMT
content-type: application/json
age: 2803
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 49049f3c92aad686cd7ff28ecd2a5a4f
9cc2bc9c055450dbc4fae93eabe4ef8509b3ff57
02cf421968192286bb174ff0e6c818a843c4eca61a02cd493e6f95bb58a37015
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "02CF421968192286BB174FF0E6C818A843C4ECA61A02CD493E6F95BB58A37015"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7572
Expires: Fri, 27 Jan 2023 07:28:14 GMT
Date: Fri, 27 Jan 2023 05:22:02 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: R4M2iZCJ7lnB/rwLWQTH6vgDzSib0l4/MXwWOBrnJM/Zi1Q7fbS8LULuyOr5dSFmhyAVCH1YkXo=
x-amz-request-id: YZ2KFCAZ3BDXEJBV
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 27 Jan 2023 05:20:24 GMT
age: 98
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
9xflix.help/m/gandhi-godse-ek-yudh-2023/
200 OK 37 kB URL HTTP/1.1 9xflix.help/m/gandhi-godse-ek-yudh-2023/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (7891), with CRLF, LF line terminators
Hash b5a7c3b95b3076be74def9e1cc63c0dc
292b097c30cec9445d21f8591fdfc5d60a9db804
8c413a4aacd37502685db4b9880ed0b78d281e619e35861a44d4799eefbaf0ba
GET /m/gandhi-godse-ek-yudh-2023/ HTTP/1.1
Host: 9xflix.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 05:22:02 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Pingback: http://9xflix.help/m/xmlrpc.php
Link: <https://9xflix.help/m/wp-json/>; rel="https://api.w.org/", <https://9xflix.help/m/?p=13908>; rel=shortlink
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: EXPIRED
X-Server-Powered-By: Engintron
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bN9il8ZUVMt2QYWC%2FO3VRN3qtPsFM3Gh3tqHR%2BGtJSD0XE%2Bk7mC%2F%2BrcXIig0VuofIF3DJcFiZ5Rh16JYyAMoVueDr3xkeQFzWCjkvtjHKiYVpAzTx%2FDolCwn%2BTEDUw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78ff0c5d898db505-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 05:22:02 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans%3A100%2C300%2C400%2C700&ver=5.0.18
200 OK 683 B URL HTTP/1.1 fonts.googleapis.com/css?family=Open+Sans%3A100%2C300%2C400%2C700&ver=5.0.18
IP
Hash 811aba771f53232088791a691dc2e85a
b4b83e106290e8a51b537f2ed50d10e99f184b9a
1f11e7aa985aa9d4a8ccfe4afda98e022b600a53592955344e23f8a9109ad3ec
GET /css?family=Open+Sans%3A100%2C300%2C400%2C700&ver=5.0.18 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://9xflix.help/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Fri, 27 Jan 2023 05:22:02 GMT
Date: Fri, 27 Jan 2023 05:22:02 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
9xflix.help/m/wp-content/themes/promaxpro/css/ticker-style.css?ver=5.0.18
200 OK 510 B URL HTTP/1.1 9xflix.help/m/wp-content/themes/promaxpro/css/ticker-style.css?ver=5.0.18
IP
Hash 29a1e06e304b523b32df0110fa1952eb
8bd30b1d678037fc4f020e2d4584424cf94c5284
6b90a8a7d0752bbadad40ce9151c1a940397cde92567e2fa0eed180e5256815e
GET /m/wp-content/themes/promaxpro/css/ticker-style.css?ver=5.0.18 HTTP/1.1
Host: 9xflix.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://9xflix.help/m/gandhi-godse-ek-yudh-2023/
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 05:22:03 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sat, 12 Jan 2019 05:01:49 GMT
Expires: Sun, 26 Feb 2023 05:22:02 GMT
Cache-Control: max-age=2592000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: HIT
X-Server-Powered-By: Engintron
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4lpAEyBO42a4at0Ahz%2FPaqlOO5LbptBIlmFtwk3hrCgPi5TLYX7XQWAnfCEjM30AE55UtUZ1uSe8%2BlQP15kk4pomQadlNa4DmXrR9EZ%2BgQZmp7VyRnzNUQPOtrp0bw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78ff0c605c55b503-OSL
alt-svc: h2=":443"; ma=60
9xflix.help/m/wp-content/themes/promaxpro/foundation/css/normalize.css?ver=5.1.1
200 OK 2.6 kB URL HTTP/1.1 9xflix.help/m/wp-content/themes/promaxpro/foundation/css/normalize.css?ver=5.1.1
IP
Hash beeaf6ad60efe85b91c5b15bb6ff3f48
821a0edd8f7285abe189fd7aa237316c24a0b1de
09a286cd4ca02b704e4681152cc1d9fb2bda4a48369d11167b76c95169ca2a3f
GET /m/wp-content/themes/promaxpro/foundation/css/normalize.css?ver=5.1.1 HTTP/1.1
Host: 9xflix.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://9xflix.help/m/gandhi-godse-ek-yudh-2023/
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 05:22:03 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sat, 12 Jan 2019 05:01:49 GMT
Expires: Sun, 26 Feb 2023 05:22:02 GMT
Cache-Control: max-age=2592000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: HIT
X-Server-Powered-By: Engintron
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h7OHJblnotYne63FuxcQ4t%2BP%2FPKYlxJcO2w8OfECN4PTZlQ3cq%2BkuyfGB87dnslAcBuUHii4xfpClBciI%2BVNWS1WndPjABomELQrSLEYbADnJE9A7S67Q8hU5Lqtqw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78ff0c60580cb511-OSL
alt-svc: h2=":443"; ma=60
9xflix.help/m/wp-includes/css/dist/block-library/style.min.css?ver=5.0.18
200 OK 4.4 kB URL HTTP/1.1 9xflix.help/m/wp-includes/css/dist/block-library/style.min.css?ver=5.0.18
IP
File type ASCII text, with very long lines (25658), with no line terminators
Hash c3cf869fdf57a5517263a279051ce64a
40317f4ad822e2df9aae157f91d9ccb878bca8bd
3376cdda0ced1c55adf3a34b7c2b99418c8769024040e3ff63e602cea3c1968e
GET /m/wp-includes/css/dist/block-library/style.min.css?ver=5.0.18 HTTP/1.1
Host: 9xflix.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://9xflix.help/m/gandhi-godse-ek-yudh-2023/
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 05:22:03 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sat, 12 Jan 2019 04:34:04 GMT
Expires: Sun, 26 Feb 2023 05:22:02 GMT
Cache-Control: max-age=2592000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: HIT
X-Server-Powered-By: Engintron
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XOoedy4Z3eTHPAyug5iNqSAb0rIxLmJrKLEg4ldXxxcWYEnioSMFXPwh8Hpt7tuuwFQx7sgof19ffXz9BEoXhdKLYyrgi6lmQGUjVZ8EoGEJFl5goIWx0QDKAJt79Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78ff0c605dfd1c02-OSL
alt-svc: h2=":443"; ma=60
9xflix.help/m/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.1.1
200 OK 652 B URL HTTP/1.1 9xflix.help/m/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.1.1
IP
Hash 5b378deba27b30b77cedceb2f64741b8
ed2aec42e9db42f84d0b1670283cab677587fe49
2db004af0477ba3d0d7b01d961bbcbb92ff16e7cfd699a525ac76e8f41da7cce
GET /m/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.1.1 HTTP/1.1
Host: 9xflix.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://9xflix.help/m/gandhi-godse-ek-yudh-2023/
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 05:22:03 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sun, 13 Jan 2019 10:47:16 GMT
Expires: Sun, 26 Feb 2023 05:22:03 GMT
Cache-Control: max-age=2592000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: HIT
X-Server-Powered-By: Engintron
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U5kizbguRC8qasVdM1H1FqATKOl3MgTJZEKUTHVA3nuZHsoIioEYkbStcvUGvM8M1wA3rdTLllvmQ65HEe84JpK18TlF%2Fy9eO5wB13eZMG8s5mslh5KvljKbnJxmuA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78ff0c605b3ab505-OSL
alt-svc: h2=":443"; ma=60
9xflix.help/m/wp-content/themes/promaxpro/font-awesome/css/font-awesome.min.css?ver=5.0.18
200 OK 7.1 kB URL HTTP/1.1 9xflix.help/m/wp-content/themes/promaxpro/font-awesome/css/font-awesome.min.css?ver=5.0.18
IP
File type ASCII text, with very long lines (30837)
Hash f529ce613d8baf3f3cccfd46f03a084d
84ef851e9885ccc24911e5c03f1cc0d094959cd3
ad0cc939bf160d744317828d29614b37cde0ba0ef08365d8f8b919fe89df3caf
GET /m/wp-content/themes/promaxpro/font-awesome/css/font-awesome.min.css?ver=5.0.18 HTTP/1.1
Host: 9xflix.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://9xflix.help/m/gandhi-godse-ek-yudh-2023/
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 05:22:03 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sat, 12 Jan 2019 05:01:49 GMT
Expires: Sun, 26 Feb 2023 05:22:03 GMT
Cache-Control: max-age=2592000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: HIT
X-Server-Powered-By: Engintron
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NakR%2BusjVDCc2jk6IiYNt7Utdv6tDnoH5mwdfjngIM%2Boief90g138VbZrS1V6Wr1uEYT7t6HSWZM3mloLtzc31pa3OpTZrTm8wPUBNivG2gFcr9itOWe0ZR2Ub2Wtg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78ff0c605cb8b521-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 82e3abc4a7b17efedca67cf215f4bb60
e20e55d87591af7db3a4bcfc429048f85e389b85
df8901d4d87686fb11e17986f5d53cf513f675b4dd71f0a2e35c7ffbefa7fb9e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 05:22:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e494fdd6ca9f320c6f0a2ddfeb399c50
41a888703eaf546c04e3d7110e0c6db79659e994
e0251effb62e37d108b9e6c955620ebf35267542a04dcd8ed30dbf90eaea2522
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 05:22:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
9xflix.help/m/wp-content/themes/promaxpro/js/scroll.js?ver=1.0
200 OK 220 B URL HTTP/1.1 9xflix.help/m/wp-content/themes/promaxpro/js/scroll.js?ver=1.0
IP
Hash a2c860b76d48f0dc9857ac75c4ab0904
eeb5a771a281e5245a167b26b886ca7e7a97df4f
17aa8c5d94fbe56d55c8eb19ebd1705011dc3fce26cd026673f0032953bb9b59
GET /m/wp-content/themes/promaxpro/js/scroll.js?ver=1.0 HTTP/1.1
Host: 9xflix.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://9xflix.help/m/gandhi-godse-ek-yudh-2023/
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 05:22:03 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sat, 12 Jan 2019 05:01:49 GMT
Expires: Sun, 26 Feb 2023 05:22:03 GMT
Cache-Control: max-age=2592000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: HIT
X-Server-Powered-By: Engintron
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n5j1s2fFHe%2B9SFDsLYUiB9KFOStp6KWA0hES5s3kiM6%2FOTtcz5%2FSo6UnJklKvRdDQ2Ias4gFj8g%2FuMKgJfBcpLaxYsQikoQgHAgs8ZB1VLE5IrQldDXf98Vytwe7Ug%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78ff0c60de2d1c02-OSL
alt-svc: h2=":443"; ma=60
4.bp.blogspot.com/-NECLM4cbp_Q/XLePgrHnkSI/AAAAAAAAZlI/pVk2pY93jDoHpLWqoLCNG9aoHBwqxSBbwCLcBGAs/s1600/telegram.png
200 OK 7.6 kB URL HTTP/2 4.bp.blogspot.com/-NECLM4cbp_Q/XLePgrHnkSI/AAAAAAAAZlI/pVk2pY93jDoHpLWqoLCNG9aoHBwqxSBbwCLcBGAs/s1600/telegram.png
IP
File type PNG image data, 230 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 15edd19a22ee4fa99e702cbdcc7e0757
ecd72b4f31d4bb27b477594b7d01988e9e73a935
8ef3b86de7091d8854374528d06592b8f2872b73c72a289d1c9cff320c98f858
GET /-NECLM4cbp_Q/XLePgrHnkSI/AAAAAAAAZlI/pVk2pY93jDoHpLWqoLCNG9aoHBwqxSBbwCLcBGAs/s1600/telegram.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://9xflix.help/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="telegram.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 7587
x-xss-protection: 0
date: Fri, 27 Jan 2023 03:48:45 GMT
expires: Sun, 22 Jan 2023 01:45:46 GMT
cache-control: public, max-age=86400, no-transform
age: 5598
etag: "v6653"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash d76eabb75e9bc357b8a24de74e226072
96f5248f07ce6adfffadcaa3bb7f8ce480d2aeea
34aa8e59db97e6d278f991f962e142666402f5143e250c013f2d3d5ac5b3018f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3268
Cache-Control: max-age=116089
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 05:22:03 GMT
Etag: "63d27530-117"
Expires: Sat, 28 Jan 2023 13:36:52 GMT
Last-Modified: Thu, 26 Jan 2023 12:42:24 GMT
Server: ECS (amb/6B86)
X-Cache: HIT
Content-Length: 279
9xflix.help/m/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.1
200 OK 4.0 kB URL HTTP/1.1 9xflix.help/m/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.1
IP
Hash 333bcc2782409edaaaaf53c333153017
f29395c68f89e8555c3689411358ccb190687ddc
b6dd54a86eb017ea2e0150b088c302ab39ae1b35c98c95ae3c883cf23cb9459f
GET /m/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.1 HTTP/1.1
Host: 9xflix.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://9xflix.help/m/gandhi-godse-ek-yudh-2023/
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 05:22:03 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sun, 13 Jan 2019 10:47:16 GMT
Expires: Sun, 26 Feb 2023 05:22:03 GMT
Cache-Control: max-age=2592000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: HIT
X-Server-Powered-By: Engintron
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U7py3YwH%2BcjyM5vzftbGIzMB3rzqy0cf113UCp7dDyo6f4dWczdHL0k%2FHJprHptmeWdshOQC4QOTtGPlQyaIlYf2EKyIRvaAg%2BisZEgjdwraLx%2F0pSShT%2BzSFbz8QQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78ff0c610b8fb505-OSL
alt-svc: h2=":443"; ma=60
9xflix.help/m/wp-content/themes/promaxpro/foundation/css/foundation-op.css?ver=5.0.18
200 OK 21 kB URL HTTP/1.1 9xflix.help/m/wp-content/themes/promaxpro/foundation/css/foundation-op.css?ver=5.0.18
IP
File type ASCII text, with very long lines (1564)
Hash f0c3251286f91c58b19d7815cc77b1a2
4fb041b05e5c898a488b03ff264425e509f510d2
220ebc4d4e07895f26c90d7605becc893a5586ee56b57fb343d04089ca8ccd13
GET /m/wp-content/themes/promaxpro/foundation/css/foundation-op.css?ver=5.0.18 HTTP/1.1
Host: 9xflix.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://9xflix.help/m/gandhi-godse-ek-yudh-2023/
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 05:22:03 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sat, 12 Jan 2019 05:01:49 GMT
Expires: Sun, 26 Feb 2023 05:22:03 GMT
Cache-Control: max-age=2592000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: HIT
X-Server-Powered-By: Engintron
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=476oa1ZODgVQCekqpd%2BJt4aH8HplAd2Qy70jNeLGLjCLLLAtTmQ0P3TfYAwJ0JTho1PPv3XY59flGP2CkZ0XPOG4yvTY3StarT4UK1idcbWkGvXxP8nRCEi%2FzAziJg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78ff0c605962b500-OSL
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
200 OK 279 B IP
Hash d76eabb75e9bc357b8a24de74e226072
96f5248f07ce6adfffadcaa3bb7f8ce480d2aeea
34aa8e59db97e6d278f991f962e142666402f5143e250c013f2d3d5ac5b3018f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3619
Cache-Control: max-age=116440
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 05:22:03 GMT
Etag: "63d27530-117"
Expires: Sat, 28 Jan 2023 13:42:43 GMT
Last-Modified: Thu, 26 Jan 2023 12:42:24 GMT
Server: ECS (amb/6B8E)
X-Cache: HIT
Content-Length: 279
imgshare.info/images/2023/01/26/e5643a48d417a0f3fd2daac80529571d.jpg
200 OK 60 kB URL HTTP/2 imgshare.info/images/2023/01/26/e5643a48d417a0f3fd2daac80529571d.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=417, bps=0, PhotometricIntepretation=RGB, orientation=[*0*], width=278], baseline, precision 8, 278x417, components 3\012- data
Hash b49a424f386c9c3498f5c71015d4d69e
ac200c022b1315fbcfa24b7409b7007dc7728854
63e0b5b54b9019bc4f330a49ef50570a84061653440d965c636d40ff7f2a2cb9
GET /images/2023/01/26/e5643a48d417a0f3fd2daac80529571d.jpg HTTP/1.1
Host: imgshare.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://9xflix.help/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 05:22:03 GMT
content-type: image/jpeg
content-length: 60460
last-modified: Thu, 26 Jan 2023 09:45:54 GMT
etag: "63d24bd2-ec2c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 67122
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S%2Bj4SnFo6co5WvvmUJJYCu850RZvRa3bqE%2FdgBwtgQ%2FNBx9cyzQEo3nJcILzdOMoZDOOKwP0mw58BTqwVmperZpyTb71j1lMv4fYSbJBmVdg4eqSHBRZHDTgkeus2O8d"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78ff0c617ad3b51e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
9xflix.help/m/wp-content/themes/promaxpro/style.css?ver=5.0.18
200 OK 10 kB URL HTTP/1.1 9xflix.help/m/wp-content/themes/promaxpro/style.css?ver=5.0.18
IP
File type Unicode text, UTF-8 text, with very long lines (416)
Hash 4b993e3c8d442f001a4322a85435d616
b3a50b1612d0bba1b88a6a9b72159dae06fd8023
cc180068ad57c08d7de2e211dbc1a42a11c3f9cb3183975c4fa6f16017c4d4fa
GET /m/wp-content/themes/promaxpro/style.css?ver=5.0.18 HTTP/1.1
Host: 9xflix.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://9xflix.help/m/gandhi-godse-ek-yudh-2023/
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 05:22:03 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sat, 12 Jan 2019 05:01:49 GMT
Expires: Sun, 26 Feb 2023 05:22:03 GMT
Cache-Control: max-age=2592000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: HIT
X-Server-Powered-By: Engintron
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eOhMTFMLQK3AqLPFMBe7zWVQSUc%2BWrVFLTLlckesXhseNFN1hw3gGYXhoh50cGoQfGskSmteDRl%2B%2FNmg7svToDYpSMM3oe2pyysXa5fz3Atcd2bkhvlH9oscStx5Dw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78ff0c60cc97b503-OSL
alt-svc: h2=":443"; ma=60
www.googletagmanager.com/gtag/js?id=G-K0ZE96QVP7
200 OK 78 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-K0ZE96QVP7
IP
File type ASCII text, with very long lines (21849)
Hash e3fafb5f5aa6b1d5bf9977386e64451c
a5db4ebcc057048a39f77f3707fe3b66338a3911
7e72a3c9bdd5063bd4b5b8312d21f31266b9ee3f86ff3b695d15735aa283c1f7
GET /gtag/js?id=G-K0ZE96QVP7 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://9xflix.help/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 27 Jan 2023 05:22:03 GMT
expires: Fri, 27 Jan 2023 05:22:03 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77782
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
imgshare.info/images/2023/01/18/c9d71f7d93bb80a2368721cd40b38adc.png
200 OK 45 kB URL HTTP/2 imgshare.info/images/2023/01/18/c9d71f7d93bb80a2368721cd40b38adc.png
IP
File type PNG image data, 300 x 250, 8-bit/color RGB, non-interlaced\012- data
Hash f5d6f7ab37546ba6e7bc06fae74dd8d6
b301c98c7b4a426d710985d19a326ba786f65c23
98dbad9b44208470cc50274abce4af17e884b7814d742090825865eb6c63938d
GET /images/2023/01/18/c9d71f7d93bb80a2368721cd40b38adc.png HTTP/1.1
Host: imgshare.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://9xflix.help/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 05:22:03 GMT
content-type: image/png
content-length: 44688
last-modified: Wed, 18 Jan 2023 15:43:17 GMT
etag: "63c81395-ae90"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 731944
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Y%2FIydAqqyfOi8cvIHkRmW7cp%2Bc0TQlbPlbYW6l2fyOopJJKm4AgaS78oq0qJYCp91vwYLpKI4cfhKsNE9mM5oX%2BNIWmZn71mhU2sDtqLDk2aQCAreWlp2OQ5Q3zJgvBN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78ff0c616ad1b51e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash d76eabb75e9bc357b8a24de74e226072
96f5248f07ce6adfffadcaa3bb7f8ce480d2aeea
34aa8e59db97e6d278f991f962e142666402f5143e250c013f2d3d5ac5b3018f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1754
Cache-Control: max-age=114575
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 05:22:03 GMT
Etag: "63d27530-117"
Expires: Sat, 28 Jan 2023 13:11:38 GMT
Last-Modified: Thu, 26 Jan 2023 12:42:24 GMT
Server: ECS (amb/6B89)
X-Cache: HIT
Content-Length: 279
imgshare.info/images/2023/01/18/88f7e8204cce4dcef2511a5ec5eefcb1.png
200 OK 40 kB URL HTTP/2 imgshare.info/images/2023/01/18/88f7e8204cce4dcef2511a5ec5eefcb1.png
IP
File type PNG image data, 728 x 90, 8-bit/color RGB, non-interlaced\012- data
Hash d57c81b9f0004068a3e47d520d8c72dc
406d06562181d418e3e7b1287aa56f7924bc3146
df4ed32dce3f34aed1ce29e6e1e34710062a0f855dffe85106501f3aad4dd02d
GET /images/2023/01/18/88f7e8204cce4dcef2511a5ec5eefcb1.png HTTP/1.1
Host: imgshare.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://9xflix.help/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 05:22:03 GMT
content-type: image/png
content-length: 39701
last-modified: Wed, 18 Jan 2023 15:44:17 GMT
etag: "63c813d1-9b15"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 731945
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3iaEEvfunrIl%2F6kS74hWDI%2FqRHInRptCAbDQvfkhkf%2Fvv2F%2FUfNpTwWxl4wUOEyuO4vloOWQJmT0fXct7jckQzFZf1p3mpi5%2BmotqpHr5%2Fts0VSplzW%2F54hZKDz4Uhxd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78ff0c617ad4b51e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
imgshare.info/images/2023/01/18/526bfda1ba666548c313978801cd4f25.png
200 OK 12 kB URL HTTP/2 imgshare.info/images/2023/01/18/526bfda1ba666548c313978801cd4f25.png
IP
File type PNG image data, 320 x 50, 8-bit/color RGB, non-interlaced\012- data
Hash 24a077144fd5a224acec2f45a24bcfa2
7555e6d58c1c8eed6aea853caff2f6428f8fa970
edf2aec9e8d1a19f6afe3810796450b0d11e1c3f27dc58296891932a40e18287
GET /images/2023/01/18/526bfda1ba666548c313978801cd4f25.png HTTP/1.1
Host: imgshare.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://9xflix.help/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 05:22:03 GMT
content-type: image/png
content-length: 12078
last-modified: Wed, 18 Jan 2023 15:38:09 GMT
etag: "63c81261-2f2e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 688020
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gwL1basFWf97aLFjzCthLiOh6fdiSyDNiwjxkPI%2FQhGDwHED%2Bzdw7mi4mg%2F4tgvlFDHBt2c6mnoSJuraNnEJhj52bOIBBtVw%2Fsytu5J%2BErRViWaIlnTQI5qboFHCw5Jy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78ff0c617adbb51e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
9xflix.help/m/wp-content/themes/promaxpro/js/tickerme.min.js
200 OK 993 B URL HTTP/1.1 9xflix.help/m/wp-content/themes/promaxpro/js/tickerme.min.js
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (2728), with no line terminators
Hash d59d0700ec0c3aa979053d6128efb7dc
163e95fbd5a35347a45ec29f02db08bcb035935e
4395191fd10670f8a9ff1e5a557cddd90c109b574a93bf93c77ddbd1320061ab
GET /m/wp-content/themes/promaxpro/js/tickerme.min.js HTTP/1.1
Host: 9xflix.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://9xflix.help/m/gandhi-godse-ek-yudh-2023/
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 05:22:03 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sat, 12 Jan 2019 05:01:49 GMT
Expires: Sun, 26 Feb 2023 05:22:03 GMT
Cache-Control: max-age=2592000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: HIT
X-Server-Powered-By: Engintron
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Xk4tOzFR4o%2BFtOL9N33ECyyTj%2FWFiS5kZ1JtIddZqqYMNg2ltiAiVS3spFTSc4nWKww1sZML%2FbvCt5LbN7hIVLoBA%2BKe0Guzy8bdjeV7YXmnzafV968wz8JOVoIc1w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78ff0c611d15b521-OSL
alt-svc: h2=":443"; ma=60
9xflix.help/m/wp-content/themes/promaxpro/foundation/js/vendor/jquery.js
200 OK 30 kB URL HTTP/1.1 9xflix.help/m/wp-content/themes/promaxpro/foundation/js/vendor/jquery.js
IP
File type ASCII text, with very long lines (32018)
Hash 73e01fa57069a7e49f43f77bf586ab4b
03473e1b66aac83cc9644834e24a0df452a3ef44
02a64558a051a27e7fb08bb662a30bba77f10a89400a57acfe73961720a10902
GET /m/wp-content/themes/promaxpro/foundation/js/vendor/jquery.js HTTP/1.1
Host: 9xflix.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://9xflix.help/m/gandhi-godse-ek-yudh-2023/
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 05:22:03 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sat, 12 Jan 2019 05:01:49 GMT
Expires: Sun, 26 Feb 2023 05:22:03 GMT
Cache-Control: max-age=2592000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: HIT
X-Server-Powered-By: Engintron
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FDq9BBUSb3pNKLEcl1cDzz7LU6expD%2FB0nJy%2FZ6K%2FDIIwIP4m0CGmu3vf490Ut8v6xQ3Co%2FWVjhdkH%2BFoT%2Fw8BN6VYenByvO%2BTqeR0g56ofrpPredu7NUL%2BSOag8pg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78ff0c60d853b511-OSL
alt-svc: h2=":443"; ma=60
oneegrou.net/5/4783032
200 OK 24 kB IP
File type ASCII text, with very long lines (64623), with no line terminators
Hash 3635f4c3bbfc96dffef7b1a08b1fa3f0
61b1cb024da83333cea634711334141b5d60e2f9
3b6abbe3ccb2096d3753b2e10d497d1b81add43efb85bf02130ff07a1b56b3e1
Analyzer Verdict Alert quad9 Sinkholed
GET /5/4783032 HTTP/1.1
Host: oneegrou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://9xflix.help/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 27 Jan 2023 05:22:03 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: 6eaa14c34a5760ceb499f421fbd6867a
Link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding
Access-Control-Max-Age: 86400
Timing-Allow-Origin: *
Set-Cookie: OAID=39558efc64514504805c40392e8636f0; expires=Sat, 27 Jan 2024 05:22:03 GMT; path=/
oaidts=1674796923; expires=Sat, 27 Jan 2024 05:22:03 GMT; path=/
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
Pragma: no-cache, no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e494fdd6ca9f320c6f0a2ddfeb399c50
41a888703eaf546c04e3d7110e0c6db79659e994
e0251effb62e37d108b9e6c955620ebf35267542a04dcd8ed30dbf90eaea2522
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 05:22:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
9xflix.help/m/wp-includes/js/comment-reply.min.js?ver=5.0.18
200 OK 580 B URL HTTP/1.1 9xflix.help/m/wp-includes/js/comment-reply.min.js?ver=5.0.18
IP
File type ASCII text, with very long lines (1076), with no line terminators
Hash 03610c833b0a8cd39a5cfd87a20dd104
038ccb657a60f77c5eaf6a707bd4d0834d08da42
9feb345568ea18a6f4cee3c910adb99c956a06161a6c75e2c3a1a916f2129baa
GET /m/wp-includes/js/comment-reply.min.js?ver=5.0.18 HTTP/1.1
Host: 9xflix.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://9xflix.help/m/gandhi-godse-ek-yudh-2023/
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 05:22:03 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Thu, 15 Apr 2021 04:34:04 GMT
Expires: Sun, 26 Feb 2023 05:22:03 GMT
Cache-Control: max-age=2592000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: STALE
X-Server-Powered-By: Engintron
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9g48m5V2b80zyKE3YHbo3zcgJHgsGBnCLDQDNBUzbOB%2FsMefNa%2BOPutOmzB%2FX%2FayYuxsfFpUZnVaf%2FEkdtXSsNvIGMITrk7NhsUWKKh8WrWpS%2BYeOZblbHklumxvbQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78ff0c617bbab505-OSL
alt-svc: h2=":443"; ma=60
9xflix.help/m/wp-content/plugins/akismet/_inc/form.js?ver=4.1
200 OK 318 B URL HTTP/1.1 9xflix.help/m/wp-content/plugins/akismet/_inc/form.js?ver=4.1
IP
Hash 9981fd8493ac6b5c99634815c9aef030
15e922eda1c62a37bce0aea182535530889a044e
66780daa2edc073e9067f4b12f75d41c58bea33d1455d788b72b0e1853cca132
GET /m/wp-content/plugins/akismet/_inc/form.js?ver=4.1 HTTP/1.1
Host: 9xflix.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://9xflix.help/m/gandhi-godse-ek-yudh-2023/
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 05:22:03 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 02 Jul 2014 21:14:30 GMT
Expires: Sun, 26 Feb 2023 05:22:03 GMT
Cache-Control: max-age=2592000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: STALE
X-Server-Powered-By: Engintron
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KZCCvSh0MlGkVBl27UZsxC4ij%2FLks9E3C%2FawRjD9xH2%2BgQh83k96idplAhX0vVmSuBrC%2FqnKVsr78znltaII7bKvM1o%2B7Rh1Rx8l5xc3aD3AIThinlPdkvkG6dRD2Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78ff0c61cd34b503-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 82e3abc4a7b17efedca67cf215f4bb60
e20e55d87591af7db3a4bcfc429048f85e389b85
df8901d4d87686fb11e17986f5d53cf513f675b4dd71f0a2e35c7ffbefa7fb9e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 05:22:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
9xflix.help/m/wp-includes/js/wp-embed.min.js?ver=5.0.18
200 OK 739 B URL HTTP/1.1 9xflix.help/m/wp-includes/js/wp-embed.min.js?ver=5.0.18
IP
File type ASCII text, with very long lines (1391), with no line terminators
Hash 60d8829560031a011771efa2f39708af
a4689c3b70f773deb896eec78028e0902ef15097
a0176bd4cc53bd2e920b0dfd10f56d2a4a3820d671539414ef4b3e2b3e50b9b7
GET /m/wp-includes/js/wp-embed.min.js?ver=5.0.18 HTTP/1.1
Host: 9xflix.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://9xflix.help/m/gandhi-godse-ek-yudh-2023/
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 05:22:03 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Thu, 15 Apr 2021 04:34:04 GMT
Expires: Sun, 26 Feb 2023 05:22:03 GMT
Cache-Control: max-age=2592000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: HIT
X-Server-Powered-By: Engintron
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2fwRh%2B3LtEBoEfeLIIOAseXY0MuFza7dIBCztzUc4Yyg76qzpOwWOBdDLe7Bwz8VI41eQ9tKzibxSk9XC0c44SSkHOi2y1HNFMUjt5%2B%2FcLBzUZ4ikw4aF0HaowYpHw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78ff0c617a12b500-OSL
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
200 OK 279 B IP
Hash d76eabb75e9bc357b8a24de74e226072
96f5248f07ce6adfffadcaa3bb7f8ce480d2aeea
34aa8e59db97e6d278f991f962e142666402f5143e250c013f2d3d5ac5b3018f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3268
Cache-Control: max-age=116089
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 05:22:03 GMT
Etag: "63d27530-117"
Expires: Sat, 28 Jan 2023 13:36:52 GMT
Last-Modified: Thu, 26 Jan 2023 12:42:24 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 279
9xflix.help/m/wp-content/themes/promaxpro/foundation/js/foundation.min.js
200 OK 44 kB URL HTTP/1.1 9xflix.help/m/wp-content/themes/promaxpro/foundation/js/foundation.min.js
IP
Hash 3593d8134971eb7165547a171de50d05
2483f77cb332794857118673f92fb6513e54bd97
fab0613d15cb67527a5f7dc0d3117b4a013495b3c5880069749278c24f7fd45b
GET /m/wp-content/themes/promaxpro/foundation/js/foundation.min.js HTTP/1.1
Host: 9xflix.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://9xflix.help/m/gandhi-godse-ek-yudh-2023/
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 05:22:03 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sat, 12 Jan 2019 05:01:49 GMT
Expires: Sun, 26 Feb 2023 05:22:03 GMT
Cache-Control: max-age=2592000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: HIT
X-Server-Powered-By: Engintron
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qLH5dbRvEs2KfkvaCb3fAFYwPIAhcJuOD7dyKjgmQ1XkjXl8Uh3BVa9tuR7%2FUDpolOqd3ffYuKc9yH0J%2FD%2BarthTTJ%2FGplUVvbcLzbuSsk%2FAysrbfgC7SHGnX0g42g%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78ff0c614e531c02-OSL
alt-svc: h2=":443"; ma=60
9xflix.help/m/wp-includes/js/wp-emoji-release.min.js?ver=5.0.18
200 OK 4.4 kB URL HTTP/1.1 9xflix.help/m/wp-includes/js/wp-emoji-release.min.js?ver=5.0.18
IP
File type ASCII text, with very long lines (9063)
Hash d003dd2e571097385bde0a605679ae06
de43f1329eaffe6791b8dcf20779550722a6115c
55ac05ff21ebcd3328a22771444f5be265f19998bbf3292072bc17b93adb4bbb
GET /m/wp-includes/js/wp-emoji-release.min.js?ver=5.0.18 HTTP/1.1
Host: 9xflix.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://9xflix.help/m/gandhi-godse-ek-yudh-2023/
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 05:22:03 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Thu, 15 Apr 2021 04:34:04 GMT
Expires: Sun, 26 Feb 2023 05:22:03 GMT
Cache-Control: max-age=2592000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: HIT
X-Server-Powered-By: Engintron
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ka7T%2FubW%2BzAOdxnW%2F%2BBZF%2Fel5SQn1c27gQefuWUIH%2FwF%2FVzjwYgBgQ4USjl%2BvUF0tj7fvMni%2BlLOVjIAjEFkxSLusgj6yp%2BsUR%2BtZ%2Fyl92yL1Eq85KMQR7gJk7%2FAxA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78ff0c61fd84b521-OSL
alt-svc: h2=":443"; ma=60
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/1.1 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://9xflix.help
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 44856
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 24 Jan 2023 18:35:14 GMT
Expires: Wed, 24 Jan 2024 18:35:14 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Mon, 15 Aug 2022 18:20:18 GMT
Content-Type: font/woff2
Age: 211609
9xflix.help/m/wp-content/uploads/2019/03/9xflix-main.png
200 OK 34 kB URL HTTP/1.1 9xflix.help/m/wp-content/uploads/2019/03/9xflix-main.png
IP
File type PNG image data, 350 x 94, 8-bit/color RGBA, non-interlaced\012- data
Hash 528f6c6f4c5fa28e4d3f595be5fcb84d
858db59df78221fcccb4a88f4caf425ed39aa0cf
abc00eb8b241141c0232241b53859a90924e689839a6fcf902db2d6ab77747be
GET /m/wp-content/uploads/2019/03/9xflix-main.png HTTP/1.1
Host: 9xflix.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://9xflix.help/m/gandhi-godse-ek-yudh-2023/
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 05:22:03 GMT
Content-Type: image/png
Content-Length: 33802
Connection: keep-alive
Last-Modified: Wed, 13 Mar 2019 11:24:51 GMT
Expires: Tue, 28 Mar 2023 05:22:03 GMT
Cache-Control: max-age=5184000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: HIT
X-Server-Powered-By: Engintron
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0jQzJxughBeYGVMCoR47iPAHT3uDeQSQorqReJPVlGAmGu7ZtnaMH6wLMup2PR1o0ewgl%2BnoxcPkq6cqXdcUxhIdksp1eVJxOo3xpFkHpAFVyfmXaT8aqn85cw29DA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ff0c61f923b511-OSL
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Last-Modified, ETag, Expires, Backoff, Content-Length, Cache-Control, Alert, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 27 Jan 2023 04:49:03 GMT
age: 1980
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
9xflix.help/m/wp-content/themes/promaxpro/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL HTTP/1.1 9xflix.help/m/wp-content/themes/promaxpro/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /m/wp-content/themes/promaxpro/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: 9xflix.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://9xflix.help/m/wp-content/themes/promaxpro/font-awesome/css/font-awesome.min.css?ver=5.0.18
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 05:22:03 GMT
Content-Type: application/font-woff2
Content-Length: 77160
Connection: keep-alive
Last-Modified: Sat, 12 Jan 2019 05:01:49 GMT
Expires: Tue, 28 Mar 2023 05:22:03 GMT
Cache-Control: max-age=5184000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: HIT
X-Server-Powered-By: Engintron
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5rO60k97bY35PsLEo6FJvwgWszcQk1umBtS6N2u214YvouEj%2B5QWZmXPyk8iG0YDhSPtrJft13MJXj8reZV7EofwFKRGWumWrXahc9U6r8NctL5LG5ruu%2FBv2Tvx8Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ff0c626a97b500-OSL
alt-svc: h2=":443"; ma=60
nanouwho.com/1?z=5149918
200 OK 7.1 kB IP
File type ASCII text, with very long lines (17093)
Hash a7c63d32136346fa90f43dbbfc86e054
9e187c4ed71a4939627a10f5e6e5e54e49458364
ad988e6e2c0290ef1cdb19562713525157c915cedefa4e51ab2db97faae5cc14
Analyzer Verdict Alert quad9 Sinkholed
GET /1?z=5149918 HTTP/1.1
Host: nanouwho.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://9xflix.help/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 27 Jan 2023 05:22:03 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin:
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID
X-Trace-Id: 9f552444c4159e35411d5076604a6425
Access-Control-Expose-Headers: X-Sc
X-Sc: otJUR8Roz2P5dGmWD0f3OFd-mD2efoTPLmvK9YGNJEGka_8r9eX4hNh-11iBJmMlqre3zGwsMS0gt6hXbp2tDSOge6k=
Set-Cookie: scm=1; expires=Sat, 27 Jan 2024 05:22:03 GMT; secure; SameSite=None
OAID=704a50a0229d4630aa5a2b81941050a3; expires=Sat, 27 Jan 2024 05:22:03 GMT; secure; SameSite=None
oaidts=1674796923; expires=Sat, 27 Jan 2024 05:22:03 GMT; secure; SameSite=None
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2fd3b5487710791cafa87110d681647a
6f3de59c79cf8f93c3312d917e9bb225a8bb25f9
35c24aa8f70e97185a0a18761f04b283cefecdce3abcd2261ccc6377077730c5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35C24AA8F70E97185A0A18761F04B283CEFECDCE3ABCD2261CCC6377077730C5"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10363
Expires: Fri, 27 Jan 2023 08:14:46 GMT
Date: Fri, 27 Jan 2023 05:22:03 GMT
Connection: keep-alive
9xflix.help/m/wp-content/themes/promaxpro/fonts/OpenSans-Regular-webfont.woff
200 OK 23 kB URL HTTP/1.1 9xflix.help/m/wp-content/themes/promaxpro/fonts/OpenSans-Regular-webfont.woff
IP
File type Web Open Font Format, TrueType, length 22660, version 1.0\012- data
Hash 79515ad0788973c533405f7012dfeccd
5092881fad2caffdc6bf71bdab1ea547b73d3564
22e7a1b10c110072f5a0bfd16e2197a76b279ec879bcce8978fada1dc9ee5d40
GET /m/wp-content/themes/promaxpro/fonts/OpenSans-Regular-webfont.woff HTTP/1.1
Host: 9xflix.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://9xflix.help/m/wp-content/themes/promaxpro/style.css?ver=5.0.18
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 05:22:03 GMT
Content-Type: font/woff
Content-Length: 22660
Connection: keep-alive
Last-Modified: Sat, 12 Jan 2019 05:01:49 GMT
Expires: Tue, 28 Mar 2023 05:22:03 GMT
Cache-Control: max-age=5184000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: HIT
X-Server-Powered-By: Engintron
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2Zi7n%2BbDCKIdBISYfVPnvihS%2BtxV16wAzNxJ55ybYa34XJRyTvxvjsPCSQGGLauU2sCUSGzIGdzxQs3%2Bvn%2BGZ3YvnGp3p%2BmYA5i0OWaNgaZjptQKy6iAVdtsQttYqQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ff0c62dec11c02-OSL
alt-svc: h2=":443"; ma=60
my.rtmark.net/gid.js?userId=39558efc64514504805c40392e8636f0
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?userId=39558efc64514504805c40392e8636f0
IP
File type JSON data\012- , ASCII text
Hash 50e74433765d574825600c6a791f4bd2
aeba95e1997fbb4cabb09fc683193fa0c22d81e3
56761fd679a671f9a02eb9092e0a6c6d4ab382f29129410741a39548a1907ba9
GET /gid.js?userId=39558efc64514504805c40392e8636f0 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://9xflix.help
Connection: keep-alive
Referer: http://9xflix.help/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 05:22:03 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: http://9xflix.help
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=39558efc64514504805c40392e8636f0; expires=Sat, 27 Jan 2024 05:22:03 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c398b6b39d11d25b8ae9bc5cd94a1c98
640aa8c399ced71d0c2a9f5a90fbaf091b01d642
a6f07f7c6a4746acc25457c726701df33120628dfb578bc4982448d8efee5855
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A6F07F7C6A4746ACC25457C726701DF33120628DFB578BC4982448D8EFEE5855"
Last-Modified: Tue, 24 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12123
Expires: Fri, 27 Jan 2023 08:44:06 GMT
Date: Fri, 27 Jan 2023 05:22:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f0a4098f041b32de6aeac7e8919dfb93
d3dd3d384e3bc4454b58f48c878261b5d165c2bd
1a2e07af32d611f5b897d8f26ba1ba7008bdbb7814bc749dc3f6992167ed6d64
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1A2E07AF32D611F5B897D8F26BA1BA7008BDBB7814BC749DC3F6992167ED6D64"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6317
Expires: Fri, 27 Jan 2023 07:07:20 GMT
Date: Fri, 27 Jan 2023 05:22:03 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5f57a83befb5510821576265e691190f
136d15f2cbbc6416d808afcb8f48a19b346937fc
b3d3b78aaea9273c95224d6242a3817bac9be7fc46800e741da32bba13db5fa6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 05:22:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
9xflix.help/m/wp-content/uploads/2019/01/9xflixfavi.png
200 OK 4.7 kB URL HTTP/1.1 9xflix.help/m/wp-content/uploads/2019/01/9xflixfavi.png
IP
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 475002158367f1024f1e07ac0ee7f0dd
d6b6d970988ba13d802b1e885581321dadb136bd
1812f2e3f4f57c4ce312b03d16a8ab616370ef552ab72de4aaf549405aab14a4
GET /m/wp-content/uploads/2019/01/9xflixfavi.png HTTP/1.1
Host: 9xflix.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://9xflix.help/m/gandhi-godse-ek-yudh-2023/
Cookie: _ga_K0ZE96QVP7=GS1.1.1674796923.1.0.1674796923.0.0.0; _ga=GA1.1.1494421302.1674796923
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 05:22:03 GMT
Content-Type: image/png
Content-Length: 4746
Connection: keep-alive
Last-Modified: Sun, 13 Jan 2019 11:58:36 GMT
Expires: Tue, 28 Mar 2023 05:22:03 GMT
Cache-Control: max-age=5184000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: HIT
X-Server-Powered-By: Engintron
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=74%2BE3VO1hlYuTIUtrtAi0MyoyDEtCV5Ds7VrVuJGb5ehlf9tw72KG2UtyhYUqIBhJHEOCoD%2F4CLQMznGF0vkiFcUAlh21yMnbqaWCDc04VRUtRANOeX%2BQrF2Gl%2B94g%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ff0c64dc17b500-OSL
alt-svc: h2=":443"; ma=60
oneegrou.net/?rb=pmu61LCigycEcTDV_37JYpJb7eO_kTQ_9XQA1iVBvA1KgQgdCyVh48dVPLAGo1EmNuQkHXlmRg0oc8_CDK_0dDGp6BUJthCbio3hFQLDLpnydrGPLrFJQ0lw-h3LLdVVt_qc-jw5enDkDwRUB1mKTnBG8OUPhX4g7pBZGLm6Mmfgd-fPDzs0Dpf_AVsK_C4P2_LHS3mn6EzWUCHS6fAsFseOjefUrbnzr2F_Cw%3D%3D&request_ab2=0&zoneid=4783032&js_build=iclick-v1.473.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=0&pl=http%3A%2F%2F9xflix.help%2Fm%2Fgandhi-godse-ek-yudh-2023%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.473.0&bs=b2c62cd9-df5d-4e6c-9919-e8611fcc0bb7&userId=39558efc64514504805c40392e8636f0&m=link
200 OK 1.7 kB URL HTTP/1.1 oneegrou.net/?rb=pmu61LCigycEcTDV_37JYpJb7eO_kTQ_9XQA1iVBvA1KgQgdCyVh48dVPLAGo1EmNuQkHXlmRg0oc8_CDK_0dDGp6BUJthCbio3hFQLDLpnydrGPLrFJQ0lw-h3LLdVVt_qc-jw5enDkDwRUB1mKTnBG8OUPhX4g7pBZGLm6Mmfgd-fPDzs0Dpf_AVsK_C4P2_LHS3mn6EzWUCHS6fAsFseOjefUrbnzr2F_Cw%3D%3D&request_ab2=0&zoneid=4783032&js_build=iclick-v1.473.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=0&pl=http%3A%2F%2F9xflix.help%2Fm%2Fgandhi-godse-ek-yudh-2023%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.473.0&bs=b2c62cd9-df5d-4e6c-9919-e8611fcc0bb7&userId=39558efc64514504805c40392e8636f0&m=link
IP
File type JSON data\012- , ASCII text, with very long lines (2222), with no line terminators
Hash 1ceb98cf4d6c3a516f45993b1e75eba0
d94b11c39e1466edf0de33d8a5cacb71c1d00170
e6a9b03b07f777f81f182dbe08753221392e6c1ba074b8435facb028c055b939
Analyzer Verdict Alert quad9 Sinkholed
GET /?rb=pmu61LCigycEcTDV_37JYpJb7eO_kTQ_9XQA1iVBvA1KgQgdCyVh48dVPLAGo1EmNuQkHXlmRg0oc8_CDK_0dDGp6BUJthCbio3hFQLDLpnydrGPLrFJQ0lw-h3LLdVVt_qc-jw5enDkDwRUB1mKTnBG8OUPhX4g7pBZGLm6Mmfgd-fPDzs0Dpf_AVsK_C4P2_LHS3mn6EzWUCHS6fAsFseOjefUrbnzr2F_Cw%3D%3D&request_ab2=0&zoneid=4783032&js_build=iclick-v1.473.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=0&pl=http%3A%2F%2F9xflix.help%2Fm%2Fgandhi-godse-ek-yudh-2023%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.473.0&bs=b2c62cd9-df5d-4e6c-9919-e8611fcc0bb7&userId=39558efc64514504805c40392e8636f0&m=link HTTP/1.1
Host: oneegrou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://9xflix.help/
Origin: http://9xflix.help
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 27 Jan 2023 05:22:03 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: e559ff9cdca295fdf142659f8b2dde9b
Access-Control-Allow-Origin: http://9xflix.help
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding
Access-Control-Max-Age: 86400
Pragma: no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT
Set-Cookie: OAID=39558efc64514504805c40392e8636f0; expires=Sat, 27 Jan 2024 05:22:03 GMT; path=/
oaidts=1674796923; expires=Sat, 27 Jan 2024 05:22:03 GMT; path=/
syncedCookie=true; expires=Fri, 03 Feb 2023 05:22:03 GMT; path=/
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *, *
Content-Encoding: gzip
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: vjqHuaHlVP/W/YSoUpNJsA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 3gEqMz8X6DnGJfNDBuZgDnyXtEU=
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhxXk4il7XCwS2urSjWdvoUiepJBLnqU-Sc_jJqQ__XDxe61Zu15hS9ucz4vWkHmBLxN_f04ocnyeFlR4FN8bIDkwqBDsv77xEruSCo51ezxjuDfTUKcAsOONjHx1S6rQpjgTqmD9FaOtsYV4-RZ7lpaSPC4P81TDIPCPJ3oWWLQ5jUMxw67yC_xZP15g/s984/Gandhi%20Godse%20Ek%20Yudh%202023%20Hindi%20720p%20pDVDRip_s.jpg
200 OK 72 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhxXk4il7XCwS2urSjWdvoUiepJBLnqU-Sc_jJqQ__XDxe61Zu15hS9ucz4vWkHmBLxN_f04ocnyeFlR4FN8bIDkwqBDsv77xEruSCo51ezxjuDfTUKcAsOONjHx1S6rQpjgTqmD9FaOtsYV4-RZ7lpaSPC4P81TDIPCPJ3oWWLQ5jUMxw67yC_xZP15g/s984/Gandhi%20Godse%20Ek%20Yudh%202023%20Hindi%20720p%20pDVDRip_s.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 550x984, components 3\012- data
Hash 5126f3b811874d144cf223efeac07df4
a599e71af435898c39e3a2a30e1a784f256458b5
c54a4d67bf49e68d3759eb1d7929fd60dbcfa885662ed0c29f9b43d3918e2702
GET /img/b/R29vZ2xl/AVvXsEhxXk4il7XCwS2urSjWdvoUiepJBLnqU-Sc_jJqQ__XDxe61Zu15hS9ucz4vWkHmBLxN_f04ocnyeFlR4FN8bIDkwqBDsv77xEruSCo51ezxjuDfTUKcAsOONjHx1S6rQpjgTqmD9FaOtsYV4-RZ7lpaSPC4P81TDIPCPJ3oWWLQ5jUMxw67yC_xZP15g/s984/Gandhi%20Godse%20Ek%20Yudh%202023%20Hindi%20720p%20pDVDRip_s.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://9xflix.help/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v2571"
expires: Sat, 28 Jan 2023 05:22:04 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Gandhi Godse Ek Yudh 2023 Hindi 720p pDVDRip_s.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Fri, 27 Jan 2023 05:22:04 GMT
server: fife
content-length: 72150
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
nanouwho.com/9?z=5149918&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=http%3A%2F%2F9xflix.help%2Fm%2Fgandhi-godse-ek-yudh-2023%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&sah=1002&drf=&hil=1&ist=0&oaid=39558efc64514504805c40392e8636f0
204 No Content 0 B URL HTTP/2 nanouwho.com/9?z=5149918&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=http%3A%2F%2F9xflix.help%2Fm%2Fgandhi-godse-ek-yudh-2023%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&sah=1002&drf=&hil=1&ist=0&oaid=39558efc64514504805c40392e8636f0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
OPTIONS /9?z=5149918&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=http%3A%2F%2F9xflix.help%2Fm%2Fgandhi-godse-ek-yudh-2023%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&sah=1002&drf=&hil=1&ist=0&oaid=39558efc64514504805c40392e8636f0 HTTP/1.1
Host: nanouwho.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://9xflix.help/
Origin: http://9xflix.help
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Fri, 27 Jan 2023 05:22:04 GMT
access-control-allow-credentials: true
access-control-allow-origin: http://9xflix.help
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
widgets.amung.us/small/29/2907.png
200 OK 342 B URL HTTP/2 widgets.amung.us/small/29/2907.png
IP
File type PNG image data, 80 x 15, 8-bit colormap, non-interlaced\012- data
Hash fb4708e9fba39d2e09c383fc4e98329c
c998f38e137652942cacef5afbce6d37044328a4
3f5754eb40b65b46f2450aacf0c13ee4adc50fe14e3e71772e473d636cfe4223
GET /small/29/2907.png HTTP/1.1
Host: widgets.amung.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://9xflix.help/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 05:22:04 GMT
content-type: image/png
content-length: 342
last-modified: Sun, 13 Jun 2010 09:48:32 GMT
etag: "4c14a970-156"
expires: Fri, 27 Jan 2023 14:47:42 GMT
cache-control: max-age=2678400
access-control-allow-origin: *
cf-cache-status: HIT
age: 52462
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78ff0c6779da98f6-ARN
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5f57a83befb5510821576265e691190f
136d15f2cbbc6416d808afcb8f48a19b346937fc
b3d3b78aaea9273c95224d6242a3817bac9be7fc46800e741da32bba13db5fa6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 05:22:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
nanouwho.com/9?z=5149918&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=http%3A%2F%2F9xflix.help%2Fm%2Fgandhi-godse-ek-yudh-2023%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&sah=1002&drf=&hil=1&ist=0&oaid=39558efc64514504805c40392e8636f0
200 OK 7 B URL HTTP/2 nanouwho.com/9?z=5149918&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=http%3A%2F%2F9xflix.help%2Fm%2Fgandhi-godse-ek-yudh-2023%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&sah=1002&drf=&hil=1&ist=0&oaid=39558efc64514504805c40392e8636f0
IP
File type ASCII text, with no line terminators
Hash a97eb6fbe6f13b601d5d48c0eba8baae
736efb938caf3d0edec406932ada889f1a4f2268
a04bf061f53e0011fd2f43bdf081526344f003c50146c88c42c2d95ef22c1821
Analyzer Verdict Alert quad9 Sinkholed
POST /9?z=5149918&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=http%3A%2F%2F9xflix.help%2Fm%2Fgandhi-godse-ek-yudh-2023%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&sah=1002&drf=&hil=1&ist=0&oaid=39558efc64514504805c40392e8636f0 HTTP/1.1
Host: nanouwho.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 203
Origin: http://9xflix.help
Connection: keep-alive
Referer: http://9xflix.help/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 05:22:04 GMT
content-type: application/javascript
content-length: 7
access-control-allow-credentials: true
access-control-allow-origin: http://9xflix.help
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID
x-trace-id: 62bd66f048e6ae298e69f687db06bf29
access-control-expose-headers: X-Sc
x-sc: NNwxPXYG58kwUS7g4A7HIKO7aN0bdlkJRCaPTqaThbPx9kT36aBpNa3kDVSasYRHiE-sOdClDywP2IO1ty5KHiS0mkQ=
set-cookie: scm=1; expires=Sat, 27 Jan 2024 05:22:04 GMT; secure; SameSite=None
OAID=39558efc64514504805c40392e8636f0; expires=Sat, 27 Jan 2024 05:22:04 GMT; secure; SameSite=None
oaidts=1674796924; expires=Sat, 27 Jan 2024 05:22:04 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-K0ZE96QVP7>m=2oe1p0&_p=1317184923&cid=1494421302.1674796923&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1674796923&sct=1&seg=0&dl=http%3A%2F%2F9xflix.help%2Fm%2Fgandhi-godse-ek-yudh-2023%2F&dt=9xflix&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-K0ZE96QVP7>m=2oe1p0&_p=1317184923&cid=1494421302.1674796923&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1674796923&sct=1&seg=0&dl=http%3A%2F%2F9xflix.help%2Fm%2Fgandhi-godse-ek-yudh-2023%2F&dt=9xflix&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-K0ZE96QVP7>m=2oe1p0&_p=1317184923&cid=1494421302.1674796923&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1674796923&sct=1&seg=0&dl=http%3A%2F%2F9xflix.help%2Fm%2Fgandhi-godse-ek-yudh-2023%2F&dt=9xflix&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://9xflix.help
Connection: keep-alive
Referer: http://9xflix.help/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: http://9xflix.help
date: Fri, 27 Jan 2023 05:22:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3483
Expires: Fri, 27 Jan 2023 06:20:08 GMT
Date: Fri, 27 Jan 2023 05:22:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3483
Expires: Fri, 27 Jan 2023 06:20:08 GMT
Date: Fri, 27 Jan 2023 05:22:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3483
Expires: Fri, 27 Jan 2023 06:20:08 GMT
Date: Fri, 27 Jan 2023 05:22:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3483
Expires: Fri, 27 Jan 2023 06:20:08 GMT
Date: Fri, 27 Jan 2023 05:22:05 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16430244-f45f-4aea-a8a8-2b1f37fa80ef.jpeg
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16430244-f45f-4aea-a8a8-2b1f37fa80ef.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5e7158416f60576804ccff03307319fe
a342f94625e913fa6b8d862a59979f1e3ad80dd1
5c525df7d169cc7e033d920c11f4a0163a781c025a22b70530882b56964a9a52
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16430244-f45f-4aea-a8a8-2b1f37fa80ef.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5737
x-amzn-requestid: 23239d1f-0228-4722-b826-40dc8c9a4af2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVzDbEacIAMFZtA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d23215-1604c24e272fbb657b9925cc;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:56:05 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -_8PZoms7W6Lvw__KsoTwL_CzjfyWChzoSWDc9yCk9zCR8cTs87oNA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 16:31:35 GMT
age: 46230
etag: "a342f94625e913fa6b8d862a59979f1e3ad80dd1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b7a0759c043594fbe85af422b59b8227
a05cfaad16078f42218dae233da38f6f5dff8487
e898d6ef1b3998fb9322a8fc190069ec5f7b3582bfe8397a2367497d84a27549
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11568
x-amzn-requestid: 2e85f75e-ab9d-4d45-adad-7313950a9647
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fSWbxGwnoAMFejw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d0d117-68f1a9e71a07a0453311fd32;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 06:49:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: dbz3wXGNaetf6xvRE98rshyHy-FVfDo8co-4VDL0a4Qe3E4U8A82Og==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 18:35:59 GMT
etag: "a05cfaad16078f42218dae233da38f6f5dff8487"
content-type: image/jpeg
age: 38766
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F53bbd20e-50aa-4ce8-8565-a97b3c8ee694.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F53bbd20e-50aa-4ce8-8565-a97b3c8ee694.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 02c8d9f27e0d17c38a55da6699dfb96e
6804d00e292afc0b7aadb08b11e7650488dacaa2
1ce3b93f1348649ddca495022525daf6d760823edd67bb9e506c7ee031a849b1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F53bbd20e-50aa-4ce8-8565-a97b3c8ee694.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7973
x-amzn-requestid: acaa2abf-9789-4953-b3ab-98064a9a0137
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fXrXvHvBIAMFkQg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d2f297-2dc2c04e2a491b3f7f5e8370;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 21:37:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: VEfYV5hz_1XQHIeHsNcf50Q1cTkCCe7zJzzxyYWGX62D99O8ZCuuSA==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 21:47:43 GMT
age: 27262
etag: "6804d00e292afc0b7aadb08b11e7650488dacaa2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59e67210-efa8-4704-9931-e876d7c8922b.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59e67210-efa8-4704-9931-e876d7c8922b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 262b43386e404cb3d320c47c4cf792c1
87f304f8583fe6b6e942a9dbcb5efb5ee94987f2
ca0f72005920b2b2f49c387314540f3cd2f3d7808f0365dfb1c491500e8a8714
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59e67210-efa8-4704-9931-e876d7c8922b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8065
x-amzn-requestid: 4a4a6d4c-9c4b-418d-be96-8a0d1de4828a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fBYVuHZsoAMFmWw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ca0757-74c21aa22d11c4240019a4b3;Sampled=0
x-amzn-remapped-date: Fri, 20 Jan 2023 03:15:35 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Ep_QyiLEIxubEC9RgbxdlAVYnQ65fxR22squ9p-9aXfpUVyah_oSow==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 21:47:43 GMT
age: 27262
etag: "87f304f8583fe6b6e942a9dbcb5efb5ee94987f2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
whos.amung.us/swidget/rfgjdsiwoz.png
307 Temporary Redirect 5.7 kB URL HTTP/2 whos.amung.us/swidget/rfgjdsiwoz.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f4b88ea6f29f683c4b46a7487fce35a5
fa64e1287967459f665d337865a2333b4fdc4c33
f0290a9132b343d91426385e31c61cad787b5e82878b5015c13d4c356e387787
GET /swidget/rfgjdsiwoz.png HTTP/1.1
Host: whos.amung.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://9xflix.help/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
date: Fri, 27 Jan 2023 05:22:03 GMT
content-type: text/html; charset=UTF-8
location: https://widgets.amung.us/small/29/2907.png
cache-control: no-cache, no-store, must-revalidate
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 78ff0c6518d698f6-ARN
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5163812c-4389-44eb-b150-06b17c4ce709.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5163812c-4389-44eb-b150-06b17c4ce709.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f819bef602c1582c03369ae192781a18
ceba3fe645526c11f53327a672cc8bee5a26d730
5084edafadd1835817389ba77457a6b19d909b7da4d16d5660a7c0749cab288e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5163812c-4389-44eb-b150-06b17c4ce709.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10320
x-amzn-requestid: 53838261-aa68-414f-a161-d2b8b64d69c6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fBYVuEr4oAMFQ8Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ca0757-135d8d6c3578bfb511e0df7d;Sampled=0
x-amzn-remapped-date: Fri, 20 Jan 2023 03:15:35 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QSv6P3460EwW1alzJuP08s9I-J5rBKvGYY8076hfC88JfPtIf-Jr-w==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 16:02:16 GMT
age: 47989
etag: "ceba3fe645526c11f53327a672cc8bee5a26d730"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
nanouwho.com/27/f0e85569ebf902c5568035fe1b0a0004
200 OK 0 B URL HTTP/2 nanouwho.com/27/f0e85569ebf902c5568035fe1b0a0004
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /27/f0e85569ebf902c5568035fe1b0a0004 HTTP/1.1
Host: nanouwho.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://9xflix.help/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 05:22:03 GMT
content-type: application/javascript
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID
cache-control: max-age:290304000, public
last-modified: Thu, 26 Jan 2023 04:44:45 GMT
expires: Thu, 25 Feb 2083 04:44:45 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
188.114.96.1
34.117.237.239
104.22.74.171
139.45.197.238
23.36.76.226