www.9xmovies.pro/
301 Moved Permanently 173 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 50644c014958ed335f38f6f04e26e1fc
a71d725b72e5dc09089786c4507341ffa0c4289c
081cfdebd8b1f991de73ffb0c121dd5ec4e4c4af5af459a7d19b60fc0e147416
GET / HTTP/1.1
Host: www.9xmovies.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Location: https://www.9xmovies.pro/
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Sat, 26 Nov 2022 14:47:48 GMT
Expires: Sat, 26 Nov 2022 14:47:48 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 173
Server: GSE
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a9f1d4d98705c281fed3b60343463200
db6f8aa98d2eda4e5473b116a222c3055568bb78
164d11173045b569cafb32e300e4c1ec6d6ab177fd34d0414cc40c541268779f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "164D11173045B569CAFB32E300E4C1EC6D6AB177FD34D0414CC40C541268779F"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8370
Expires: Sat, 26 Nov 2022 17:07:18 GMT
Date: Sat, 26 Nov 2022 14:47:48 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 71f9c681a82440fd55e76c780a20e55d
3147768cfbcdd06e0c6e69684292e68e99917a80
5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2569
Expires: Sat, 26 Nov 2022 15:30:37 GMT
Date: Sat, 26 Nov 2022 14:47:48 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 15b59d5e62caedb4bec3ba6724906c1e
960f801e608a56fdd11449f4face29f62cad2b21
8c72a45737c2eeddf328b0ed3236f3243551d904e94ec9dd7254972ebfb9229e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6577
Cache-Control: max-age=163977
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:47:48 GMT
Etag: "6381eaec-1d7"
Expires: Mon, 28 Nov 2022 12:20:45 GMT
Last-Modified: Sat, 26 Nov 2022 10:31:08 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: sLzUljm6WfUa18y0fYMVw7M5nlSUFPWU87oiPwNOsR0M20Gr7OLV8ms9pmk1z2CaLH1VzfURR++03uWs9b4DuQ==
x-amz-request-id: T51DQW5GJ66MPP27
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 26 Nov 2022 14:44:16 GMT
age: 212
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 26 Nov 2022 14:19:13 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1715
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:48 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/zr1lz5dJTPY
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/zr1lz5dJTPY
IP
Hash 07ab2383d07af4bbb762ca6916b9affc
a9c70fb7440e76978d9cc5afe00bf65394af2ac5
43acc9e3884334904c0f7e72d591702731204ffa7dd77b178aaef2878eb6a706
POST /s/gts1d4/zr1lz5dJTPY HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:47:48 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.9xmovies.pro/
200 OK 47 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (47437)
Hash 2d04ac295a405901a0c79641e061aa1f
a695a187fa2508e81be3b9c932ed59da248048ba
64e37da0452c45c34008b0e3f01f7f8cf1ebca2fb59aecc338502754083a65f9
GET / HTTP/1.1
Host: www.9xmovies.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
x-robots-tag: all,noodp
content-type: text/html; charset=UTF-8
expires: Sat, 26 Nov 2022 14:47:48 GMT
date: Sat, 26 Nov 2022 14:47:48 GMT
cache-control: private, max-age=0
last-modified: Fri, 25 Nov 2022 17:58:26 GMT
etag: W/"caa5121926f984d2e5513d91d16ffc86a9529e317089e1e7963bf6022f2da584"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 46675
server: GSE
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 13c265f2c258e0bcea2ac1149188d332
3d42f91eec1fae7ff5e243d2a35afdd5a6d58db0
26666f4ea8fe16648ef9593216b725f692a1cb913763b186cd19d59e7875a930
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6322
Cache-Control: max-age=151130
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:47:48 GMT
Etag: "6381b9bc-117"
Expires: Mon, 28 Nov 2022 08:46:38 GMT
Last-Modified: Sat, 26 Nov 2022 07:01:16 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash c9899f1943dcf7bac99356e42a0ffd4e
1878cb3de48bb36849fad3eeed9c530f7bedf4ff
3642b3a52a4c42af00927bbad167d551970cfca20c159f9671a793ca9d420a85
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1846
Cache-Control: max-age=121094
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:47:48 GMT
Etag: "638155e4-117"
Expires: Mon, 28 Nov 2022 00:26:02 GMT
Last-Modified: Fri, 25 Nov 2022 23:55:16 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 279
www.9xmovies.pro/js/cookienotice.js
200 OK 2.0 kB URL HTTP/2 www.9xmovies.pro/js/cookienotice.js
IP
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
GET /js/cookienotice.js HTTP/1.1
Host: www.9xmovies.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Sat, 26 Nov 2022 14:47:48 GMT
expires: Sat, 03 Dec 2022 14:47:48 GMT
cache-control: public, max-age=604800
last-modified: Sat, 26 Nov 2022 13:49:39 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 619fa0039b94697fc8a5bd24f57e8aa2
53a366391a51d625029cc6d32fb4e8b6060990fd
dff604305831a0399aa44b2fac806e43512afa846569ba6e5685eca6495d9fa5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:47:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 75fb516edea16e43b6577165de9bf42e
ee42c6fe6b3684589ca4acd0d36f77614f6d03ae
eb20d98e5a3ca4100ce715b54a67a5c8fd5b7105563e17678a21b22dba2e3200
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB20D98E5A3CA4100CE715B54A67A5C8FD5B7105563E17678A21B22DBA2E3200"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4338
Expires: Sat, 26 Nov 2022 16:00:06 GMT
Date: Sat, 26 Nov 2022 14:47:48 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4513b3e20f13517f315830204f584399
276efeb772493488fb992d28fde3cb411e0a702e
d69505431a7b5c8b88936943b55ddcaafb020d373c9db273b0634e4f597db1cf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D69505431A7B5C8B88936943B55DDCAAFB020D373C9DB273B0634E4F597DB1CF"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7441
Expires: Sat, 26 Nov 2022 16:51:49 GMT
Date: Sat, 26 Nov 2022 14:47:48 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f575aee4f3f9ed92647e6efd5d92b195
ed485eaa177873f0cb7f42817c6d0a4435cf3a76
ef7c5f6de7d3e3c93a6863c1e6525d172fe699807f79ea3183d69dece05f0009
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:47:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9614e8cab212f1df41b98fc13c2423a8
b39206db7dc0eb3484f5bd4cb37e83d9cb31889a
6e1d69faef655188981c11f19bff501ce2d3409f7b55428fa41cb16f28e3cb13
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6E1D69FAEF655188981C11F19BFF501CE2D3409F7B55428FA41CB16F28E3CB13"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2257
Expires: Sat, 26 Nov 2022 15:25:25 GMT
Date: Sat, 26 Nov 2022 14:47:48 GMT
Connection: keep-alive
ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
IP
File type ASCII text, with very long lines (32077)
Hash fd2b58574f9637ba7ef639267349d848
6eda5ea93f549ceb5693f6f1c038893fa56a510d
75627d4b97e5e6294a8f88f5eeaf9b616696dc8600db9701c47ef05f067880ec
GET /ajax/libs/jquery/1.12.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33951
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 25 Nov 2022 13:47:02 GMT
expires: Sat, 25 Nov 2023 13:47:02 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 90046
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6983392700438f228fa9b5bba4594fc5
d27c65105b44a2e1ff7663ba0021a475b5b30cd2
557627dbab910f61773f0f818efc6b18bb2b5816175199b997684a799c1c97e0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:47:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 10bdd1fc5b7bd4dbc3170c3f6fcb52a5
f71eea9b40d160e788708289bb488dc010170320
12d39f876c6d655ef96e83c807c5e8495e8c4675eb871ecce7445e928b593948
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "12D39F876C6D655EF96E83C807C5E8495E8C4675EB871ECCE7445E928B593948"
Last-Modified: Thu, 24 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1752
Expires: Sat, 26 Nov 2022 15:17:00 GMT
Date: Sat, 26 Nov 2022 14:47:48 GMT
Connection: keep-alive
apis.google.com/js/platform.js
200 OK 21 kB URL HTTP/2 apis.google.com/js/platform.js
IP
File type ASCII text, with very long lines (1279)
Hash 7ac44ef24e267df17ff72f195b252806
62db12d9ce11a576ccd7fa3544d851c5fd42f3b7
aae7897e7b55999c1b3166309381d19ac488dced51e14071339d8b193a686a61
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20984
date: Sat, 26 Nov 2022 14:47:48 GMT
expires: Sat, 26 Nov 2022 14:47:48 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "7446758f13887885"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 13c265f2c258e0bcea2ac1149188d332
3d42f91eec1fae7ff5e243d2a35afdd5a6d58db0
26666f4ea8fe16648ef9593216b725f692a1cb913763b186cd19d59e7875a930
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6322
Cache-Control: max-age=151130
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:47:48 GMT
Etag: "6381b9bc-117"
Expires: Mon, 28 Nov 2022 08:46:38 GMT
Last-Modified: Sat, 26 Nov 2022 07:01:16 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 279
www.blogger.com/static/v1/widgets/2342155703-widgets.js
200 OK 57 kB URL HTTP/2 www.blogger.com/static/v1/widgets/2342155703-widgets.js
IP
File type ASCII text, with very long lines (2221)
Hash 1217c8e34acb09c7cea97bae4d386ea1
55ee17703d0a7710943e93913bacb49220d98b4b
c2f23437ab938096bf8b40de8b08c4f27bb880b7ef8588481ec5ccc08b58870b
GET /static/v1/widgets/2342155703-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56726
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 21 Nov 2022 16:02:03 GMT
expires: Tue, 21 Nov 2023 16:02:03 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Nov 2022 00:52:59 GMT
content-type: text/javascript
age: 427545
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.9xmovies.pro/responsive/sprite_v1_6.css.svg
200 OK 2.2 kB URL HTTP/2 www.9xmovies.pro/responsive/sprite_v1_6.css.svg
IP
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (7657)
Hash 95c6fb790198cc0364925ea12e2bce11
371752558ef1ccaa9885db20be2d882dd1c15dab
a4f0e38c228313a0eb22ea4faeca14467732a9992e2b514a9a16b2717ab5d8b5
GET /responsive/sprite_v1_6.css.svg HTTP/1.1
Host: www.9xmovies.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: image/svg+xml
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2244
date: Sat, 26 Nov 2022 14:47:48 GMT
expires: Sat, 03 Dec 2022 14:47:48 GMT
cache-control: public, max-age=604800
last-modified: Sat, 26 Nov 2022 07:50:18 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash d3df71aab146eefc49acb608796aab63
8401892995193919376dfcd798b09c8261579454
a616c1e54e896576601e6107c1814adbebf35364d8ed807cdd89ac36b8200c88
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4956
Cache-Control: max-age=157299
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:47:48 GMT
Etag: "6381d72b-1d7"
Expires: Mon, 28 Nov 2022 10:29:27 GMT
Last-Modified: Sat, 26 Nov 2022 09:06:51 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 26 Nov 2022 14:11:12 GMT
cache-control: public,max-age=3600
age: 2196
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 619fa0039b94697fc8a5bd24f57e8aa2
53a366391a51d625029cc6d32fb4e8b6060990fd
dff604305831a0399aa44b2fac806e43512afa846569ba6e5685eca6495d9fa5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:47:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 619fa0039b94697fc8a5bd24f57e8aa2
53a366391a51d625029cc6d32fb4e8b6060990fd
dff604305831a0399aa44b2fac806e43512afa846569ba6e5685eca6495d9fa5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:47:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6983392700438f228fa9b5bba4594fc5
d27c65105b44a2e1ff7663ba0021a475b5b30cd2
557627dbab910f61773f0f818efc6b18bb2b5816175199b997684a799c1c97e0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:47:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
upgulpinon.com/1?z=4825384
200 OK 7.3 kB URL HTTP/2 upgulpinon.com/1?z=4825384
IP
Hash 5385ff2ca2863a3c216a37858accab56
f54241657f3fc76580c5c5e6c5a41a180785cf80
b8ce8962aed795f115459b9d0162d8113239d3b0a59b0e5e15639ec5f34ca041
GET /1?z=4825384 HTTP/1.1
Host: upgulpinon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:48 GMT
content-type: text/javascript
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
x-trace-id: 6245c8654d8b7a3fc2530ba8481bd3e0
access-control-expose-headers: X-Sc
x-sc: 0Rj7QT9mMPdtY8GQ9cBQaP1YXrkKpHxOKoyfjgVWbnX_DHiNGs-_fluJMQvyad53V88kPEGtb6l19W6JnMX_JFhbwww=
set-cookie: scm=1; expires=Sun, 26 Nov 2023 14:47:48 GMT; secure; SameSite=None
OAID=26a85a97f97c4efba4128df027271748; expires=Sun, 26 Nov 2023 14:47:48 GMT; secure; SameSite=None
oaidts=1669474068; expires=Sun, 26 Nov 2023 14:47:48 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL HTTP/2 stackpath.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.9xmovies.pro
Connection: keep-alive
Referer: https://stackpath.bootstrapcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:47:49 GMT
content-type: font/woff2
content-length: 77160
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: "af7ae505a9eed503f8b8e6982036873e"
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 08/17/2022 18:20:14
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 752
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 2ca82e5e3b9ff8edeabb788f92acddf9
cdn-cache: HIT
cf-cache-status: HIT
age: 54828
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 77036be39a51fab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:47:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:47:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 54f24adb80ed3e82590fae1e776d2df6
502bcc08679c733c00caab73fb2facaaa2f04fe7
581b3030b7c35b78f5537d3fffd0630add6c5e4b7873f7b97cb71fc0993a6fe6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "581B3030B7C35B78F5537D3FFFD0630ADD6C5E4B7873F7B97CB71FC0993A6FE6"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5684
Expires: Sat, 26 Nov 2022 16:22:33 GMT
Date: Sat, 26 Nov 2022 14:47:49 GMT
Connection: keep-alive
fonts.gstatic.com/s/ptsans/v17/jizaRExUiTo99u79D0KExQ.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/ptsans/v17/jizaRExUiTo99u79D0KExQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 45300, version 1.0\012- data
Hash 5fe660c3a23b871807b0e1d3ee973d23
62a9dd423b30b6ee3ab3dd40d573545d579af10a
e13ffa988be59cbf299d7ff68f019f902b60848203ac4990819eb7e4624ee52d
GET /s/ptsans/v17/jizaRExUiTo99u79D0KExQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.9xmovies.pro
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 45300
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 18:51:03 GMT
expires: Thu, 23 Nov 2023 18:51:03 GMT
cache-control: public, max-age=31536000
age: 244606
last-modified: Wed, 27 Apr 2022 16:11:08 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/ptsans/v17/jizfRExUiTo99u79B_mh0O6tLQ.woff2
200 OK 47 kB URL HTTP/2 fonts.gstatic.com/s/ptsans/v17/jizfRExUiTo99u79B_mh0O6tLQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 47048, version 1.0\012- data
Hash 87a1556b696ae2cb1a726bd8c4584a2f
1be0f6f39e0cf316f9827f945eeeaef8294cc37b
141f0c53e457585d4ac7426eb3d757666d250ee6fbf0e9c0878128e4c627f0b1
GET /s/ptsans/v17/jizfRExUiTo99u79B_mh0O6tLQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.9xmovies.pro
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 47048
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 25 Nov 2022 22:54:25 GMT
expires: Sat, 25 Nov 2023 22:54:25 GMT
cache-control: public, max-age=31536000
age: 57204
last-modified: Wed, 27 Apr 2022 16:55:54 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash c1110d51de4424a45f2b55d25cce77aa
6c65ff3af4d33ba452c703a5e0649ada35f3c4ab
68d44af5dca12d99ea7a2d7ed2877375db59cdd8286fa12d50fcb574fbade9e8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3931
Cache-Control: max-age=153394
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:47:49 GMT
Etag: "6381cbec-118"
Expires: Mon, 28 Nov 2022 09:24:23 GMT
Last-Modified: Sat, 26 Nov 2022 08:18:52 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 280
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:47:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tobaltoyon.com/zone?pub=0&zone_id=4825372&is_mobile=false&domain=www.9xmovies.pro&var=&ymid=&var_3=
200 OK 664 B URL HTTP/2 tobaltoyon.com/zone?pub=0&zone_id=4825372&is_mobile=false&domain=www.9xmovies.pro&var=&ymid=&var_3=
IP
File type JSON data\012- , ASCII text, with very long lines (663)
Hash 41aff81d5fabf0da82d75b14dd2ca9f8
50d440d386428bcef67c04e16f1866297003df1f
b6a3877dc1f42177754b9f117b6da509459fbe6038edf38fb872ea65fa7a1895
GET /zone?pub=0&zone_id=4825372&is_mobile=false&domain=www.9xmovies.pro&var=&ymid=&var_3= HTTP/1.1
Host: tobaltoyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.9xmovies.pro/
Origin: https://www.9xmovies.pro
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:49 GMT
content-type: application/json; charset=utf-8
content-length: 664
x-trace-id: 83145347b174ca299c5d3f3f74090635
access-control-allow-origin: https://www.9xmovies.pro
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash c1110d51de4424a45f2b55d25cce77aa
6c65ff3af4d33ba452c703a5e0649ada35f3c4ab
68d44af5dca12d99ea7a2d7ed2877375db59cdd8286fa12d50fcb574fbade9e8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4130
Cache-Control: max-age=153592
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:47:49 GMT
Etag: "6381cbec-118"
Expires: Mon, 28 Nov 2022 09:27:41 GMT
Last-Modified: Sat, 26 Nov 2022 08:18:52 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 280
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: yRGsLYTloZoS1+oSnf0dPA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: jsVYP7hs1GVtksnm/0wMXPBJF3Y=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ab613e5c115337b9045429845f00dd77
e639b62ee6eec0f202046c9e22a2680785276d5a
35bdf0edc6ea3b142ddb06f0a82fe3e9fb81aa2a4eb350c46f1ae722d27d1288
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35BDF0EDC6EA3B142DDB06F0A82FE3E9FB81AA2A4EB350C46F1AE722D27D1288"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12958
Expires: Sat, 26 Nov 2022 18:23:47 GMT
Date: Sat, 26 Nov 2022 14:47:49 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ab613e5c115337b9045429845f00dd77
e639b62ee6eec0f202046c9e22a2680785276d5a
35bdf0edc6ea3b142ddb06f0a82fe3e9fb81aa2a4eb350c46f1ae722d27d1288
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35BDF0EDC6EA3B142DDB06F0A82FE3E9FB81AA2A4EB350C46F1AE722D27D1288"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12944
Expires: Sat, 26 Nov 2022 18:23:33 GMT
Date: Sat, 26 Nov 2022 14:47:49 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9cd64c16bfa1bb2160e4c0e8c2a52a41
a45acaf27bb71b49d9b352fbb754dba22dbca227
f76cf2e61346c2615a6ec458448c4e7c1fc95c15ffed49a2409f888a33127f68
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F76CF2E61346C2615A6EC458448C4E7C1FC95C15FFED49A2409F888A33127F68"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12479
Expires: Sat, 26 Nov 2022 18:15:48 GMT
Date: Sat, 26 Nov 2022 14:47:49 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9cd64c16bfa1bb2160e4c0e8c2a52a41
a45acaf27bb71b49d9b352fbb754dba22dbca227
f76cf2e61346c2615a6ec458448c4e7c1fc95c15ffed49a2409f888a33127f68
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F76CF2E61346C2615A6EC458448C4E7C1FC95C15FFED49A2409F888A33127F68"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12435
Expires: Sat, 26 Nov 2022 18:15:04 GMT
Date: Sat, 26 Nov 2022 14:47:49 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9cd64c16bfa1bb2160e4c0e8c2a52a41
a45acaf27bb71b49d9b352fbb754dba22dbca227
f76cf2e61346c2615a6ec458448c4e7c1fc95c15ffed49a2409f888a33127f68
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F76CF2E61346C2615A6EC458448C4E7C1FC95C15FFED49A2409F888A33127F68"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21505
Expires: Sat, 26 Nov 2022 20:46:14 GMT
Date: Sat, 26 Nov 2022 14:47:49 GMT
Connection: keep-alive
www.9xmovies.pro/feeds/posts/summary?max-results=1&alt=json-in-script&callback=dataFeed
200 OK 1.9 kB URL HTTP/2 www.9xmovies.pro/feeds/posts/summary?max-results=1&alt=json-in-script&callback=dataFeed
IP
File type Unicode text, UTF-8 text, with very long lines (5585)
Hash ea60ab27c6e12ff8af8f9e0e5371f053
0d9f9cb0e9ec5ee6257eaef73bf759c6c8d23a78
9ba56ee0d0bfb0fa0afda2128031b50787fa49bf04d5bfa8ad80aafa1f776349
GET /feeds/posts/summary?max-results=1&alt=json-in-script&callback=dataFeed HTTP/1.1
Host: www.9xmovies.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
content-encoding: gzip
etag: W/"31a61b8c96fd87d06ad868b1f2b0b6d5e509d11db2d588fd5931774081d1dd51"
date: Sat, 26 Nov 2022 14:47:49 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
vary: Accept-Encoding
expires: Sat, 26 Nov 2022 14:47:50 GMT
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Fri, 25 Nov 2022 17:58:26 GMT
content-length: 1909
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash eb7b989b3377c96ae331f6deeab33ad6
e975c9f5121852023ef22cbee9738cd8db575686
234fb878cf2edc873b7e273491a9054db9ad1264e0e375f83e05a10bc9d60399
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 14:47:49 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 24 Nov 2022 12:52:19 GMT
Expires: Thu, 01 Dec 2022 12:52:18 GMT
Etag: "e975c9f5121852023ef22cbee9738cd8db575686"
Cache-Control: max-age=424468,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77036be74842b500-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 94d86bd8aa3fb64d5ef4ba39b2093f46
f6f8b969e6d14af88dcd584c72ad52d904d459e9
43bbb48a1a37a33c18036773457c75408e907c1fd7297a42152aee29f396066e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "43BBB48A1A37A33C18036773457C75408E907C1FD7297A42152AEE29F396066E"
Last-Modified: Thu, 24 Nov 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10314
Expires: Sat, 26 Nov 2022 17:39:43 GMT
Date: Sat, 26 Nov 2022 14:47:49 GMT
Connection: keep-alive
painsdire.com/watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c
200 OK 1.1 kB URL HTTP/1.1 painsdire.com/watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 62505e8ffe7ee59431fed801f088c92f
ce5f349d49e165d646b3653fb0f5234f7557db96
5adabf244f6f3844dfab8aa0dcb28ee67d83979a338a8653d2f2ed314733ff15
GET /watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c HTTP/1.1
Host: painsdire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 26 Nov 2022 14:47:49 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=16681754; expires=Sun, 27 Nov 2022 14:47:49 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.sm_WIsCF8hlYr4gsAmyxHxBVkRSpGTF9wjoXfhiQ8Bw; expires=Sat, 26 Nov 2022 14:48:49 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7c34a989b3142f56c0e59db68873e3b5
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
painsdire.com/watchnew?key=70790807726fdadc53b3c8c3eb42357b
200 OK 1.1 kB URL HTTP/1.1 painsdire.com/watchnew?key=70790807726fdadc53b3c8c3eb42357b
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 48cbbafdb8448250e7a430594123a10a
acb5e432d2b5f720a505534d245717f2ff774b09
85410364e719adf34e1f3a65945a22828b172a9d98c42884f8e066309903b24f
GET /watchnew?key=70790807726fdadc53b3c8c3eb42357b HTTP/1.1
Host: painsdire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 26 Nov 2022 14:47:49 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=16681775; expires=Sun, 27 Nov 2022 14:47:49 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNjY4MTc3NSwiayI6IjcwNzkwODA3NzI2ZmRhZGM1M2IzYzhjM2ViNDIzNTdiIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxNjg2OTU2LCJwaWQiOjEwNTU4MCwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoxLCJhaWQiOjIzLCJwdCI6NCwicGsiOiJkdHlwNmQxdjlwIiwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjkwNzUzNDU3LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6Mzg5MTQsIm9uIjoiV2luZG93cyIsIm92IjoiMTAuMCIsImJpZCI6MTIwNjI1LCJibiI6IkZpcmVmb3giLCJidiI6IjEwNS4wIiwid3YiOmZhbHNlLCJlIjpmYWxzZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImEiOmZhbHNlLCJjciI6eyJuIjoiQmxpeCBTb2x1dGlvbnMifSwieGYiOiIiLCJpeGYiOmZhbHNlLCJpZ3hmIjpmYWxzZSwidXAiOnRydWUsInIiOiJodHRwczovL3d3dy45eG1vdmllcy5wcm8vIn19.Bi-6Ef7CTwLvOyNfxhZWoAK5T_vm2JAu_AJv2JlPaVM; expires=Sat, 26 Nov 2022 14:48:49 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a9797ca6d4f5699d348c708ba7bbd752
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
painsdire.com/82/fb/5e/82fb5efd15fdce80f8c2e719a1865087.js
200 OK 13 kB URL HTTP/1.1 painsdire.com/82/fb/5e/82fb5efd15fdce80f8c2e719a1865087.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (37155), with no line terminators
Hash c38ead3068d02aecef54dcf70bf46fb9
2eaa304ae564a41e9e46ffde9116b00455d63675
3c161b4c516e026775c3d9b6b5828f76e56b8bab917106d29a9288626b6ea3bf
GET /82/fb/5e/82fb5efd15fdce80f8c2e719a1865087.js HTTP/1.1
Host: painsdire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 26 Nov 2022 14:47:49 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: fa0665f2297930e1493afaba1c8538fb
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
painsdire.com/watchnew?key=682fb3969083f8eff7b4af9742d32558
200 OK 1.1 kB URL HTTP/1.1 painsdire.com/watchnew?key=682fb3969083f8eff7b4af9742d32558
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash b493bdfa4f381c22c78029dd381cf35e
cacd92877ecf3cd0e22ea50116f6523855ac095d
fd7aac735b8763e507f639607a2663321b61baedc1f670cb8a9d50b0fc20d198
GET /watchnew?key=682fb3969083f8eff7b4af9742d32558 HTTP/1.1
Host: painsdire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 26 Nov 2022 14:47:49 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=16681773; expires=Sun, 27 Nov 2022 14:47:49 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNjY4MTc3MywiayI6IjY4MmZiMzk2OTA4M2Y4ZWZmN2I0YWY5NzQyZDMyNTU4Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxNjg2OTU2LCJwaWQiOjEwNTU4MCwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoxLCJhaWQiOjI2LCJwdCI6NCwicGsiOiJtd3NuN3RjMzIiLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6OTA3NTM0NTcsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMjA2MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTA1LjAiLCJ3diI6ZmFsc2UsImUiOmZhbHNlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6Imh0dHBzOi8vd3d3Ljl4bW92aWVzLnByby8ifX0.QdrK48gYUNO2DK-T_O9f0Pwizc4F54gDwtpS3mx7yGA; expires=Sat, 26 Nov 2022 14:48:49 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5875db91ad89c0a8d9a0c212a2d3e8fe
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
200 OK 12 B URL HTTP/1.1 fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
Analyzer Verdict Alert quad9 Sinkholed
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f HTTP/1.1
Host: fleraprt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1205
Origin: https://www.9xmovies.pro
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Sat, 26 Nov 2022 14:47:50 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://www.9xmovies.pro
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 46cdb4e62ca65c1190d3604219d0ae05
085bde67b3d401a53ca855ca3317d092e8a21cbf
e5ba20cbcda4c22b1ff4e250b49afb08ab2752349628e8144a248a1512beab29
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E5BA20CBCDA4C22B1FF4E250B49AFB08AB2752349628E8144A248A1512BEAB29"
Last-Modified: Sat, 26 Nov 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19658
Expires: Sat, 26 Nov 2022 20:15:27 GMT
Date: Sat, 26 Nov 2022 14:47:49 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4330c15cbec5a3d8735a66499971ca16
febc3a5d12f6def79afd74003b370d054e713196
3f1ebf6792cb8c53345a7378cef23d086f94e57aa9b3826e17c51ec5555edd5d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3F1EBF6792CB8C53345A7378CEF23D086F94E57AA9B3826E17C51EC5555EDD5D"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7040
Expires: Sat, 26 Nov 2022 16:45:09 GMT
Date: Sat, 26 Nov 2022 14:47:49 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f6c66db42422b4927137f0be99e8f6e1
9d319d51a61ef780889d5765b84b72b39662cbbe
664ea152688df8cdcc969e2304803ce2ba6e603a1f2ddf9ac45e12fd922f3484
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "664EA152688DF8CDCC969E2304803CE2BA6E603A1F2DDF9AC45E12FD922F3484"
Last-Modified: Thu, 24 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3899
Expires: Sat, 26 Nov 2022 15:52:48 GMT
Date: Sat, 26 Nov 2022 14:47:49 GMT
Connection: keep-alive
tobaltoyon.com/custom
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: tobaltoyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.9xmovies.pro/
Origin: https://www.9xmovies.pro
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:49 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://www.9xmovies.pro
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
my.rtmark.net/gid.js
200 OK 65 B IP
File type JSON data\012- , ASCII text
Hash 8d8f9ebb17225e4cf252b2aa32b4e382
adfcb24bea3f3b18986c1782cc555ae71044e280
89f868af9441b41ad0a4235c58aa2202d9e30e9a2c0ed47498eb1c34f204e55b
GET /gid.js HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.9xmovies.pro
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:49 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://www.9xmovies.pro
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=3cf5712921204b2b85f64055bbba950d; expires=Sun, 26 Nov 2023 14:47:49 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
tobaltoyon.com/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: tobaltoyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.9xmovies.pro/
Content-Type: application/json
Origin: https://www.9xmovies.pro
Content-Length: 369
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:49 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: fe792896d00f066942b3742b0782a260
access-control-allow-origin: https://www.9xmovies.pro
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
painsdire.com/watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c
200 OK 1.1 kB URL HTTP/1.1 painsdire.com/watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 17de8936a80e009b45c4dbcccc4e0623
8014e0e7906763bbbce34fe9094b805bc37303fb
0cb423003f16ef48873fb33302cfb91ef7572ec44f1522c2b653c9a07dbf8073
GET /watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c HTTP/1.1
Host: painsdire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 26 Nov 2022 14:47:49 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=16681754; expires=Sun, 27 Nov 2022 14:47:49 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.sm_WIsCF8hlYr4gsAmyxHxBVkRSpGTF9wjoXfhiQ8Bw; expires=Sat, 26 Nov 2022 14:48:49 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ce11c12370e53ffa1d002701e76f8b53
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
painsdire.com/watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c
200 OK 1.1 kB URL HTTP/1.1 painsdire.com/watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 5beef3e0e711d119e00462514df6dd6b
ae76778e4d203f7508741c766bb1fb183aaff7ed
dd8337a601e2340170a18a4aeaa4c93870f4a3d05588866d1e49847394d78cf7
GET /watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c HTTP/1.1
Host: painsdire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 26 Nov 2022 14:47:49 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=16681754; expires=Sun, 27 Nov 2022 14:47:49 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.sm_WIsCF8hlYr4gsAmyxHxBVkRSpGTF9wjoXfhiQ8Bw; expires=Sat, 26 Nov 2022 14:48:49 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ef8b8c996b382a4fd0f162f0291c0800
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
painsdire.com/watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c
200 OK 1.1 kB URL HTTP/1.1 painsdire.com/watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 847c5eaa090608282fd7d272f4551a11
065228997c796fd5a81eb8394a6a1a71efedd363
1647853fe96ec497371625dcdb7565576cdcecb0ce67ee768fb13db151b9d27a
GET /watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c HTTP/1.1
Host: painsdire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 26 Nov 2022 14:47:49 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=16681754; expires=Sun, 27 Nov 2022 14:47:49 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.sm_WIsCF8hlYr4gsAmyxHxBVkRSpGTF9wjoXfhiQ8Bw; expires=Sat, 26 Nov 2022 14:48:49 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e8e2b9b7f2b44160a3a88ff92e87e0dc
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
painsdire.com/watchnew?key=70790807726fdadc53b3c8c3eb42357b
200 OK 1.1 kB URL HTTP/1.1 painsdire.com/watchnew?key=70790807726fdadc53b3c8c3eb42357b
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 73fd5757ca09fc7a757b4fe1708699c6
d5a8d2ce54d3d881045a8464aec4229ef12754e9
be6491540767145365bcafcbecc895b35af852c1da626365edc7da701a4e36bc
GET /watchnew?key=70790807726fdadc53b3c8c3eb42357b HTTP/1.1
Host: painsdire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 26 Nov 2022 14:47:49 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=16681775; expires=Sun, 27 Nov 2022 14:47:49 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNjY4MTc3NSwiayI6IjcwNzkwODA3NzI2ZmRhZGM1M2IzYzhjM2ViNDIzNTdiIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxNjg2OTU2LCJwaWQiOjEwNTU4MCwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoxLCJhaWQiOjIzLCJwdCI6NCwicGsiOiJkdHlwNmQxdjlwIiwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjkwNzUzNDU3LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6Mzg5MTQsIm9uIjoiV2luZG93cyIsIm92IjoiMTAuMCIsImJpZCI6MTIwNjI1LCJibiI6IkZpcmVmb3giLCJidiI6IjEwNS4wIiwid3YiOmZhbHNlLCJlIjpmYWxzZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImEiOmZhbHNlLCJjciI6eyJuIjoiQmxpeCBTb2x1dGlvbnMifSwieGYiOiIiLCJpeGYiOmZhbHNlLCJpZ3hmIjpmYWxzZSwidXAiOnRydWUsInIiOiJodHRwczovL3d3dy45eG1vdmllcy5wcm8vIn19.Bi-6Ef7CTwLvOyNfxhZWoAK5T_vm2JAu_AJv2JlPaVM; expires=Sat, 26 Nov 2022 14:48:49 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a69fb9d46388f979c601d67e4ec6c314
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
painsdire.com/watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c
200 OK 1.1 kB URL HTTP/1.1 painsdire.com/watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash ac8db780f6524c973fc9a26a772ea111
4a4f83e04399596566f96f766ef525d0ce792046
6d0af04f3269f11950c6a4adc2678bb8935b2352cc7c575de2216cc6636b4f1f
GET /watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c HTTP/1.1
Host: painsdire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 26 Nov 2022 14:47:49 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=16681754; expires=Sun, 27 Nov 2022 14:47:49 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.sm_WIsCF8hlYr4gsAmyxHxBVkRSpGTF9wjoXfhiQ8Bw; expires=Sat, 26 Nov 2022 14:48:49 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: fe1c20cc40a8d0cd69170fb4fb59ed77
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
painsdire.com/watchnew?key=70790807726fdadc53b3c8c3eb42357b
200 OK 1.1 kB URL HTTP/1.1 painsdire.com/watchnew?key=70790807726fdadc53b3c8c3eb42357b
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 1b8d8045c34e24242b35261f156e0787
e8ebcda8b9835b9e1392259ff361fb7a34038e23
bdae24641032583d4c3d1c90cac165e72d60c7b33fce61e89ccb7398be6bcb47
GET /watchnew?key=70790807726fdadc53b3c8c3eb42357b HTTP/1.1
Host: painsdire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 26 Nov 2022 14:47:49 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=16681775; expires=Sun, 27 Nov 2022 14:47:49 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.Bi-6Ef7CTwLvOyNfxhZWoAK5T_vm2JAu_AJv2JlPaVM; expires=Sat, 26 Nov 2022 14:48:49 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 53ea4ecbf32c3b5d4258fd7eaac17d21
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.9xmovies.pro/sw.js
404 Not Found 32 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (47437)
Hash 07112ddb33bdc41d3b2847c7ff423b8e
293131197dda08cb0a2953db40ddac2e715dc27a
767e1c1f6d231f53f5c28404a88b029fedd0d1332bd58c2d2ec83199ebbd9beb
GET /sw.js HTTP/1.1
Host: www.9xmovies.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.9xmovies.pro/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 26 Nov 2022 14:47:49 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 31603
server: GSE
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash d438e1af63e2f2b0e0cdf2a74966ab91
37e36842937ddc6abf543f0623894e770cc06118
a5121c332d69fbec0378a247a93432ecc3f00014bd67df9b1ff613bea57af4d1
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "A5121C332D69FBEC0378A247A93432ECC3F00014BD67DF9B1FF613BEA57AF4D1"
Last-Modified: Fri, 25 Nov 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13649
Expires: Sat, 26 Nov 2022 18:35:18 GMT
Date: Sat, 26 Nov 2022 14:47:49 GMT
Connection: keep-alive
painsdire.com/watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c
200 OK 1.1 kB URL HTTP/1.1 painsdire.com/watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 9d392fb80c91766526504a5e26b9ba7c
a9d604b791eda7cab887bd94bbca7373650b8f5c
d94ada11b3fb0c48999486dea6e8826d1eb6067f8c57d030d4a9db99d8a68f54
GET /watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c HTTP/1.1
Host: painsdire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Cookie: u_pl=16681775; ain=eyJhbGciOiJIUzI1NiJ9.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.Bi-6Ef7CTwLvOyNfxhZWoAK5T_vm2JAu_AJv2JlPaVM
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 26 Nov 2022 14:47:50 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=16681775,16681754; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.sm_WIsCF8hlYr4gsAmyxHxBVkRSpGTF9wjoXfhiQ8Bw; expires=Sat, 26 Nov 2022 14:48:50 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: bb5f8ddbb3e510b1ca7261ff4390cebd
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ibrapush.com/zone?pub=0&zone_id=4825330&is_mobile=false&domain=www.9xmovies.pro&var=&ymid=&var_3=
200 OK 664 B URL HTTP/2 ibrapush.com/zone?pub=0&zone_id=4825330&is_mobile=false&domain=www.9xmovies.pro&var=&ymid=&var_3=
IP
File type JSON data\012- , ASCII text, with very long lines (663)
Hash 0120f5942d8421999be26599065eb8cf
d6c016184797c1355b78d3684f0f1279c41e50c6
916fbdf9312116f3fd6a55e01cf5dc830915ff7a615c1c0fa4f0b374dbb13b80
GET /zone?pub=0&zone_id=4825330&is_mobile=false&domain=www.9xmovies.pro&var=&ymid=&var_3= HTTP/1.1
Host: ibrapush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.9xmovies.pro/
Origin: https://www.9xmovies.pro
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:50 GMT
content-type: application/json; charset=utf-8
content-length: 664
x-trace-id: 522b8d353c40e4cb1004aa5c2a1cb3af
access-control-allow-origin: https://www.9xmovies.pro
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash e691756a7eaad68b37a05d81052d4625
51ae79d1a300529013b576ed5f30fd7eeb93f57d
b4057cce093dbc0c5928df15ca2dfa39a93ae1e9b9c0a2824a4bd09b8c356e75
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 26 Nov 2022 14:47:49 GMT
Last-Modified: Sat, 26 Nov 2022 13:17:15 GMT
Server: ECS (dcb/7F81)
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: CdIkEgUD0vBFTjj2qgXVJfs13o5-bVC1jLYGHSWAnA9ere9w0nXVPg==
Age: 5434
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 4af47334194a0d10c2bfd52f16eb91ac
8ea04d240499dea43f26c738c8428df118dd622d
6741505308b8f473e68a567b74e6cd099b7a624b3711cc0acab45b2add675f74
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=169302
Date: Sat, 26 Nov 2022 14:47:49 GMT
Etag: "63821517-1d7"
Expires: Mon, 28 Nov 2022 13:49:31 GMT
Last-Modified: Sat, 26 Nov 2022 13:31:03 GMT
Server: ECS (dcb/7F84)
X-Cache: Miss from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: XnZnnxsZJWknJNpmHwXOcDVo5cA1DXul89o30FloCs4Z6YQlBFdxSw==
Age: 1108
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash e691756a7eaad68b37a05d81052d4625
51ae79d1a300529013b576ed5f30fd7eeb93f57d
b4057cce093dbc0c5928df15ca2dfa39a93ae1e9b9c0a2824a4bd09b8c356e75
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=85952
Date: Sat, 26 Nov 2022 14:47:49 GMT
Etag: "6380c395-1d7"
Expires: Sun, 27 Nov 2022 14:40:21 GMT
Last-Modified: Fri, 25 Nov 2022 13:31:01 GMT
Server: ECS (dcb/7F38)
X-Cache: Miss from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: wr8GdO7gClzzQRfUHOFeX2iL8PYxXFG79bopC5iFtpeQbvT2_dJLuA==
Age: 4160
painsdire.com/watchnew?key=682fb3969083f8eff7b4af9742d32558
200 OK 1.1 kB URL HTTP/1.1 painsdire.com/watchnew?key=682fb3969083f8eff7b4af9742d32558
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 6f4c492cb543c16f536f47fbeef23aeb
aad9ec7fd3388a329528cb2e32ba1f4941fbfea4
ba3879479280523951e94bf97840a195237158fe362e20eed6d20b8630a543d9
GET /watchnew?key=682fb3969083f8eff7b4af9742d32558 HTTP/1.1
Host: painsdire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Cookie: u_pl=16681775; ain=eyJhbGciOiJIUzI1NiJ9.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.Bi-6Ef7CTwLvOyNfxhZWoAK5T_vm2JAu_AJv2JlPaVM
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 26 Nov 2022 14:47:50 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=16681775,16681773; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNjY4MTc3MywiayI6IjY4MmZiMzk2OTA4M2Y4ZWZmN2I0YWY5NzQyZDMyNTU4Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxNjg2OTU2LCJwaWQiOjEwNTU4MCwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoxLCJhaWQiOjI2LCJwdCI6NCwicGsiOiJtd3NuN3RjMzIiLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6OTA3NTM0NTcsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMjA2MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTA1LjAiLCJ3diI6ZmFsc2UsImUiOmZhbHNlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6Imh0dHBzOi8vd3d3Ljl4bW92aWVzLnByby8ifX0.QdrK48gYUNO2DK-T_O9f0Pwizc4F54gDwtpS3mx7yGA; expires=Sat, 26 Nov 2022 14:48:50 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f787f254f33ab21e9d8f5126d77a2c17
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 28910813d970cdc59466b952fe798c95
69be6d8c3d86579d0eb7c92fcf4ea93d73485fd0
000eaf1d72f4ba42794a309a95d0ef5c3b4143c4322b3fda1f89915a90bfd0cc
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.9xmovies.pro
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:47:50 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.9xmovies.pro
access-control-allow-credentials: true
set-cookie: uid_id2=973d9a81-8edd-4e73-afc8-68275e408250:3:1; expires=Tue, 23 Nov 2032 14:47:50 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 28910813d970cdc59466b952fe798c95
69be6d8c3d86579d0eb7c92fcf4ea93d73485fd0
000eaf1d72f4ba42794a309a95d0ef5c3b4143c4322b3fda1f89915a90bfd0cc
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://painsdire.com
Connection: keep-alive
Referer: https://painsdire.com/
Cookie: uid_id2=973d9a81-8edd-4e73-afc8-68275e408250:3:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:47:50 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://painsdire.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 28910813d970cdc59466b952fe798c95
69be6d8c3d86579d0eb7c92fcf4ea93d73485fd0
000eaf1d72f4ba42794a309a95d0ef5c3b4143c4322b3fda1f89915a90bfd0cc
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://painsdire.com
Connection: keep-alive
Referer: https://painsdire.com/
Cookie: uid_id2=973d9a81-8edd-4e73-afc8-68275e408250:3:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:47:50 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://painsdire.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
painsdire.com/watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c
200 OK 1.1 kB URL HTTP/1.1 painsdire.com/watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 14023fdb5d345e7989e9abbf84b07873
acd6d222937d74bb669254226d6d7471e063436c
aa3d3609174379e871955f80e4ec8797cd468d92e623082d7755b370c4dfb8fc
GET /watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c HTTP/1.1
Host: painsdire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Cookie: u_pl=16681775; ain=eyJhbGciOiJIUzI1NiJ9.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.Bi-6Ef7CTwLvOyNfxhZWoAK5T_vm2JAu_AJv2JlPaVM
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 26 Nov 2022 14:47:50 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=16681775,16681754; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.sm_WIsCF8hlYr4gsAmyxHxBVkRSpGTF9wjoXfhiQ8Bw; expires=Sat, 26 Nov 2022 14:48:50 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 62f8d68af040b360890e08fb7bc9ddfa
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
painsdire.com/watchnew?shu=7c8aee5d6d99d16723a9caa6df08cc475cdad48c5bd4f6f6c5b70641cbce9f7811888e59bbfb29ef3f2a1cd92896c1c4205b6647aca1c22dbb491f563ebcbb9330a2216f1ee87d99dbb29fd6a74f3a63d78b44f7&pst=1669474129&rmtc=t&uuid=&pii=&in=false&key=70790807726fdadc53b3c8c3eb42357b&refer=https%3A%2F%2Fwww.9xmovies.pro%2F
200 OK 1.7 kB URL HTTP/1.1 painsdire.com/watchnew?shu=7c8aee5d6d99d16723a9caa6df08cc475cdad48c5bd4f6f6c5b70641cbce9f7811888e59bbfb29ef3f2a1cd92896c1c4205b6647aca1c22dbb491f563ebcbb9330a2216f1ee87d99dbb29fd6a74f3a63d78b44f7&pst=1669474129&rmtc=t&uuid=&pii=&in=false&key=70790807726fdadc53b3c8c3eb42357b&refer=https%3A%2F%2Fwww.9xmovies.pro%2F
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2427)
Hash 0235d40374e512e81e6f932e10630e92
f7a0a2276dd42eb91b77db0712165d488200bd28
2819cd590e4efb2ffca3ef982636920a9c0c44674d470fa9b3e2d04556e4e003
GET /watchnew?shu=7c8aee5d6d99d16723a9caa6df08cc475cdad48c5bd4f6f6c5b70641cbce9f7811888e59bbfb29ef3f2a1cd92896c1c4205b6647aca1c22dbb491f563ebcbb9330a2216f1ee87d99dbb29fd6a74f3a63d78b44f7&pst=1669474129&rmtc=t&uuid=&pii=&in=false&key=70790807726fdadc53b3c8c3eb42357b&refer=https%3A%2F%2Fwww.9xmovies.pro%2F HTTP/1.1
Host: painsdire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://painsdire.com/watchnew?key=70790807726fdadc53b3c8c3eb42357b
Cookie: u_pl=16681775; ain=eyJhbGciOiJIUzI1NiJ9.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.Bi-6Ef7CTwLvOyNfxhZWoAK5T_vm2JAu_AJv2JlPaVM
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 26 Nov 2022 14:47:50 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.9xmovies.pro/
Access-Control-Allow-Origin: https://www.9xmovies.pro/
Access-Control-Allow-Credentials: true
Set-Cookie: pdhtkv=true; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
uncs=1; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
pdhtkv23=true; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
uncs23=1; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: eff04a249e8a6d3a70279c18f71454e2
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
painsdire.com/watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c
200 OK 1.1 kB URL HTTP/1.1 painsdire.com/watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash bba604055461078d3521e41dce2734bd
51e0b025e80579c2b9204632d347a48e5ee9ee53
0a4b25c99bcff3379e112dc194185614d8ce63904420b2d8aa56c2aaae7d0c1a
GET /watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c HTTP/1.1
Host: painsdire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Cookie: u_pl=16681775; ain=eyJhbGciOiJIUzI1NiJ9.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.Bi-6Ef7CTwLvOyNfxhZWoAK5T_vm2JAu_AJv2JlPaVM
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 26 Nov 2022 14:47:50 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=16681775,16681754; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.sm_WIsCF8hlYr4gsAmyxHxBVkRSpGTF9wjoXfhiQ8Bw; expires=Sat, 26 Nov 2022 14:48:50 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6ea8c697fa143c232c67bc02c589109f
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
painsdire.com/watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c
200 OK 1.1 kB URL HTTP/1.1 painsdire.com/watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 8d245aa1aa822033783239723f65edeb
1f28a677a2e2ec843f2f3fd65c2bfec1eabc5b4a
29af46cc338b6d34567230e6a21aa8b51575deb1b81e0aa82f34a2adaa023205
GET /watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c HTTP/1.1
Host: painsdire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Cookie: u_pl=16681775; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNjY4MTc3NSwiayI6IjcwNzkwODA3NzI2ZmRhZGM1M2IzYzhjM2ViNDIzNTdiIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxNjg2OTU2LCJwaWQiOjEwNTU4MCwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoxLCJhaWQiOjIzLCJwdCI6NCwicGsiOiJkdHlwNmQxdjlwIiwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjkwNzUzNDU3LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6Mzg5MTQsIm9uIjoiV2luZG93cyIsIm92IjoiMTAuMCIsImJpZCI6MTIwNjI1LCJibiI6IkZpcmVmb3giLCJidiI6IjEwNS4wIiwid3YiOmZhbHNlLCJlIjpmYWxzZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImEiOmZhbHNlLCJjciI6eyJuIjoiQmxpeCBTb2x1dGlvbnMifSwieGYiOiIiLCJpeGYiOmZhbHNlLCJpZ3hmIjpmYWxzZSwidXAiOnRydWUsInIiOiJodHRwczovL3d3dy45eG1vdmllcy5wcm8vIn19.Bi-6Ef7CTwLvOyNfxhZWoAK5T_vm2JAu_AJv2JlPaVM
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 26 Nov 2022 14:47:50 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=16681775,16681754; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.sm_WIsCF8hlYr4gsAmyxHxBVkRSpGTF9wjoXfhiQ8Bw; expires=Sat, 26 Nov 2022 14:48:50 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 112c9724508712c20a989dd489bd0bc9
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
painsdire.com/watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c
200 OK 1.1 kB URL HTTP/1.1 painsdire.com/watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 998bda581df75e0d0bbe08f7ab3753ce
aaa78c9a578acbfed8a735c4e86f1453a512dcde
a49b279d4ce10325d789e25da2eb6e3c9447db04218908c0305af62fa67f39ae
GET /watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c HTTP/1.1
Host: painsdire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Cookie: u_pl=16681775; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNjY4MTc3NSwiayI6IjcwNzkwODA3NzI2ZmRhZGM1M2IzYzhjM2ViNDIzNTdiIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxNjg2OTU2LCJwaWQiOjEwNTU4MCwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoxLCJhaWQiOjIzLCJwdCI6NCwicGsiOiJkdHlwNmQxdjlwIiwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjkwNzUzNDU3LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6Mzg5MTQsIm9uIjoiV2luZG93cyIsIm92IjoiMTAuMCIsImJpZCI6MTIwNjI1LCJibiI6IkZpcmVmb3giLCJidiI6IjEwNS4wIiwid3YiOmZhbHNlLCJlIjpmYWxzZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImEiOmZhbHNlLCJjciI6eyJuIjoiQmxpeCBTb2x1dGlvbnMifSwieGYiOiIiLCJpeGYiOmZhbHNlLCJpZ3hmIjpmYWxzZSwidXAiOnRydWUsInIiOiJodHRwczovL3d3dy45eG1vdmllcy5wcm8vIn19.Bi-6Ef7CTwLvOyNfxhZWoAK5T_vm2JAu_AJv2JlPaVM
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 26 Nov 2022 14:47:50 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=16681775,16681754; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNjY4MTc1NCwiayI6ImVmMTNmNGE5NGUwMWM2NGMxMGM0N2IxM2E5YjEzNzZjIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxNjg2OTU2LCJwaWQiOjEwNTU4MCwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoxLCJhaWQiOjUsInB0Ijo0LCJwayI6InFqZWo2MGJlMzQiLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6OTA3NTM0NTcsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMjA2MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTA1LjAiLCJ3diI6ZmFsc2UsImUiOmZhbHNlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6Imh0dHBzOi8vd3d3Ljl4bW92aWVzLnByby8ifX0.sm_WIsCF8hlYr4gsAmyxHxBVkRSpGTF9wjoXfhiQ8Bw; expires=Sat, 26 Nov 2022 14:48:50 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 49e3e54c124aef6336713fe4dbd934d7
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e4d661d999b855142d472fd230fb4ab3
b4be1feeaccc98768ec3393929772bd8f75deed7
97a1c1b509250dd99cde7f76b53a43b7ee415011744414d83f5980df2e11dc60
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:47:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.9xmovies.pro/feeds/posts/default/-/Bollywood%20Movies?alt=json-in-script&max-results=3&callback=jQuery112404968467641032166_1669474069174&_=1669474069175
200 OK 9.0 kB URL HTTP/2 www.9xmovies.pro/feeds/posts/default/-/Bollywood%20Movies?alt=json-in-script&max-results=3&callback=jQuery112404968467641032166_1669474069174&_=1669474069175
IP
File type Unicode text, UTF-8 text, with very long lines (65508)
Hash 5e8d32de3faced834666b4fd467b34e2
2ff259cc5d8fcefc634d931f117ff99706737ed1
423d10e631a300305b58a9867655d681666af0383d2d0150d84b2916212c1c05
GET /feeds/posts/default/-/Bollywood%20Movies?alt=json-in-script&max-results=3&callback=jQuery112404968467641032166_1669474069174&_=1669474069175 HTTP/1.1
Host: www.9xmovies.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
content-encoding: gzip
etag: W/"155a73cc7099aa932a0f648146d3ed99d1f5c5dab7a911be2b3320cdb8bcfcde"
date: Sat, 26 Nov 2022 14:47:50 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
vary: Accept-Encoding
expires: Sat, 26 Nov 2022 14:47:51 GMT
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Fri, 25 Nov 2022 17:58:26 GMT
content-length: 9002
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
painsdire.com/watchnew?shu=3250591488006617af0c2d76f389c3bba1d89020cb73ba88bfa5b8f7d8c3c4cfc6d34e84f6d168396743489b9360d77673e28204f54864d0cdae15848ef8a3d19d8a87cfe311b403e6414d7ace9c6265bd7619a1&pst=1669474130&rmtc=t&uuid=&pii=&in=false&key=682fb3969083f8eff7b4af9742d32558&refer=https%3A%2F%2Fwww.9xmovies.pro%2F
200 OK 1.8 kB URL HTTP/1.1 painsdire.com/watchnew?shu=3250591488006617af0c2d76f389c3bba1d89020cb73ba88bfa5b8f7d8c3c4cfc6d34e84f6d168396743489b9360d77673e28204f54864d0cdae15848ef8a3d19d8a87cfe311b403e6414d7ace9c6265bd7619a1&pst=1669474130&rmtc=t&uuid=&pii=&in=false&key=682fb3969083f8eff7b4af9742d32558&refer=https%3A%2F%2Fwww.9xmovies.pro%2F
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2438)
Hash 6f73aa3aa8b50a61a4504b3b957fb276
dc52dc04163423545303f0f84751ff1e8317e191
c2638d5f2c01a96ebb88c3b27386bde549d6aa27347248f3f4da70fe53c5843d
GET /watchnew?shu=3250591488006617af0c2d76f389c3bba1d89020cb73ba88bfa5b8f7d8c3c4cfc6d34e84f6d168396743489b9360d77673e28204f54864d0cdae15848ef8a3d19d8a87cfe311b403e6414d7ace9c6265bd7619a1&pst=1669474130&rmtc=t&uuid=&pii=&in=false&key=682fb3969083f8eff7b4af9742d32558&refer=https%3A%2F%2Fwww.9xmovies.pro%2F HTTP/1.1
Host: painsdire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://painsdire.com/watchnew?key=682fb3969083f8eff7b4af9742d32558
Cookie: u_pl=16681775,16681754; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNjY4MTc1NCwiayI6ImVmMTNmNGE5NGUwMWM2NGMxMGM0N2IxM2E5YjEzNzZjIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxNjg2OTU2LCJwaWQiOjEwNTU4MCwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoxLCJhaWQiOjUsInB0Ijo0LCJwayI6InFqZWo2MGJlMzQiLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6OTA3NTM0NTcsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMjA2MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTA1LjAiLCJ3diI6ZmFsc2UsImUiOmZhbHNlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6Imh0dHBzOi8vd3d3Ljl4bW92aWVzLnByby8ifX0.sm_WIsCF8hlYr4gsAmyxHxBVkRSpGTF9wjoXfhiQ8Bw; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 26 Nov 2022 14:47:50 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.9xmovies.pro/
Access-Control-Allow-Origin: https://www.9xmovies.pro/
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=16681775,16681754,16681773; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
uncs=2; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
pdhtkv26=true; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
uncs26=1; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f19b0065c4ef5fd7860f97e950afb34b
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a22bc94a1116f343d9c3377cfd4fc5b2
b0bad6a620abd0c33a96c32721ad87849da9f9e6
294cd4b44650b17a93cbe9a4de887ad1da8ab8c11105707cccff17812a8d5890
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:47:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
upgulpinon.com/9?z=4825384&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=9&sah=1002&drf=&hil=1&ist=0&oaid=w0ni774421py068433462h4l6eqcx916
204 No Content 0 B URL HTTP/2 upgulpinon.com/9?z=4825384&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=9&sah=1002&drf=&hil=1&ist=0&oaid=w0ni774421py068433462h4l6eqcx916
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /9?z=4825384&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=9&sah=1002&drf=&hil=1&ist=0&oaid=w0ni774421py068433462h4l6eqcx916 HTTP/1.1
Host: upgulpinon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.9xmovies.pro/
Origin: https://www.9xmovies.pro
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 26 Nov 2022 14:47:50 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://www.9xmovies.pro
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash d438e1af63e2f2b0e0cdf2a74966ab91
37e36842937ddc6abf543f0623894e770cc06118
a5121c332d69fbec0378a247a93432ecc3f00014bd67df9b1ff613bea57af4d1
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "A5121C332D69FBEC0378A247A93432ECC3F00014BD67DF9B1FF613BEA57AF4D1"
Last-Modified: Fri, 25 Nov 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13648
Expires: Sat, 26 Nov 2022 18:35:18 GMT
Date: Sat, 26 Nov 2022 14:47:50 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e4d661d999b855142d472fd230fb4ab3
b4be1feeaccc98768ec3393929772bd8f75deed7
97a1c1b509250dd99cde7f76b53a43b7ee415011744414d83f5980df2e11dc60
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:47:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
friendshipmale.com/sfp.js
200 OK 27 kB URL HTTP/2 friendshipmale.com/sfp.js
IP
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 59f50ef340e3f9ab9e6de019aaf94fae
cb686ed82d0e05f8c154236e551a88f2aa94d001
4e51400f660b63565b4fc135fdd510347af9bab662167fad20d4c5a7650973b5
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:47:50 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 6c7a91321a497da5a242766b1628b9a9
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Sat, 26 Nov 2022 14:47:49 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NEjsNCo3QGdvMGJfqMk4LXunfDSkqzS19TW4vrT33DoN3Pu0EMbb1iXG%2BObJomKkPM2ueFDL%2BYHD1IgqRwhCIPAr9Pud2tDJ9LbP7QZgkSm89lUmQ1fUlwwwPDt0Gn0PVwBWR0g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77036be9a93d74d1-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 407ca8387c360d434a53812c03688310
90e74fa4928adcf8ae410f2eea7956b6ae7f687b
5690f667c20ba6c6daf71668a7c02c6d50383b585521e6f3e7a0ddcf895358d3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3578
Cache-Control: max-age=142245
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:47:50 GMT
Etag: "6381a1c1-1d7"
Expires: Mon, 28 Nov 2022 06:18:35 GMT
Last-Modified: Sat, 26 Nov 2022 05:18:57 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
www.9xmovies.pro/favicon.ico
200 OK 406 B URL HTTP/2 www.9xmovies.pro/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash df5f246cc4c377b3a27002dc64a3577f
7fea82a419456cd9f002020f1c8e590013471cfe
2343dea6d77d846f1d605263010dc6c71f2ff333ad2c4fc033184a818c2fe58e
GET /favicon.ico HTTP/1.1
Host: www.9xmovies.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/x-icon; charset=UTF-8
expires: Sat, 26 Nov 2022 14:47:50 GMT
date: Sat, 26 Nov 2022 14:47:50 GMT
cache-control: private, max-age=86400
last-modified: Fri, 25 Nov 2022 17:58:26 GMT
etag: W/"caa5121926f984d2e5513d91d16ffc86a9529e317089e1e7963bf6022f2da584"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 406
server: GSE
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?userId=w0ni774421py068433462h4l6eqcx916
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?userId=w0ni774421py068433462h4l6eqcx916
IP
File type JSON data\012- , ASCII text
Hash 8d8f9ebb17225e4cf252b2aa32b4e382
adfcb24bea3f3b18986c1782cc555ae71044e280
89f868af9441b41ad0a4235c58aa2202d9e30e9a2c0ed47498eb1c34f204e55b
GET /gid.js?userId=w0ni774421py068433462h4l6eqcx916 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.9xmovies.pro
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Cookie: ID=3cf5712921204b2b85f64055bbba950d
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:50 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://www.9xmovies.pro
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=3cf5712921204b2b85f64055bbba950d; expires=Sun, 26 Nov 2023 14:47:50 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
painsdire.com/watchnew?shu=82fe70b686670b559487d3aa144b64707cc866802fa5eddff57e10a4b8f18c9694e3af58ec322ee59055396af8ee5629657aaa637937de027e2e343729f346261e29b61dda7e873cd060ffa2b9b444c36cc6903a4d3c39c6b24621e1ec610a&pst=1669474129&rmtc=t&uuid=&pii=&in=false&key=70790807726fdadc53b3c8c3eb42357b&refer=https%3A%2F%2Fwww.9xmovies.pro%2F
200 OK 1.8 kB URL HTTP/1.1 painsdire.com/watchnew?shu=82fe70b686670b559487d3aa144b64707cc866802fa5eddff57e10a4b8f18c9694e3af58ec322ee59055396af8ee5629657aaa637937de027e2e343729f346261e29b61dda7e873cd060ffa2b9b444c36cc6903a4d3c39c6b24621e1ec610a&pst=1669474129&rmtc=t&uuid=&pii=&in=false&key=70790807726fdadc53b3c8c3eb42357b&refer=https%3A%2F%2Fwww.9xmovies.pro%2F
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2509)
Hash 9d0a2b71b21ecb09b1a0edf278ab412d
946b952aa4f9916a157d5ecd1d0104c8b753aadd
2bc8cabca877ddfb0eba4b379fbb7a08b784f12f628045bc1c39432e98716387
GET /watchnew?shu=82fe70b686670b559487d3aa144b64707cc866802fa5eddff57e10a4b8f18c9694e3af58ec322ee59055396af8ee5629657aaa637937de027e2e343729f346261e29b61dda7e873cd060ffa2b9b444c36cc6903a4d3c39c6b24621e1ec610a&pst=1669474129&rmtc=t&uuid=&pii=&in=false&key=70790807726fdadc53b3c8c3eb42357b&refer=https%3A%2F%2Fwww.9xmovies.pro%2F HTTP/1.1
Host: painsdire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://painsdire.com/watchnew?key=70790807726fdadc53b3c8c3eb42357b
Cookie: u_pl=16681775,16681754; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNjY4MTc1NCwiayI6ImVmMTNmNGE5NGUwMWM2NGMxMGM0N2IxM2E5YjEzNzZjIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxNjg2OTU2LCJwaWQiOjEwNTU4MCwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoxLCJhaWQiOjUsInB0Ijo0LCJwayI6InFqZWo2MGJlMzQiLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6OTA3NTM0NTcsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMjA2MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTA1LjAiLCJ3diI6ZmFsc2UsImUiOmZhbHNlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6Imh0dHBzOi8vd3d3Ljl4bW92aWVzLnByby8ifX0.sm_WIsCF8hlYr4gsAmyxHxBVkRSpGTF9wjoXfhiQ8Bw; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 26 Nov 2022 14:47:50 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.9xmovies.pro/
Access-Control-Allow-Origin: https://www.9xmovies.pro/
Access-Control-Allow-Credentials: true
Set-Cookie: uncs=2; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
uncs23=2; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 38a374d5b87e68b30aac35dbae5e143a
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
connect.facebook.net/en_US/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js
IP
File type ASCII text, with very long lines (1957)
Hash 11c5a5b5ac8b547c4656da4823896b23
37678b75a2df2f53fc4ab93537c744a53eefb05c
d12526b135b46693ff5096de9aaaea6791f465640eb9bd29576aeb429db2de3e
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 009bcaa453457892d9c8d733b3370100
etag: "0c5764533391310eedf2f6a3ec59ccfc"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Sat, 26 Nov 2022 15:01:45 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: EcWltayLVHxGVtpII4lrIw==
x-fb-debug: 8cJWfaAz26QD+BrAQJD4ahz+XHHcyaXgeqJdFUufuJg0bOzSw05JaXNuwe6ASHUljqhmqDld+Zy9UsnjdFnKpw==
priority: u=3,i
content-length: 1685
x-fb-trip-id: 1904183273
date: Sat, 26 Nov 2022 14:47:50 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
painsdire.com/watchnew?shu=8fca52ca1045cbbd3555d6671d92c1cca4fed88073293581d2bd5fde980e90711f0839fc1511b12444a348597adf1427b624d2b29267e68fde7e6171a9c738d6c5a2131e375f673938eadebc338753b17fdb0be0&pst=1669474129&rmtc=t&uuid=&pii=&in=false&key=70790807726fdadc53b3c8c3eb42357b&refer=https%3A%2F%2Fwww.9xmovies.pro%2F
200 OK 1.7 kB URL HTTP/1.1 painsdire.com/watchnew?shu=8fca52ca1045cbbd3555d6671d92c1cca4fed88073293581d2bd5fde980e90711f0839fc1511b12444a348597adf1427b624d2b29267e68fde7e6171a9c738d6c5a2131e375f673938eadebc338753b17fdb0be0&pst=1669474129&rmtc=t&uuid=&pii=&in=false&key=70790807726fdadc53b3c8c3eb42357b&refer=https%3A%2F%2Fwww.9xmovies.pro%2F
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2399)
Hash 1bc3bc31ae83848ebdf56d1b1fc955e5
3131a086a71f78189d4c629b4ca5c3331014ca93
a8b869cbc44a7a53b618a52f46d958d6240a8e468bf9b2d930802fe5df93f1b0
GET /watchnew?shu=8fca52ca1045cbbd3555d6671d92c1cca4fed88073293581d2bd5fde980e90711f0839fc1511b12444a348597adf1427b624d2b29267e68fde7e6171a9c738d6c5a2131e375f673938eadebc338753b17fdb0be0&pst=1669474129&rmtc=t&uuid=&pii=&in=false&key=70790807726fdadc53b3c8c3eb42357b&refer=https%3A%2F%2Fwww.9xmovies.pro%2F HTTP/1.1
Host: painsdire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://painsdire.com/watchnew?key=70790807726fdadc53b3c8c3eb42357b
Cookie: u_pl=16681775,16681754; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNjY4MTc1NCwiayI6ImVmMTNmNGE5NGUwMWM2NGMxMGM0N2IxM2E5YjEzNzZjIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxNjg2OTU2LCJwaWQiOjEwNTU4MCwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoxLCJhaWQiOjUsInB0Ijo0LCJwayI6InFqZWo2MGJlMzQiLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6OTA3NTM0NTcsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMjA2MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTA1LjAiLCJ3diI6ZmFsc2UsImUiOmZhbHNlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6Imh0dHBzOi8vd3d3Ljl4bW92aWVzLnByby8ifX0.sm_WIsCF8hlYr4gsAmyxHxBVkRSpGTF9wjoXfhiQ8Bw; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 26 Nov 2022 14:47:50 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.9xmovies.pro/
Access-Control-Allow-Origin: https://www.9xmovies.pro/
Access-Control-Allow-Credentials: true
Set-Cookie: uncs=2; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
uncs23=2; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d98124daa91160e32f58a82644519123
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
painsdire.com/watchnew?shu=8cffdc35a8eb1b28d819641bae5e4cac7138487cd16816123ec157f119a85bdb7a5d7269a18b2a7d67cb877715c90b450a185119cc6e3d4df033f251e1a60bbc872966a9bc110bc1699c10cc3cce2601747fa49197c4dc87d2ef060cb3722cfd3682364a64&pst=1669474130&rmtc=t&uuid=&pii=&in=false&key=ef13f4a94e01c64c10c47b13a9b1376c&refer=https%3A%2F%2Fwww.9xmovies.pro%2F
200 OK 1.8 kB URL HTTP/1.1 painsdire.com/watchnew?shu=8cffdc35a8eb1b28d819641bae5e4cac7138487cd16816123ec157f119a85bdb7a5d7269a18b2a7d67cb877715c90b450a185119cc6e3d4df033f251e1a60bbc872966a9bc110bc1699c10cc3cce2601747fa49197c4dc87d2ef060cb3722cfd3682364a64&pst=1669474130&rmtc=t&uuid=&pii=&in=false&key=ef13f4a94e01c64c10c47b13a9b1376c&refer=https%3A%2F%2Fwww.9xmovies.pro%2F
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2526)
Hash a53ed236018c3839ed2f0c820747297c
817c5f82f3bde14c10d7803a732f475c9b646b0c
5c70a17098d6f3c676757af812e0f8667f5227d4f3854a2e5223bff3fcbbf423
GET /watchnew?shu=8cffdc35a8eb1b28d819641bae5e4cac7138487cd16816123ec157f119a85bdb7a5d7269a18b2a7d67cb877715c90b450a185119cc6e3d4df033f251e1a60bbc872966a9bc110bc1699c10cc3cce2601747fa49197c4dc87d2ef060cb3722cfd3682364a64&pst=1669474130&rmtc=t&uuid=&pii=&in=false&key=ef13f4a94e01c64c10c47b13a9b1376c&refer=https%3A%2F%2Fwww.9xmovies.pro%2F HTTP/1.1
Host: painsdire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://painsdire.com/watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c
Cookie: u_pl=16681775,16681754; ain=eyJhbGciOiJIUzI1NiJ9.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.sm_WIsCF8hlYr4gsAmyxHxBVkRSpGTF9wjoXfhiQ8Bw; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 26 Nov 2022 14:47:50 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.9xmovies.pro/
Access-Control-Allow-Origin: https://www.9xmovies.pro/
Access-Control-Allow-Credentials: true
Set-Cookie: pdhtkv=true; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
uncs=1; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
pdhtkv5=true; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
uncs5=1; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 88692cdf03bde4f4873f53d41e161eea
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
painsdire.com/watchnew?shu=8e3e1eea1366df805c9f7432d86c57ea645904c9313d10e16132db53be0e97fb13081fce86369918255d0de91badafad0ae5e484628c421edbe90f70d6f7759a1dca7e499eaed68cb61f9cec5e7d9d896cf9dfb263f430bef76ed308a0cd1e&pst=1669474130&rmtc=t&uuid=&pii=&in=false&key=ef13f4a94e01c64c10c47b13a9b1376c&refer=https%3A%2F%2Fwww.9xmovies.pro%2F
200 OK 1.8 kB URL HTTP/1.1 painsdire.com/watchnew?shu=8e3e1eea1366df805c9f7432d86c57ea645904c9313d10e16132db53be0e97fb13081fce86369918255d0de91badafad0ae5e484628c421edbe90f70d6f7759a1dca7e499eaed68cb61f9cec5e7d9d896cf9dfb263f430bef76ed308a0cd1e&pst=1669474130&rmtc=t&uuid=&pii=&in=false&key=ef13f4a94e01c64c10c47b13a9b1376c&refer=https%3A%2F%2Fwww.9xmovies.pro%2F
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2527)
Hash d69d57c9a99d9480fcdf3c812a0fe9b4
b672526897ac3162f3867a3d60590eacae22930a
37bce4ff021dc963490d8fa537627095ef71d4c3b065539b0e69240985839315
GET /watchnew?shu=8e3e1eea1366df805c9f7432d86c57ea645904c9313d10e16132db53be0e97fb13081fce86369918255d0de91badafad0ae5e484628c421edbe90f70d6f7759a1dca7e499eaed68cb61f9cec5e7d9d896cf9dfb263f430bef76ed308a0cd1e&pst=1669474130&rmtc=t&uuid=&pii=&in=false&key=ef13f4a94e01c64c10c47b13a9b1376c&refer=https%3A%2F%2Fwww.9xmovies.pro%2F HTTP/1.1
Host: painsdire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://painsdire.com/watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c
Cookie: u_pl=16681775,16681754; ain=eyJhbGciOiJIUzI1NiJ9.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.sm_WIsCF8hlYr4gsAmyxHxBVkRSpGTF9wjoXfhiQ8Bw; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 26 Nov 2022 14:47:50 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.9xmovies.pro/
Access-Control-Allow-Origin: https://www.9xmovies.pro/
Access-Control-Allow-Credentials: true
Set-Cookie: pdhtkv=true; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
uncs=1; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
pdhtkv5=true; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
uncs5=1; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 188350f2808c084f947e7bccbfd1ae78
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d02308d366e622aa26e632ea017600cc
c16673d53c20ac70efbda483ca12b4374a76105c
ad8ccb9b049120b7e44a79dcbc9caab326567933cfce70608bc812237319a0ec
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AD8CCB9B049120B7E44A79DCBC9CAAB326567933CFCE70608BC812237319A0EC"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3481
Expires: Sat, 26 Nov 2022 15:45:51 GMT
Date: Sat, 26 Nov 2022 14:47:50 GMT
Connection: keep-alive
painsdire.com/watchnew?shu=6ac6d36fcb8938441403bed3563dccb810e5fad5329f091cbd3babc8b06fd52e68993a53c24f5d86261cb4a4a370c1d619bcdde0561df697fac77a2cfd1a83dc2a9dd9f75bcfe6b78fb2fabbf1477b1513300d0796747608c4db52111a2caf&pst=1669474130&rmtc=t&uuid=&pii=&in=false&key=ef13f4a94e01c64c10c47b13a9b1376c&refer=https%3A%2F%2Fwww.9xmovies.pro%2F
200 OK 1.8 kB URL HTTP/1.1 painsdire.com/watchnew?shu=6ac6d36fcb8938441403bed3563dccb810e5fad5329f091cbd3babc8b06fd52e68993a53c24f5d86261cb4a4a370c1d619bcdde0561df697fac77a2cfd1a83dc2a9dd9f75bcfe6b78fb2fabbf1477b1513300d0796747608c4db52111a2caf&pst=1669474130&rmtc=t&uuid=&pii=&in=false&key=ef13f4a94e01c64c10c47b13a9b1376c&refer=https%3A%2F%2Fwww.9xmovies.pro%2F
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2497)
Hash 64a8b0b73405f24050cc1edd6fc603fe
c381875e8dbd1295ec0fcb1418d1665bfa2ddeed
88516e4b4ba9a704bf6fcc34b51f69248e135ef17d0f4a6dbb751e2849abeb5d
GET /watchnew?shu=6ac6d36fcb8938441403bed3563dccb810e5fad5329f091cbd3babc8b06fd52e68993a53c24f5d86261cb4a4a370c1d619bcdde0561df697fac77a2cfd1a83dc2a9dd9f75bcfe6b78fb2fabbf1477b1513300d0796747608c4db52111a2caf&pst=1669474130&rmtc=t&uuid=&pii=&in=false&key=ef13f4a94e01c64c10c47b13a9b1376c&refer=https%3A%2F%2Fwww.9xmovies.pro%2F HTTP/1.1
Host: painsdire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://painsdire.com/watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c
Cookie: u_pl=16681775,16681754; ain=eyJhbGciOiJIUzI1NiJ9.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.sm_WIsCF8hlYr4gsAmyxHxBVkRSpGTF9wjoXfhiQ8Bw; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 26 Nov 2022 14:47:50 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.9xmovies.pro/
Access-Control-Allow-Origin: https://www.9xmovies.pro/
Access-Control-Allow-Credentials: true
Set-Cookie: pdhtkv=true; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
uncs=1; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
pdhtkv5=true; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
uncs5=1; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8d934c77657c54f58f66d4caf60406e4
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a22bc94a1116f343d9c3377cfd4fc5b2
b0bad6a620abd0c33a96c32721ad87849da9f9e6
294cd4b44650b17a93cbe9a4de887ad1da8ab8c11105707cccff17812a8d5890
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:47:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxIAQL0kSNF0L3sdsAhBmPqFdfRmoI3MhN6t26TjKzszU32bqgHTlOhbr21QygBLT2h8o9dF9v7hwuohUVqMn51RGlW5-IsaAhOlxQdtGFB8phZBdoTBtB-JPLsiWJ1_EwvaLfLmmcRDlFL0VJY3bt6_Qs_C0m8ybfQIGAxi8F9z2CbVi2aTrNaCWlsg/w480/Kantara%202022.jpg
200 OK 97 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxIAQL0kSNF0L3sdsAhBmPqFdfRmoI3MhN6t26TjKzszU32bqgHTlOhbr21QygBLT2h8o9dF9v7hwuohUVqMn51RGlW5-IsaAhOlxQdtGFB8phZBdoTBtB-JPLsiWJ1_EwvaLfLmmcRDlFL0VJY3bt6_Qs_C0m8ybfQIGAxi8F9z2CbVi2aTrNaCWlsg/w480/Kantara%202022.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 100x100, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 380x540, components 3\012- data
Hash 4ef2e0986e2418789fa792abd836194b
9c48b6ed34918d7a25ad9696dc697121cbef18db
69ce8681ea4aa7b331596aa2ff7f411489f9d27c58275b65ac348d4cae5fd860
GET /img/b/R29vZ2xl/AVvXsEjxIAQL0kSNF0L3sdsAhBmPqFdfRmoI3MhN6t26TjKzszU32bqgHTlOhbr21QygBLT2h8o9dF9v7hwuohUVqMn51RGlW5-IsaAhOlxQdtGFB8phZBdoTBtB-JPLsiWJ1_EwvaLfLmmcRDlFL0VJY3bt6_Qs_C0m8ybfQIGAxi8F9z2CbVi2aTrNaCWlsg/w480/Kantara%202022.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v991"
expires: Sun, 27 Nov 2022 14:47:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Kantara 2022.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sat, 26 Nov 2022 14:47:50 GMT
server: fife
content-length: 96942
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9c0667b92084837b350d18419bcc1d12
a82b43147906ae012b4e45976938602d1d144ebc
e14528a1e6f133dbd5d7defa24a92b4a84e5bc31f95be2dc8b7a94e9346c8b68
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E14528A1E6F133DBD5D7DEFA24A92B4A84E5BC31F95BE2DC8B7A94E9346C8B68"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9194
Expires: Sat, 26 Nov 2022 17:21:04 GMT
Date: Sat, 26 Nov 2022 14:47:50 GMT
Connection: keep-alive
my.rtmark.net/gid.js
200 OK 65 B IP
File type JSON data\012- , ASCII text
Hash 8d8f9ebb17225e4cf252b2aa32b4e382
adfcb24bea3f3b18986c1782cc555ae71044e280
89f868af9441b41ad0a4235c58aa2202d9e30e9a2c0ed47498eb1c34f204e55b
GET /gid.js HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.9xmovies.pro
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Cookie: ID=3cf5712921204b2b85f64055bbba950d
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:50 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://www.9xmovies.pro
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=3cf5712921204b2b85f64055bbba950d; expires=Sun, 26 Nov 2023 14:47:50 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjhDVuIjRPYru0qedmlmpdvK55KTbepPb9ciiOf4FlBsFIHZ91dinmuzly7QnVfHZy4f2wzOS9InHa2lM26Xn_DlSiJ2SgP0s3OhL_hfrDlRVdSwkLwwPqV1vcOjZ_71XTp1rzMyy1l6wBXdYJIgManwHjf0EBIupiRakDhJmwF9w1e3k6bclhVXZivXw/w480/Secrets%202022.jpg
200 OK 109 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjhDVuIjRPYru0qedmlmpdvK55KTbepPb9ciiOf4FlBsFIHZ91dinmuzly7QnVfHZy4f2wzOS9InHa2lM26Xn_DlSiJ2SgP0s3OhL_hfrDlRVdSwkLwwPqV1vcOjZ_71XTp1rzMyy1l6wBXdYJIgManwHjf0EBIupiRakDhJmwF9w1e3k6bclhVXZivXw/w480/Secrets%202022.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 400x600, components 3\012- data
Size 109 kB (109145 bytes)
Hash 4951c02d93eb282300eaffe18a15613a
bc8eb42fbb1f7fe61820e80f345a6490e737c7b8
05dea2269f9a14eecc5be47ad24f6b49f2482c413846f27901329db69fb860f5
GET /img/b/R29vZ2xl/AVvXsEjhDVuIjRPYru0qedmlmpdvK55KTbepPb9ciiOf4FlBsFIHZ91dinmuzly7QnVfHZy4f2wzOS9InHa2lM26Xn_DlSiJ2SgP0s3OhL_hfrDlRVdSwkLwwPqV1vcOjZ_71XTp1rzMyy1l6wBXdYJIgManwHjf0EBIupiRakDhJmwF9w1e3k6bclhVXZivXw/w480/Secrets%202022.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v987"
expires: Sun, 27 Nov 2022 14:47:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Secrets 2022.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sat, 26 Nov 2022 14:47:50 GMT
server: fife
content-length: 109145
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgYtpjG0Yha8MLyQsm9TaJA72SvstNofih4jSgfv_mnU3TTXgcwK-24fLDNV4Qu9lo7HJevK72WGS4bgn3wI6aTQkZxInTIBmYFkAzs7UpgyOhteWDtu7fZu8HwxCPG7WaTih6c8stIK5fW6oO9VCUxzwmN2sE2P2gLEYFDYUIU777Ch2WLK84H1UsZlA/w480/Dharavi%20Bank%20Season%201.jpg
200 OK 78 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgYtpjG0Yha8MLyQsm9TaJA72SvstNofih4jSgfv_mnU3TTXgcwK-24fLDNV4Qu9lo7HJevK72WGS4bgn3wI6aTQkZxInTIBmYFkAzs7UpgyOhteWDtu7fZu8HwxCPG7WaTih6c8stIK5fW6oO9VCUxzwmN2sE2P2gLEYFDYUIU777Ch2WLK84H1UsZlA/w480/Dharavi%20Bank%20Season%201.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 400x600, components 3\012- data
Hash 0b04053ea47edaba15bf49818dae07b9
f9e10fd903a15bd92685ae595c6322191037bbca
5bccde4dfd7d832d0c2fe8b7aa56859359b12743e655de2b43d22ce238872983
GET /img/b/R29vZ2xl/AVvXsEgYtpjG0Yha8MLyQsm9TaJA72SvstNofih4jSgfv_mnU3TTXgcwK-24fLDNV4Qu9lo7HJevK72WGS4bgn3wI6aTQkZxInTIBmYFkAzs7UpgyOhteWDtu7fZu8HwxCPG7WaTih6c8stIK5fW6oO9VCUxzwmN2sE2P2gLEYFDYUIU777Ch2WLK84H1UsZlA/w480/Dharavi%20Bank%20Season%201.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v97f"
expires: Sun, 27 Nov 2022 14:47:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Dharavi Bank Season 1.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sat, 26 Nov 2022 14:47:50 GMT
server: fife
content-length: 78022
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlH7rSZkAelxe2PpMbOxGJMPUY0TJtb7EZPyJuq5P_jXTFV6uozRq8SONOy1k8ydYpi5-rjV5MRj9FAaN2j9c8bwvXj_Ro_gav7EKzCOpDYRopz4v1NOU0ODrQDdo7g-5HJh2wIpIyMqIsKDeA6iJ0w-Rd3--5m1fmtcMcMn7KNoHQ83SRPVpFOTakfg/w480/Black%20Adam%202022.jpg
200 OK 67 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlH7rSZkAelxe2PpMbOxGJMPUY0TJtb7EZPyJuq5P_jXTFV6uozRq8SONOy1k8ydYpi5-rjV5MRj9FAaN2j9c8bwvXj_Ro_gav7EKzCOpDYRopz4v1NOU0ODrQDdo7g-5HJh2wIpIyMqIsKDeA6iJ0w-Rd3--5m1fmtcMcMn7KNoHQ83SRPVpFOTakfg/w480/Black%20Adam%202022.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 421x600, components 3\012- data
Hash be0867d07b745e62870cc9ad09753035
34b87f5409954903bd5154a8fe08b9c010bf49cb
2543a5b491cf57d24eead34c4b1c706aba33f18766ba13dac7b90f43bbc72143
GET /img/b/R29vZ2xl/AVvXsEjlH7rSZkAelxe2PpMbOxGJMPUY0TJtb7EZPyJuq5P_jXTFV6uozRq8SONOy1k8ydYpi5-rjV5MRj9FAaN2j9c8bwvXj_Ro_gav7EKzCOpDYRopz4v1NOU0ODrQDdo7g-5HJh2wIpIyMqIsKDeA6iJ0w-Rd3--5m1fmtcMcMn7KNoHQ83SRPVpFOTakfg/w480/Black%20Adam%202022.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v97d"
expires: Sun, 27 Nov 2022 14:47:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Black Adam 2022.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sat, 26 Nov 2022 14:47:50 GMT
server: fife
content-length: 67022
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikIhVIijTc2rqjkoD2lhy5gT7jtrkwHaer04uTMZjtCQqa2oFaI2brx1sfTMHTW8pAswXU_dSAmaOzSgrf71e7HqArK-reeUsfpwViGAYj0EYi5JcKSzWQ5CblQFOAEaZnTaWVZCuf4JNqdXre-idVHbUYZh5qVZMPvdrZj9YCXKHjBqRSsIXiJb7ETw/w480/Hansan%20Rising%20Dragon%202022%20(1).jpg
200 OK 134 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikIhVIijTc2rqjkoD2lhy5gT7jtrkwHaer04uTMZjtCQqa2oFaI2brx1sfTMHTW8pAswXU_dSAmaOzSgrf71e7HqArK-reeUsfpwViGAYj0EYi5JcKSzWQ5CblQFOAEaZnTaWVZCuf4JNqdXre-idVHbUYZh5qVZMPvdrZj9YCXKHjBqRSsIXiJb7ETw/w480/Hansan%20Rising%20Dragon%202022%20(1).jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 421x600, components 3\012- data
Size 134 kB (134262 bytes)
Hash b12fe60a7aed1ddae70eb40dfe458de4
192e3708f88338dd5d77d7adbec6bb9b8f0a1672
017c7246ff7860fd95e2debe7cfc4b744ee1d8c2f6566b31c7c0fbcf41c3165c
GET /img/b/R29vZ2xl/AVvXsEikIhVIijTc2rqjkoD2lhy5gT7jtrkwHaer04uTMZjtCQqa2oFaI2brx1sfTMHTW8pAswXU_dSAmaOzSgrf71e7HqArK-reeUsfpwViGAYj0EYi5JcKSzWQ5CblQFOAEaZnTaWVZCuf4JNqdXre-idVHbUYZh5qVZMPvdrZj9YCXKHjBqRSsIXiJb7ETw/w480/Hansan%20Rising%20Dragon%202022%20(1).jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v985"
expires: Sun, 27 Nov 2022 14:47:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Hansan Rising Dragon 2022 (1).jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sat, 26 Nov 2022 14:47:50 GMT
server: fife
content-length: 134262
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
eehuzaih.com/500/5031525?excludes=&oaid=w0ni774421py068433462h4l6eqcx916&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=10&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
200 OK 0 B URL HTTP/2 eehuzaih.com/500/5031525?excludes=&oaid=w0ni774421py068433462h4l6eqcx916&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=10&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
OPTIONS /500/5031525?excludes=&oaid=w0ni774421py068433462h4l6eqcx916&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=10&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: eehuzaih.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.9xmovies.pro/
Origin: https://www.9xmovies.pro
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:50 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://www.9xmovies.pro
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-allow-credentials: true
access-control-max-age: 600
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
rndskittytor.com/500/4825382?excludes=&oaid=w0ni774421py068433462h4l6eqcx916&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=10&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
200 OK 0 B URL HTTP/2 rndskittytor.com/500/4825382?excludes=&oaid=w0ni774421py068433462h4l6eqcx916&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=10&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
OPTIONS /500/4825382?excludes=&oaid=w0ni774421py068433462h4l6eqcx916&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=10&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: rndskittytor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.9xmovies.pro/
Origin: https://www.9xmovies.pro
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:50 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://www.9xmovies.pro
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-allow-credentials: true
access-control-max-age: 600
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
painsdire.com/watchnew?shu=9ea123ca3b106c93ade0b688804d30891dd3c8f5fbe7cac329bda1e0e3e267c2d4f69575613a9c1a63f9a76d20decf585645ded249913292c083e078a4c9bf027ff9d0a14d0b1a8b45ccffcdc57605cc065c8a7f&pst=1669474130&rmtc=t&uuid=&pii=&in=false&key=ef13f4a94e01c64c10c47b13a9b1376c&refer=https%3A%2F%2Fwww.9xmovies.pro%2F
200 OK 1.8 kB URL HTTP/1.1 painsdire.com/watchnew?shu=9ea123ca3b106c93ade0b688804d30891dd3c8f5fbe7cac329bda1e0e3e267c2d4f69575613a9c1a63f9a76d20decf585645ded249913292c083e078a4c9bf027ff9d0a14d0b1a8b45ccffcdc57605cc065c8a7f&pst=1669474130&rmtc=t&uuid=&pii=&in=false&key=ef13f4a94e01c64c10c47b13a9b1376c&refer=https%3A%2F%2Fwww.9xmovies.pro%2F
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2442)
Hash df8eb78db710eeb01513fe08581ea9d3
327b9107cc5a1aab52cc1fd642c6eafdbed3036b
37e610fe7c11d0f7a0814efe4cf9b2b50c335207c3710630dec712f27a9ed14a
GET /watchnew?shu=9ea123ca3b106c93ade0b688804d30891dd3c8f5fbe7cac329bda1e0e3e267c2d4f69575613a9c1a63f9a76d20decf585645ded249913292c083e078a4c9bf027ff9d0a14d0b1a8b45ccffcdc57605cc065c8a7f&pst=1669474130&rmtc=t&uuid=&pii=&in=false&key=ef13f4a94e01c64c10c47b13a9b1376c&refer=https%3A%2F%2Fwww.9xmovies.pro%2F HTTP/1.1
Host: painsdire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://painsdire.com/watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c
Cookie: u_pl=16681775,16681754; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNjY4MTc1NCwiayI6ImVmMTNmNGE5NGUwMWM2NGMxMGM0N2IxM2E5YjEzNzZjIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxNjg2OTU2LCJwaWQiOjEwNTU4MCwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoxLCJhaWQiOjUsInB0Ijo0LCJwayI6InFqZWo2MGJlMzQiLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6OTA3NTM0NTcsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMjA2MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTA1LjAiLCJ3diI6ZmFsc2UsImUiOmZhbHNlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6Imh0dHBzOi8vd3d3Ljl4bW92aWVzLnByby8ifX0.sm_WIsCF8hlYr4gsAmyxHxBVkRSpGTF9wjoXfhiQ8Bw; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 26 Nov 2022 14:47:50 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.9xmovies.pro/
Access-Control-Allow-Origin: https://www.9xmovies.pro/
Access-Control-Allow-Credentials: true
Set-Cookie: pdhtkv=true; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
uncs=1; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
pdhtkv5=true; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
uncs5=1; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: cb13c6dfff972fdcb4f523bc47788ce5
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 471 B IP
Hash 407ca8387c360d434a53812c03688310
90e74fa4928adcf8ae410f2eea7956b6ae7f687b
5690f667c20ba6c6daf71668a7c02c6d50383b585521e6f3e7a0ddcf895358d3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3496
Cache-Control: max-age=142163
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:47:50 GMT
Etag: "6381a1c1-1d7"
Expires: Mon, 28 Nov 2022 06:17:13 GMT
Last-Modified: Sat, 26 Nov 2022 05:18:57 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
blogger.googleusercontent.com/img/a/AVvXsEhrdT0ZkEqJFYTDXHerFsE2ggPKLGcrdXPoxTDWRrOBrkxdVhS_SmPh8F2LJWztHBK6zGOANDgVdpwmENM3FcX5mSi4JGU_Oh_J4ikXuomADytnqoeHMXW5xYiPHxjl-lJat0jVDpyPB3k2wcNcYX1pT7f7J6tnf1v41-Jt7RBzjlPtb7hEz1uL3E7VDA=s240
200 OK 5.8 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEhrdT0ZkEqJFYTDXHerFsE2ggPKLGcrdXPoxTDWRrOBrkxdVhS_SmPh8F2LJWztHBK6zGOANDgVdpwmENM3FcX5mSi4JGU_Oh_J4ikXuomADytnqoeHMXW5xYiPHxjl-lJat0jVDpyPB3k2wcNcYX1pT7f7J6tnf1v41-Jt7RBzjlPtb7hEz1uL3E7VDA=s240
IP
File type PNG image data, 240 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 21ad871300a61fe03008190df608f6e6
598b49a192e26125abc3c6931f114de9b36634ef
a40f3a9d530773fb33077a1159e151fe8a8ecc1f761a5beb871d2a9c648084d4
GET /img/a/AVvXsEhrdT0ZkEqJFYTDXHerFsE2ggPKLGcrdXPoxTDWRrOBrkxdVhS_SmPh8F2LJWztHBK6zGOANDgVdpwmENM3FcX5mSi4JGU_Oh_J4ikXuomADytnqoeHMXW5xYiPHxjl-lJat0jVDpyPB3k2wcNcYX1pT7f7J6tnf1v41-Jt7RBzjlPtb7hEz1uL3E7VDA=s240 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v2ac"
expires: Sun, 27 Nov 2022 14:47:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="logo (1).png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Sat, 26 Nov 2022 14:47:50 GMT
server: fife
content-length: 5800
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhK1l9Y1XwYR1RafVb5MxDGGxtHQuPO4imYDMWLYtR45RsYI7iN5Zh0n7eEaJOlwvI2gohP596q3-kBQJJ4-EtQwxXIwjI_yi-Y_ARC9TtHY1xEhoKXRuwoIwnqkH-cDcjfDdkKFNbYAtvb0T4lorm_JFNDztzDRpXOuGro4FYC_aBZvUYztdrqbylXjg/w480/Godfather%202022.jpg
200 OK 61 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhK1l9Y1XwYR1RafVb5MxDGGxtHQuPO4imYDMWLYtR45RsYI7iN5Zh0n7eEaJOlwvI2gohP596q3-kBQJJ4-EtQwxXIwjI_yi-Y_ARC9TtHY1xEhoKXRuwoIwnqkH-cDcjfDdkKFNbYAtvb0T4lorm_JFNDztzDRpXOuGro4FYC_aBZvUYztdrqbylXjg/w480/Godfather%202022.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 400x600, components 3\012- data
Hash 621507f7c634af142a5243603d4eab03
9d40b26123c48f874fbcedfa43c478c8e7230018
88f5410e5579b23387e84ff2c7595563eaeb1acf3e38a4850946d3756fc079f8
GET /img/b/R29vZ2xl/AVvXsEhK1l9Y1XwYR1RafVb5MxDGGxtHQuPO4imYDMWLYtR45RsYI7iN5Zh0n7eEaJOlwvI2gohP596q3-kBQJJ4-EtQwxXIwjI_yi-Y_ARC9TtHY1xEhoKXRuwoIwnqkH-cDcjfDdkKFNbYAtvb0T4lorm_JFNDztzDRpXOuGro4FYC_aBZvUYztdrqbylXjg/w480/Godfather%202022.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v977"
expires: Sun, 27 Nov 2022 14:47:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Godfather 2022.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sat, 26 Nov 2022 14:47:50 GMT
server: fife
content-length: 60722
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
painsdire.com/watchnew?shu=527aad4a43b8bd50b79a9d168887bac8117d54e8e3de523e7190ce64cd0edec720bdd81c53c26c4d54e345c7e45e7414373fec4e16800a9a6840852715d751eb7264887627c2855e5188da12c31ac71cae29d414&pst=1669474130&rmtc=t&uuid=&pii=&in=false&key=ef13f4a94e01c64c10c47b13a9b1376c&refer=https%3A%2F%2Fwww.9xmovies.pro%2F
200 OK 1.7 kB URL HTTP/1.1 painsdire.com/watchnew?shu=527aad4a43b8bd50b79a9d168887bac8117d54e8e3de523e7190ce64cd0edec720bdd81c53c26c4d54e345c7e45e7414373fec4e16800a9a6840852715d751eb7264887627c2855e5188da12c31ac71cae29d414&pst=1669474130&rmtc=t&uuid=&pii=&in=false&key=ef13f4a94e01c64c10c47b13a9b1376c&refer=https%3A%2F%2Fwww.9xmovies.pro%2F
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2392)
Hash 75cdc14237ea6681f25c4e501c84ebca
c256bfc961e0b7e1aa957eb2e77546965dd79ca1
98e49d962c12f727ea38ca48c0ef4b7079b2f8431672024e35aef35e26cb85db
GET /watchnew?shu=527aad4a43b8bd50b79a9d168887bac8117d54e8e3de523e7190ce64cd0edec720bdd81c53c26c4d54e345c7e45e7414373fec4e16800a9a6840852715d751eb7264887627c2855e5188da12c31ac71cae29d414&pst=1669474130&rmtc=t&uuid=&pii=&in=false&key=ef13f4a94e01c64c10c47b13a9b1376c&refer=https%3A%2F%2Fwww.9xmovies.pro%2F HTTP/1.1
Host: painsdire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://painsdire.com/watchnew?key=ef13f4a94e01c64c10c47b13a9b1376c
Cookie: u_pl=16681775,16681754; ain=eyJhbGciOiJIUzI1NiJ9.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.sm_WIsCF8hlYr4gsAmyxHxBVkRSpGTF9wjoXfhiQ8Bw; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 26 Nov 2022 14:47:50 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.9xmovies.pro/
Access-Control-Allow-Origin: https://www.9xmovies.pro/
Access-Control-Allow-Credentials: true
Set-Cookie: pdhtkv=true; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
uncs=1; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
pdhtkv5=true; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
uncs5=1; expires=Sun, 27 Nov 2022 14:47:50 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d40d901e9575686c5d8f8ed0c9e1aac3
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
betotodilea.com/400/4825328
200 OK 76 kB URL HTTP/2 betotodilea.com/400/4825328
IP
Hash 42660dc17abe3a418a9e722d748280f6
2dc61a2b085224a2ad4a7f45bff82edfb4e3dcaa
4516bcf0e23d3c3af97288c6aff0efb140c9b79c6ca73aa8410380bd1e909672
Analyzer Verdict Alert quad9 Sinkholed
GET /400/4825328 HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:49 GMT
content-type: application/javascript
x-trace-id: ed26132d14131bb19e4ef326491d4303
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
set-cookie: OAID=9e2b2fe412994060b73487c19d3eb8c5; expires=Sun, 26 Nov 2023 14:47:49 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
nanouwho.com/9?z=4825329&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=9&sah=1002&drf=&hil=1&ist=0&oaid=w0ni774421py068433462h4l6eqcx916
204 No Content 0 B URL HTTP/2 nanouwho.com/9?z=4825329&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=9&sah=1002&drf=&hil=1&ist=0&oaid=w0ni774421py068433462h4l6eqcx916
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
OPTIONS /9?z=4825329&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=9&sah=1002&drf=&hil=1&ist=0&oaid=w0ni774421py068433462h4l6eqcx916 HTTP/1.1
Host: nanouwho.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.9xmovies.pro/
Origin: https://www.9xmovies.pro
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sat, 26 Nov 2022 14:47:50 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://www.9xmovies.pro
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjCNvbAYClV1o-lCFqjeexYlqWpwUVv5F-zMWGlTO5oZzk7bnrNT0m_gnTGfPzG0xlRUPH6ssJ8FinUYAiiNZwDQ_Do0c9MXW21Vku7dxMcKXy9ou5NDwlqmRsFtoZBCY_wNOMyyNPnhCLwbqj8-rwztVwcPHqmQ3HDaTr_7iRUh0Ow2CsY3Hm_Qi_8dA/w480/Blood,%20Sex%20&%20Royalty%20Season%201.jpg
200 OK 18 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjCNvbAYClV1o-lCFqjeexYlqWpwUVv5F-zMWGlTO5oZzk7bnrNT0m_gnTGfPzG0xlRUPH6ssJ8FinUYAiiNZwDQ_Do0c9MXW21Vku7dxMcKXy9ou5NDwlqmRsFtoZBCY_wNOMyyNPnhCLwbqj8-rwztVwcPHqmQ3HDaTr_7iRUh0Ow2CsY3Hm_Qi_8dA/w480/Blood,%20Sex%20&%20Royalty%20Season%201.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 285x400, components 3\012- data
Hash 336a99f12512e1856c7568df62da9488
23686db84c876dbc3da73cd9e387c53cd836ec37
dd2005f4daabaa9895b937b9d2ae033475488cf67c99565bf597813ad835a798
GET /img/b/R29vZ2xl/AVvXsEjCNvbAYClV1o-lCFqjeexYlqWpwUVv5F-zMWGlTO5oZzk7bnrNT0m_gnTGfPzG0xlRUPH6ssJ8FinUYAiiNZwDQ_Do0c9MXW21Vku7dxMcKXy9ou5NDwlqmRsFtoZBCY_wNOMyyNPnhCLwbqj8-rwztVwcPHqmQ3HDaTr_7iRUh0Ow2CsY3Hm_Qi_8dA/w480/Blood,%20Sex%20&%20Royalty%20Season%201.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v98f"
expires: Sun, 27 Nov 2022 14:47:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Blood, Sex & Royalty Season 1.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sat, 26 Nov 2022 14:47:50 GMT
server: fife
content-length: 18155
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/bi/d1/79/06/d1790638e0c54b7782413b15b7b05725/1647779069.jpg
200 OK 79 kB URL HTTP/2 cdn.cloudimagesb.com/bi/d1/79/06/d1790638e0c54b7782413b15b7b05725/1647779069.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2022:03:14 17:47:52], baseline, precision 8, 728x90, components 3\012- data
Hash 8404bebcee2db45c25008e3da8062442
a44fd0127642abd40c0b8ae1611e9aceaa1ae314
006b5ca6fda59d2d0e0086eb1818354fcf5185598dd5cf2edf510e1c3594b3e1
GET /bi/d1/79/06/d1790638e0c54b7782413b15b7b05725/1647779069.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://painsdire.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:47:50 GMT
content-type: image/jpeg
content-length: 78792
server: nginx/1.17.6
last-modified: Sun, 20 Mar 2022 12:24:35 GMT
etag: "62371d03-133c8"
expires: Mon, 28 Nov 2022 14:47:50 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgeuWpsZNFJRFhif9q2aIVr0Zt4Fdh7S0xqlXIaVQJzKuy4lTcW4DO33LKvuGDxoP_nTzN9cRnxxk_o7V3KTSmO2p3bE94AeLHWm8Ih-L_fUvt0ZRpE8S2QsNCXGOsnr8liRAQoGv_YOqWZ8uv2JLm7tCAxqgHf4w63xGsXx2ZOBqhjph7VVLvUpqfbwA/w480/Kabadadaari%202021.jpg
200 OK 81 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgeuWpsZNFJRFhif9q2aIVr0Zt4Fdh7S0xqlXIaVQJzKuy4lTcW4DO33LKvuGDxoP_nTzN9cRnxxk_o7V3KTSmO2p3bE94AeLHWm8Ih-L_fUvt0ZRpE8S2QsNCXGOsnr8liRAQoGv_YOqWZ8uv2JLm7tCAxqgHf4w63xGsXx2ZOBqhjph7VVLvUpqfbwA/w480/Kabadadaari%202021.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 400x600, components 3\012- data
Hash 17881f89d647e52cc4d04ed3c698d2b2
dc17456c1c40defda9f00ab5ca11be2c0cda7124
ea7904ac21a011afd518ee5946ec07e852d4f056b1f7e7cd39a7e0c4b78672a3
GET /img/b/R29vZ2xl/AVvXsEgeuWpsZNFJRFhif9q2aIVr0Zt4Fdh7S0xqlXIaVQJzKuy4lTcW4DO33LKvuGDxoP_nTzN9cRnxxk_o7V3KTSmO2p3bE94AeLHWm8Ih-L_fUvt0ZRpE8S2QsNCXGOsnr8liRAQoGv_YOqWZ8uv2JLm7tCAxqgHf4w63xGsXx2ZOBqhjph7VVLvUpqfbwA/w480/Kabadadaari%202021.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v981"
expires: Sun, 27 Nov 2022 14:47:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Kabadadaari 2021.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sat, 26 Nov 2022 14:47:50 GMT
server: fife
content-length: 81366
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/bi/cd/64/48/cd6448d1b1b2b9dad7274214c1e2d213/1643387217.jpg
200 OK 16 kB URL HTTP/2 cdn.cloudimagesb.com/bi/cd/64/48/cd6448d1b1b2b9dad7274214c1e2d213/1643387217.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 728x90, components 3\012- data
Hash 932bc8b0cd33fb2ca8ec275382669383
d280cce7d8c91e82424798d3b97fc78b05b806a9
f79b1745ee4c9e50e0c8fe877396fdecad959b6425561375644c8cd04154cda1
GET /bi/cd/64/48/cd6448d1b1b2b9dad7274214c1e2d213/1643387217.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://painsdire.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:47:50 GMT
content-type: image/jpeg
content-length: 15948
server: nginx/1.17.6
last-modified: Fri, 28 Jan 2022 16:27:05 GMT
etag: "61f41959-3e4c"
expires: Mon, 28 Nov 2022 14:47:50 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhubYKX9OvaNBdyRrTdh5oVP8xR-LOP6zEBfVCvlUVeJ4V_m_q8GaWfLJcBeuP0toahkwF9N2QGGs9RHMkbBBbf7Ksn3UcwmunmC8tk5rtMFS3GVDtcdEP7w9357531qGMfFWn3M4bZVMjADg2SrlHIYh9ckhqLPh_E8rhb-iQtM2JqDRxbSK5-YQDEWA/w480/Saroj%20Ka%20Rishta%202022.jpg
200 OK 82 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhubYKX9OvaNBdyRrTdh5oVP8xR-LOP6zEBfVCvlUVeJ4V_m_q8GaWfLJcBeuP0toahkwF9N2QGGs9RHMkbBBbf7Ksn3UcwmunmC8tk5rtMFS3GVDtcdEP7w9357531qGMfFWn3M4bZVMjADg2SrlHIYh9ckhqLPh_E8rhb-iQtM2JqDRxbSK5-YQDEWA/w480/Saroj%20Ka%20Rishta%202022.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 400x600, components 3\012- data
Hash bf34f6664c3471ee63e60bd6a37805d4
7db35801faa037ea1e3fcfe7f950cbe3a94732c0
7013b800fe7078ec2afc86839cdaaaff0a8751c12de363cd8fa95376ddc2851e
GET /img/b/R29vZ2xl/AVvXsEhubYKX9OvaNBdyRrTdh5oVP8xR-LOP6zEBfVCvlUVeJ4V_m_q8GaWfLJcBeuP0toahkwF9N2QGGs9RHMkbBBbf7Ksn3UcwmunmC8tk5rtMFS3GVDtcdEP7w9357531qGMfFWn3M4bZVMjADg2SrlHIYh9ckhqLPh_E8rhb-iQtM2JqDRxbSK5-YQDEWA/w480/Saroj%20Ka%20Rishta%202022.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v983"
expires: Sun, 27 Nov 2022 14:47:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Saroj Ka Rishta 2022.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sat, 26 Nov 2022 14:47:50 GMT
server: fife
content-length: 82407
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/90/fa/55/90fa55e79f85a5822e197862b4c53149/1663334602.png
200 OK 33 kB URL HTTP/2 cdn.cloudimagesb.com/cti/90/fa/55/90fa55e79f85a5822e197862b4c53149/1663334602.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 160 x 300, 8-bit/color RGB, non-interlaced\012- data
Hash fb8a0af2c78607cf4c540a8be54248ef
795083ee49378071a4a04505ac40dfb4134acd74
1ad52c531815350c0f4411825fde5553748dd6b14bbc73752c939f6eba73c029
GET /cti/90/fa/55/90fa55e79f85a5822e197862b4c53149/1663334602.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://painsdire.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:47:50 GMT
content-type: image/png
content-length: 33090
server: nginx/1.17.6
last-modified: Fri, 16 Sep 2022 13:23:30 GMT
etag: "632478d2-8142"
expires: Mon, 28 Nov 2022 14:47:50 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiMHe95jKFhCXn7efN9tLiQv6RZN_EbqFGTWzGpqIN4GkwaM6mFtruw99F9c8zYF7hkGnJOkJ4lQcC_mx0mBss8abSHYzcqPbXfqIHgcJVAJQxtgBk2QZg88LFSuNgSnkY7ktKZwbepGAmigNdqtigtavCtLUlEHctULoOgqE9qGOOVo-iVJAGhaDtF8w/w480/Drishyam%202%20(2022).jpg
200 OK 45 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiMHe95jKFhCXn7efN9tLiQv6RZN_EbqFGTWzGpqIN4GkwaM6mFtruw99F9c8zYF7hkGnJOkJ4lQcC_mx0mBss8abSHYzcqPbXfqIHgcJVAJQxtgBk2QZg88LFSuNgSnkY7ktKZwbepGAmigNdqtigtavCtLUlEHctULoOgqE9qGOOVo-iVJAGhaDtF8w/w480/Drishyam%202%20(2022).jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 400x600, components 3\012- data
Hash d7b2704007704d636dc2f93e40d23646
f3e707ec0643719ecb06d3161026f82284efd2fd
bd5c92c2e740166253c25cac5f712baf569d79ef0db8573748ffccbbdc5534dd
GET /img/b/R29vZ2xl/AVvXsEiMHe95jKFhCXn7efN9tLiQv6RZN_EbqFGTWzGpqIN4GkwaM6mFtruw99F9c8zYF7hkGnJOkJ4lQcC_mx0mBss8abSHYzcqPbXfqIHgcJVAJQxtgBk2QZg88LFSuNgSnkY7ktKZwbepGAmigNdqtigtavCtLUlEHctULoOgqE9qGOOVo-iVJAGhaDtF8w/w480/Drishyam%202%20(2022).jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v96b"
expires: Sun, 27 Nov 2022 14:47:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Drishyam 2 (2022).jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sat, 26 Nov 2022 14:47:50 GMT
server: fife
content-length: 45039
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRIsSQuxdzgpuk0j9lsZcVF_MmfLTUzC8MqSb2TsFiQChuW_L5n5543_I9bxeTO4hj93-16J9SqRzBvHNEKzdkqzzTxj70_tpLRBvjQd-xILmMskh0WTdC7W9b-YfCz2LqhtG8n30PUZetCbBqoJie5pJofRLwHGpp4PoiExlz51QsP4CfLbAdkFYlyg/w480/Sita%20Ramam%202022.jpg
200 OK 67 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRIsSQuxdzgpuk0j9lsZcVF_MmfLTUzC8MqSb2TsFiQChuW_L5n5543_I9bxeTO4hj93-16J9SqRzBvHNEKzdkqzzTxj70_tpLRBvjQd-xILmMskh0WTdC7W9b-YfCz2LqhtG8n30PUZetCbBqoJie5pJofRLwHGpp4PoiExlz51QsP4CfLbAdkFYlyg/w480/Sita%20Ramam%202022.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 400x600, components 3\012- data
Hash 960c3a624a88b4c9ad32e64ae706fd99
5bd5262fadcbcb8d3b98618804866e19042f6d16
3d625d825bb6341b4915d33b274c24311ae08467ca88eddab5242e518f442d02
GET /img/b/R29vZ2xl/AVvXsEgRIsSQuxdzgpuk0j9lsZcVF_MmfLTUzC8MqSb2TsFiQChuW_L5n5543_I9bxeTO4hj93-16J9SqRzBvHNEKzdkqzzTxj70_tpLRBvjQd-xILmMskh0WTdC7W9b-YfCz2LqhtG8n30PUZetCbBqoJie5pJofRLwHGpp4PoiExlz51QsP4CfLbAdkFYlyg/w480/Sita%20Ramam%202022.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v975"
expires: Sun, 27 Nov 2022 14:47:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Sita Ramam 2022.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sat, 26 Nov 2022 14:47:50 GMT
server: fife
content-length: 66677
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjUXPyj2U-fsvXNlC0OhzuDL5RhOm4uoYYajtgXqv7XtVwf5wcta_yT-B8k1cpZAuETIc2rOsT4CIKOV7MnpXTXuBpzAd1IWevchq6Da-L_uVzFsij4S5iisMGeUkSNYRiLQv5WLpx7vHX9U_n9OcNuXS5Ll6QvKXMHY_e_lcc8h4Fq6up9Iz45rFtq1w/w480/Tanaav%20Season%201.jpg
200 OK 83 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjUXPyj2U-fsvXNlC0OhzuDL5RhOm4uoYYajtgXqv7XtVwf5wcta_yT-B8k1cpZAuETIc2rOsT4CIKOV7MnpXTXuBpzAd1IWevchq6Da-L_uVzFsij4S5iisMGeUkSNYRiLQv5WLpx7vHX9U_n9OcNuXS5Ll6QvKXMHY_e_lcc8h4Fq6up9Iz45rFtq1w/w480/Tanaav%20Season%201.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 400x600, components 3\012- data
Hash 4699a4fc17b652f2f787a57a6ad80038
f5d6b4399cb8327af7d6b893ef757e52f31573eb
688097fa351ace8d802b673bac1badbfb21c0a71f7eb5aad23648db137ddf97a
GET /img/b/R29vZ2xl/AVvXsEjUXPyj2U-fsvXNlC0OhzuDL5RhOm4uoYYajtgXqv7XtVwf5wcta_yT-B8k1cpZAuETIc2rOsT4CIKOV7MnpXTXuBpzAd1IWevchq6Da-L_uVzFsij4S5iisMGeUkSNYRiLQv5WLpx7vHX9U_n9OcNuXS5Ll6QvKXMHY_e_lcc8h4Fq6up9Iz45rFtq1w/w480/Tanaav%20Season%201.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v98d"
expires: Sun, 27 Nov 2022 14:47:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Tanaav Season 1.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sat, 26 Nov 2022 14:47:50 GMT
server: fife
content-length: 83355
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ibrapush.com/pfe/current/universal.min.js?v=3.1.405
200 OK 115 kB URL HTTP/2 ibrapush.com/pfe/current/universal.min.js?v=3.1.405
IP
Size 115 kB (114951 bytes)
Hash a15549c88404ef161300562873a4ed8c
bf33c85daba5c76d0a92b77acf83b577a201f616
1ddc5e62ff627a0e65db204bdede5a9606f544e75c4bc8b3420b071280db9db4
GET /pfe/current/universal.min.js?v=3.1.405 HTTP/1.1
Host: ibrapush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.9xmovies.pro/
Origin: https://www.9xmovies.pro
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:50 GMT
content-type: application/javascript
last-modified: Thu, 24 Nov 2022 15:53:54 GMT
etag: W/"637f9392-180b9"
access-control-allow-origin: https://www.9xmovies.pro
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiRYUX9oUWg98rVyIzfDD9OR1jTtur3ybRlkV9ql5lCeae7YlktgNzGNzRMe-Lvt9dQZBaGcPytbhySo6jLN9e2zm1-Hk1HsI-3lkZ7ECGoHqgmDzNu9gZiB2GSaWoQLDrNtn8ISRz0sTaI6I0MF2IXrhPsoPUzbNAq-7UpxCTBbynNdw3UrPQG5y8XVA/w480/Uunchai%202022.jpg
200 OK 112 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiRYUX9oUWg98rVyIzfDD9OR1jTtur3ybRlkV9ql5lCeae7YlktgNzGNzRMe-Lvt9dQZBaGcPytbhySo6jLN9e2zm1-Hk1HsI-3lkZ7ECGoHqgmDzNu9gZiB2GSaWoQLDrNtn8ISRz0sTaI6I0MF2IXrhPsoPUzbNAq-7UpxCTBbynNdw3UrPQG5y8XVA/w480/Uunchai%202022.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 416x600, components 3\012- data
Size 112 kB (111579 bytes)
Hash 17303c6fb3728eb4ad9c56b4a9151498
a13ef3080c11443a9133ef3ebe3bc7674adf38b8
91d88b266b258d943ecf0a59bbadb7a0f1d6d825c1feb5390c60b14af92da165
GET /img/b/R29vZ2xl/AVvXsEiRYUX9oUWg98rVyIzfDD9OR1jTtur3ybRlkV9ql5lCeae7YlktgNzGNzRMe-Lvt9dQZBaGcPytbhySo6jLN9e2zm1-Hk1HsI-3lkZ7ECGoHqgmDzNu9gZiB2GSaWoQLDrNtn8ISRz0sTaI6I0MF2IXrhPsoPUzbNAq-7UpxCTBbynNdw3UrPQG5y8XVA/w480/Uunchai%202022.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v97b"
expires: Sun, 27 Nov 2022 14:47:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Uunchai 2022.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sat, 26 Nov 2022 14:47:50 GMT
server: fife
content-length: 111579
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg2HHncSTm_tAoEfNROivNmgWYJ5ynsGeDYFPLxGl9c1pnoY9TtdFenxMwbUS0LeQI036qwzePbOMBIFVg9gGeYVzvIAphyb7wDaZuAmUlEjvzH3o2In-u-74rfLEQ3ZAdYBGtXvc_YwxznPZwJAIWQjz9P2_dSWhl3M4rTd4XtcFkoekLkAH6iIOdEKQ/w480/Hostel%20Daze%20Season%203.jpg
200 OK 101 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg2HHncSTm_tAoEfNROivNmgWYJ5ynsGeDYFPLxGl9c1pnoY9TtdFenxMwbUS0LeQI036qwzePbOMBIFVg9gGeYVzvIAphyb7wDaZuAmUlEjvzH3o2In-u-74rfLEQ3ZAdYBGtXvc_YwxznPZwJAIWQjz9P2_dSWhl3M4rTd4XtcFkoekLkAH6iIOdEKQ/w480/Hostel%20Daze%20Season%203.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 405x600, components 3\012- data
Size 101 kB (101225 bytes)
Hash 8186371246a7f2ca0e42616593737646
8804e4cfbbf14fba666450dcec946173f4ba88aa
3bfe476b9b0fb3f02a9a63f2de4247d4c9a36a7d162134c416830f91c8e56fd5
GET /img/b/R29vZ2xl/AVvXsEg2HHncSTm_tAoEfNROivNmgWYJ5ynsGeDYFPLxGl9c1pnoY9TtdFenxMwbUS0LeQI036qwzePbOMBIFVg9gGeYVzvIAphyb7wDaZuAmUlEjvzH3o2In-u-74rfLEQ3ZAdYBGtXvc_YwxznPZwJAIWQjz9P2_dSWhl3M4rTd4XtcFkoekLkAH6iIOdEKQ/w480/Hostel%20Daze%20Season%203.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v979"
expires: Sun, 27 Nov 2022 14:47:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Hostel Daze Season 3.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sat, 26 Nov 2022 14:47:50 GMT
server: fife
content-length: 101225
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNHHRf1QsTgLTe6ScqS5CJ3-yr8jnKZBb7QuZaYxXeQl4GvUBvjEAEkZIVaS3I2ZeGBAygWdDDbDG0z-M5zf-pWYkljtzcGqxFehppNXNbK1cbgQgKFORQ4YJNQIPjsdtciOpTbZRHD6PgwvM523QWHQD0WUz8KhzmK1CUcvXxKMy3heRi0n5ZtgCV4Q/w480/Wednesday%20Season%201.jpg
200 OK 73 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNHHRf1QsTgLTe6ScqS5CJ3-yr8jnKZBb7QuZaYxXeQl4GvUBvjEAEkZIVaS3I2ZeGBAygWdDDbDG0z-M5zf-pWYkljtzcGqxFehppNXNbK1cbgQgKFORQ4YJNQIPjsdtciOpTbZRHD6PgwvM523QWHQD0WUz8KhzmK1CUcvXxKMy3heRi0n5ZtgCV4Q/w480/Wednesday%20Season%201.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 400x600, components 3\012- data
Hash ee0ec92c7d8952eaec0ce83c52064dfc
7387b18f0181fe7c58ba42b5790da75dc665bd6e
067351fc41b5741e014ddeb0ace0b27815d98b913457e5b6f14ae6a296e8f6d6
GET /img/b/R29vZ2xl/AVvXsEjNHHRf1QsTgLTe6ScqS5CJ3-yr8jnKZBb7QuZaYxXeQl4GvUBvjEAEkZIVaS3I2ZeGBAygWdDDbDG0z-M5zf-pWYkljtzcGqxFehppNXNbK1cbgQgKFORQ4YJNQIPjsdtciOpTbZRHD6PgwvM523QWHQD0WUz8KhzmK1CUcvXxKMy3heRi0n5ZtgCV4Q/w480/Wednesday%20Season%201.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v98b"
expires: Sun, 27 Nov 2022 14:47:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Wednesday Season 1.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sat, 26 Nov 2022 14:47:50 GMT
server: fife
content-length: 73204
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgc_i9xn_KKPUtXvPoRc8PpAMN002pfJmyi9uHFlRNxD3sT3imEQwrxZVbmTeQiqskxA_2pT2o9Zfl5NFyn6tGeyJXUXvZtYoEJKqgWyLNjQzjA47DfcpiI7S1gPTBhzXbQ7S0pVlGU2lP3MnjissZsBpVnP8LNDCzWHs02NKPpm5fvScA5XrfD_vhJng/w480/The%20Warriorr%202022.jpg
200 OK 55 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgc_i9xn_KKPUtXvPoRc8PpAMN002pfJmyi9uHFlRNxD3sT3imEQwrxZVbmTeQiqskxA_2pT2o9Zfl5NFyn6tGeyJXUXvZtYoEJKqgWyLNjQzjA47DfcpiI7S1gPTBhzXbQ7S0pVlGU2lP3MnjissZsBpVnP8LNDCzWHs02NKPpm5fvScA5XrfD_vhJng/w480/The%20Warriorr%202022.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 400x600, components 3\012- data
Hash 15993cd47f61b9a6a9eb14e769545fe2
a3b27923f18434f32cce7ccc709e27fd1b09e278
6a4f21a695c633664719f726970adc4a19d9f086466b69e32d908c8cd2c87c47
GET /img/b/R29vZ2xl/AVvXsEgc_i9xn_KKPUtXvPoRc8PpAMN002pfJmyi9uHFlRNxD3sT3imEQwrxZVbmTeQiqskxA_2pT2o9Zfl5NFyn6tGeyJXUXvZtYoEJKqgWyLNjQzjA47DfcpiI7S1gPTBhzXbQ7S0pVlGU2lP3MnjissZsBpVnP8LNDCzWHs02NKPpm5fvScA5XrfD_vhJng/w480/The%20Warriorr%202022.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v993"
expires: Sun, 27 Nov 2022 14:47:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="The Warriorr 2022.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sat, 26 Nov 2022 14:47:50 GMT
server: fife
content-length: 54585
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e4d661d999b855142d472fd230fb4ab3
b4be1feeaccc98768ec3393929772bd8f75deed7
97a1c1b509250dd99cde7f76b53a43b7ee415011744414d83f5980df2e11dc60
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:47:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
my.rtmark.net/gid.js?userId=w0ni774421py068433462h4l6eqcx916
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?userId=w0ni774421py068433462h4l6eqcx916
IP
File type JSON data\012- , ASCII text
Hash 8d8f9ebb17225e4cf252b2aa32b4e382
adfcb24bea3f3b18986c1782cc555ae71044e280
89f868af9441b41ad0a4235c58aa2202d9e30e9a2c0ed47498eb1c34f204e55b
GET /gid.js?userId=w0ni774421py068433462h4l6eqcx916 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.9xmovies.pro
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Cookie: ID=3cf5712921204b2b85f64055bbba950d
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:50 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://www.9xmovies.pro
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=3cf5712921204b2b85f64055bbba950d; expires=Sun, 26 Nov 2023 14:47:50 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/90/7a/17/907a17350b6b51cb197a68b9abd5d891/1663166540.png
200 OK 42 kB URL HTTP/2 cdn.cloudimagesb.com/cti/90/7a/17/907a17350b6b51cb197a68b9abd5d891/1663166540.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 729 x 90, 8-bit/color RGBA, non-interlaced\012- data
Hash 610068f0944bd0789b1db6f4f174d14c
ff5a07bf5322d4ae8d897e4bc05a22fe4e53dfc0
fdaf14a8e3dd4e0f8124be05742b583c9e9c3a15e4e59e4a321953131c275101
GET /cti/90/7a/17/907a17350b6b51cb197a68b9abd5d891/1663166540.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://painsdire.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:47:50 GMT
content-type: image/png
content-length: 42054
server: nginx/1.17.6
last-modified: Wed, 14 Sep 2022 14:42:28 GMT
etag: "6321e854-a446"
expires: Mon, 28 Nov 2022 14:47:50 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/bi/37/9e/02/379e020ebae4723959b41c13a914a506/1659524633.jpg
200 OK 22 kB URL HTTP/2 cdn.cloudimagesb.com/bi/37/9e/02/379e020ebae4723959b41c13a914a506/1659524633.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 300x250, components 3\012- data
Hash 48437a3063405aad4f0f3c53c0aa2575
ec531ad70ab8fd520edb8f96a6df666ff537957d
0c797c51a2584979dc87681b44688870f27b040c7dbe10acef419548c517f999
GET /bi/37/9e/02/379e020ebae4723959b41c13a914a506/1659524633.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://painsdire.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:47:50 GMT
content-type: image/jpeg
content-length: 21582
server: nginx/1.17.6
last-modified: Wed, 03 Aug 2022 11:04:01 GMT
etag: "62ea5621-544e"
expires: Mon, 28 Nov 2022 14:47:50 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
upgulpinon.com/11?rnd=831635616&z=4825384&b=15748416&var=&rqtdbc=1&rcvdbc=1&btp=7&rb=yIgdo_PLopC0y2ZrR6oVdGsLQftr5va_m6pWs_dpTUosdXXF6U01AzNeaH-yIPJoe_R3aoEpLpLyoyZdYiL49cOukaDxz_IMffSk9qEsG0PNCnP2JdyVNfzkFagjlQ6tjCIGKNF7CqcRJZ_elC64YXjI3IGKFHJHGy1eh0x7UzA7qz-VZEoo8-qTvX_HVkWpxaEgcC0ifBBYg-iGBoJaqsZecCFz2UgbLMey2dh5c2sjtRR4plLCAmeSuQKt5GCb5lWzp8YkqUUmX5lzcoLOxYym7UnSwlNe0wOS1rsGzBeMBG3LabTc9dlluIj9gA7ZqmLvvVfZ7uGS0LhusGDI17aGqzBTXGhurPea5pUDoF_Q2YCACujpma-8lfi8yZIu0J5wfAnLacQq_hXezUTBmy_6LOmKuxl1l2-SGKo9z7EZvx3-yZdTsdCwtpqsEzKcnoa2YPTOhSwWIH1pYNvG8WogpHHObLW3dRM09A4WtbW8SGYBloQR78yAIYANPSTaLvopQKwuRFNN3vOkvNOQUMQAZ3hPact3Qn1OzxwPqBNhY7PtZKdSUHaL0eESy2Um0il2DQONl4AFdQVSdxRvLUl98e__ugtmSX1OZN8ZxoAvBDA45HVF-ecBMRVymCEBwPHNWEwVpEgqrpdi2Zas3TX4WaR_tPWgkrcynIDUb-mKYibfSjc_1qiomOHz6LkZ5KRjD7XMpenZIV1p&ruid=e889324d-6f8d-4f62-953a-d62eaec1429c&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=9&sah=1002&drf=&hil=1&ist=0&ot=433
200 OK 0 B URL HTTP/2 upgulpinon.com/11?rnd=831635616&z=4825384&b=15748416&var=&rqtdbc=1&rcvdbc=1&btp=7&rb=yIgdo_PLopC0y2ZrR6oVdGsLQftr5va_m6pWs_dpTUosdXXF6U01AzNeaH-yIPJoe_R3aoEpLpLyoyZdYiL49cOukaDxz_IMffSk9qEsG0PNCnP2JdyVNfzkFagjlQ6tjCIGKNF7CqcRJZ_elC64YXjI3IGKFHJHGy1eh0x7UzA7qz-VZEoo8-qTvX_HVkWpxaEgcC0ifBBYg-iGBoJaqsZecCFz2UgbLMey2dh5c2sjtRR4plLCAmeSuQKt5GCb5lWzp8YkqUUmX5lzcoLOxYym7UnSwlNe0wOS1rsGzBeMBG3LabTc9dlluIj9gA7ZqmLvvVfZ7uGS0LhusGDI17aGqzBTXGhurPea5pUDoF_Q2YCACujpma-8lfi8yZIu0J5wfAnLacQq_hXezUTBmy_6LOmKuxl1l2-SGKo9z7EZvx3-yZdTsdCwtpqsEzKcnoa2YPTOhSwWIH1pYNvG8WogpHHObLW3dRM09A4WtbW8SGYBloQR78yAIYANPSTaLvopQKwuRFNN3vOkvNOQUMQAZ3hPact3Qn1OzxwPqBNhY7PtZKdSUHaL0eESy2Um0il2DQONl4AFdQVSdxRvLUl98e__ugtmSX1OZN8ZxoAvBDA45HVF-ecBMRVymCEBwPHNWEwVpEgqrpdi2Zas3TX4WaR_tPWgkrcynIDUb-mKYibfSjc_1qiomOHz6LkZ5KRjD7XMpenZIV1p&ruid=e889324d-6f8d-4f62-953a-d62eaec1429c&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=9&sah=1002&drf=&hil=1&ist=0&ot=433
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /11?rnd=831635616&z=4825384&b=15748416&var=&rqtdbc=1&rcvdbc=1&btp=7&rb=yIgdo_PLopC0y2ZrR6oVdGsLQftr5va_m6pWs_dpTUosdXXF6U01AzNeaH-yIPJoe_R3aoEpLpLyoyZdYiL49cOukaDxz_IMffSk9qEsG0PNCnP2JdyVNfzkFagjlQ6tjCIGKNF7CqcRJZ_elC64YXjI3IGKFHJHGy1eh0x7UzA7qz-VZEoo8-qTvX_HVkWpxaEgcC0ifBBYg-iGBoJaqsZecCFz2UgbLMey2dh5c2sjtRR4plLCAmeSuQKt5GCb5lWzp8YkqUUmX5lzcoLOxYym7UnSwlNe0wOS1rsGzBeMBG3LabTc9dlluIj9gA7ZqmLvvVfZ7uGS0LhusGDI17aGqzBTXGhurPea5pUDoF_Q2YCACujpma-8lfi8yZIu0J5wfAnLacQq_hXezUTBmy_6LOmKuxl1l2-SGKo9z7EZvx3-yZdTsdCwtpqsEzKcnoa2YPTOhSwWIH1pYNvG8WogpHHObLW3dRM09A4WtbW8SGYBloQR78yAIYANPSTaLvopQKwuRFNN3vOkvNOQUMQAZ3hPact3Qn1OzxwPqBNhY7PtZKdSUHaL0eESy2Um0il2DQONl4AFdQVSdxRvLUl98e__ugtmSX1OZN8ZxoAvBDA45HVF-ecBMRVymCEBwPHNWEwVpEgqrpdi2Zas3TX4WaR_tPWgkrcynIDUb-mKYibfSjc_1qiomOHz6LkZ5KRjD7XMpenZIV1p&ruid=e889324d-6f8d-4f62-953a-d62eaec1429c&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=9&sah=1002&drf=&hil=1&ist=0&ot=433 HTTP/1.1
Host: upgulpinon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.9xmovies.pro
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Cookie: scm=1; OAID=w0ni774421py068433462h4l6eqcx916; oaidts=1669474068
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:50 GMT
content-type: image/jpeg
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: https://www.9xmovies.pro
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
x-trace-id: a52f24db967e0d761b732ed2d90039a3
access-control-expose-headers: X-Sc
set-cookie: OAID=w0ni774421py068433462h4l6eqcx916; expires=Sun, 26 Nov 2023 14:47:50 GMT; secure; SameSite=None
oaidts=1669474068; expires=Sun, 26 Nov 2023 14:47:50 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/bi/c5/c6/a0/c5c6a0ba33eef8de9023d1aca9d1a86e/1631288649.jpg
200 OK 143 kB URL HTTP/2 cdn.cloudimagesb.com/bi/c5/c6/a0/c5c6a0ba33eef8de9023d1aca9d1a86e/1631288649.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2021:07:26 14:04:59], baseline, precision 8, 300x250, components 3\012- data
Size 143 kB (143440 bytes)
Hash 24c56427dc2b6bfed1198830600dc8f5
8dc4871241fe814e3688993173f74ee786b96232
ae8e3d4e812c33e260922b63b19d3bbab877e9b98cf37e4c0bcad99c2da63410
GET /bi/c5/c6/a0/c5c6a0ba33eef8de9023d1aca9d1a86e/1631288649.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://painsdire.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:47:50 GMT
content-type: image/jpeg
content-length: 143440
server: nginx/1.17.6
last-modified: Fri, 10 Sep 2021 15:44:20 GMT
etag: "613b7d54-23050"
expires: Mon, 28 Nov 2022 14:47:50 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/bi/4e/c4/44/4ec44402b8d62ee0b233f6bf46691e01/1665156938.jpg
200 OK 23 kB URL HTTP/2 cdn.cloudimagesb.com/bi/4e/c4/44/4ec44402b8d62ee0b233f6bf46691e01/1665156938.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 300x250, components 3\012- data
Hash 4e16a3e2255e1dda45f1f5ac24275df1
09ef2f1c878f49e572f60d3dc3706d0f4461887c
bd0df71d10a64e3d3523540f303a0967cd6d4b7bb30550c5c0be002695a72f80
GET /bi/4e/c4/44/4ec44402b8d62ee0b233f6bf46691e01/1665156938.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://painsdire.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:47:50 GMT
content-type: image/jpeg
content-length: 23372
server: nginx/1.17.6
last-modified: Fri, 07 Oct 2022 15:35:46 GMT
etag: "63404752-5b4c"
expires: Mon, 28 Nov 2022 14:47:50 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11183
Expires: Sat, 26 Nov 2022 17:54:14 GMT
Date: Sat, 26 Nov 2022 14:47:51 GMT
Connection: keep-alive
nanouwho.com/9?z=4825329&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=9&sah=1002&drf=&hil=1&ist=0&oaid=w0ni774421py068433462h4l6eqcx916
200 OK 66 kB URL HTTP/2 nanouwho.com/9?z=4825329&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=9&sah=1002&drf=&hil=1&ist=0&oaid=w0ni774421py068433462h4l6eqcx916
IP
Hash 08a033b7b996baae7284c89c3b2acb91
f59905bcf962aca7d307b61a5ad30b3011c4a595
59fdeade28f62c941b39fba5f9f38ea640cbe488dfa71deb5b71a9303fcd1bcb
Analyzer Verdict Alert quad9 Sinkholed
POST /9?z=4825329&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=9&sah=1002&drf=&hil=1&ist=0&oaid=w0ni774421py068433462h4l6eqcx916 HTTP/1.1
Host: nanouwho.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 267
Origin: https://www.9xmovies.pro
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Cookie: scm=1; OAID=76e8e6c4a4ab4065b82c1e65291061a6; oaidts=1669474069
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:50 GMT
content-type: application/json
access-control-allow-credentials: true
access-control-allow-origin: https://www.9xmovies.pro
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
x-trace-id: e14e7b8aea070cc63cbf8bf611f86477
access-control-expose-headers: X-Sc
set-cookie: OAID=w0ni774421py068433462h4l6eqcx916; expires=Sun, 26 Nov 2023 14:47:50 GMT; secure; SameSite=None
oaidts=1669474069; expires=Sun, 26 Nov 2023 14:47:50 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6384a874a72c3df8941f526f18b35cc5
e380f3712b8a1edfddba7bfa6d1fd27d4ae8c472
1dd1d45f6988f9be4f87bfdd19ef3252e672defd246b20b6c8a44da37298e55d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1DD1D45F6988F9BE4F87BFDD19EF3252E672DEFD246B20B6C8A44DA37298E55D"
Last-Modified: Thu, 24 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17992
Expires: Sat, 26 Nov 2022 19:47:43 GMT
Date: Sat, 26 Nov 2022 14:47:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11183
Expires: Sat, 26 Nov 2022 17:54:14 GMT
Date: Sat, 26 Nov 2022 14:47:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11183
Expires: Sat, 26 Nov 2022 17:54:14 GMT
Date: Sat, 26 Nov 2022 14:47:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11183
Expires: Sat, 26 Nov 2022 17:54:14 GMT
Date: Sat, 26 Nov 2022 14:47:51 GMT
Connection: keep-alive
cdn.cloudimagesb.com/cti/a3/52/3e/a3523e9edca6705b6cf12b7928744f8d/1627916018.png
200 OK 87 kB URL HTTP/2 cdn.cloudimagesb.com/cti/a3/52/3e/a3523e9edca6705b6cf12b7928744f8d/1627916018.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 300 x 250, 8-bit/color RGB, non-interlaced\012- data
Hash 617ed75a77c895661681287847a25114
d12b69f9c68c07e6019e49328c67644974a737e1
07e84d0dd10b99f347193232866ca93f6a2d3dba4a058852e071fe88aeccc4a8
GET /cti/a3/52/3e/a3523e9edca6705b6cf12b7928744f8d/1627916018.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://painsdire.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:47:51 GMT
content-type: image/png
content-length: 87394
server: nginx/1.17.6
last-modified: Mon, 02 Aug 2021 14:53:46 GMT
etag: "610806fa-15562"
expires: Mon, 28 Nov 2022 14:47:51 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
betotodilea.com/500/4825328?excludes=&oaid=w0ni774421py068433462h4l6eqcx916&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=10&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
200 OK 0 B URL HTTP/2 betotodilea.com/500/4825328?excludes=&oaid=w0ni774421py068433462h4l6eqcx916&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=10&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
OPTIONS /500/4825328?excludes=&oaid=w0ni774421py068433462h4l6eqcx916&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=10&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.9xmovies.pro/
Origin: https://www.9xmovies.pro
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:51 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://www.9xmovies.pro
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-allow-credentials: true
access-control-max-age: 600
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
onmarshtompor.com/?rb=J0aIR_eO-bBmTliT6rMhD7wo_qo0ws9JmHypo0RGjtFOjBLUnd3jWUpI5hssVp9uJgHXKyFiHE1wcxkyOAGhASzgEGdQMwHb2L7Ys7jIZpOch7NABsecsSV9cgKaigujnUSNn8Z70Z0ZncuW921hP8odxm41jNzI26hl3WrAdcrZeT3o35VkLkulDIJt_EUWsOsXLwK5jiAHJpi9hpIdnoLe3FaAHRPz15snHUcwmk80VzH-02zVfg%3D%3D&request_ab2=96001&zoneid=4825354&js_build=iclick-v1.454.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=9&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.454.0&bs=b94292f4-39da-4d7b-8285-99d823b3f31e&userId=w0ni774421py068433462h4l6eqcx916&m=link
200 OK 5.1 kB URL HTTP/2 onmarshtompor.com/?rb=J0aIR_eO-bBmTliT6rMhD7wo_qo0ws9JmHypo0RGjtFOjBLUnd3jWUpI5hssVp9uJgHXKyFiHE1wcxkyOAGhASzgEGdQMwHb2L7Ys7jIZpOch7NABsecsSV9cgKaigujnUSNn8Z70Z0ZncuW921hP8odxm41jNzI26hl3WrAdcrZeT3o35VkLkulDIJt_EUWsOsXLwK5jiAHJpi9hpIdnoLe3FaAHRPz15snHUcwmk80VzH-02zVfg%3D%3D&request_ab2=96001&zoneid=4825354&js_build=iclick-v1.454.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=9&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.454.0&bs=b94292f4-39da-4d7b-8285-99d823b3f31e&userId=w0ni774421py068433462h4l6eqcx916&m=link
IP
Hash c7292942819b77bc18d01aac0533ad14
7e4fb65fa47ee7822793fe5a8e37272ab5724ab4
7e73b2804a257c36047376ed22d1e15bdf41fdfa472761927bb00eb70ac7a617
GET /?rb=J0aIR_eO-bBmTliT6rMhD7wo_qo0ws9JmHypo0RGjtFOjBLUnd3jWUpI5hssVp9uJgHXKyFiHE1wcxkyOAGhASzgEGdQMwHb2L7Ys7jIZpOch7NABsecsSV9cgKaigujnUSNn8Z70Z0ZncuW921hP8odxm41jNzI26hl3WrAdcrZeT3o35VkLkulDIJt_EUWsOsXLwK5jiAHJpi9hpIdnoLe3FaAHRPz15snHUcwmk80VzH-02zVfg%3D%3D&request_ab2=96001&zoneid=4825354&js_build=iclick-v1.454.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=9&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.454.0&bs=b94292f4-39da-4d7b-8285-99d823b3f31e&userId=w0ni774421py068433462h4l6eqcx916&m=link HTTP/1.1
Host: onmarshtompor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.9xmovies.pro/
Origin: https://www.9xmovies.pro
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:50 GMT
content-type: application/json
x-trace-id: 65c193a7c278fde3ba6797f11bbb44fb
access-control-allow-origin: https://www.9xmovies.pro
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=w0ni774421py068433462h4l6eqcx916; expires=Sun, 26 Nov 2023 14:47:50 GMT; path=/; secure; SameSite=None
oaidts=1669474070; expires=Sun, 26 Nov 2023 14:47:50 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Sat, 03 Dec 2022 14:47:50 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34ec689c-96b7-450b-b77e-e0ecb4d89c3c.jpeg
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34ec689c-96b7-450b-b77e-e0ecb4d89c3c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c8dc4b8a7e9f7f4f84f0da568b43392b
3d32bff85cb7ec118c4496d0c3802829fdc9af3b
4b0ffde427085c796a7a5823604b29a4af43dbb93e99ec41f34feb37f52ac7d9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34ec689c-96b7-450b-b77e-e0ecb4d89c3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9049
x-amzn-requestid: 6cbd9639-c29d-4ff4-8091-3168f64f4c78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVVGHzKoAMFSuA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638135ba-100ea4235fdf1df8491041c8;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:38:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: OJZkZ18TlSgdBWsmSroQPIcYIvBFvz5-7hu9_GravTcz6zqxKXHZrg==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:43:36 GMT
age: 61455
etag: "3d32bff85cb7ec118c4496d0c3802829fdc9af3b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
rndskittytor.com/500/4825382?excludes=&oaid=w0ni774421py068433462h4l6eqcx916&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=10&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
200 OK 5.6 kB URL HTTP/2 rndskittytor.com/500/4825382?excludes=&oaid=w0ni774421py068433462h4l6eqcx916&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=10&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
Hash 3a227e9f3070a52c053826d34d6b8b99
389e97abf8f63ebc242b4eda84ef7af00efc57d3
1598e25d88772e1689285105d97e9800d09149cf61012958c38060316ce5af1b
Analyzer Verdict Alert quad9 Sinkholed
GET /500/4825382?excludes=&oaid=w0ni774421py068433462h4l6eqcx916&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=10&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: rndskittytor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://www.9xmovies.pro
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Cookie: OAID=5b3ba55cb395471a8e49e82b65e4c865
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:50 GMT
content-type: application/javascript
x-trace-id: cf90f7c2d3d85b0a6ab49091192d6cc6
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
vary: Origin
access-control-allow-origin: https://www.9xmovies.pro
access-control-expose-headers: Link
access-control-allow-credentials: true
set-cookie: OAID=w0ni774421py068433462h4l6eqcx916; expires=Sun, 26 Nov 2023 14:47:50 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f5318cc-4728-4160-afd1-9d20b79b7de9.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f5318cc-4728-4160-afd1-9d20b79b7de9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3b1c6878914466cfece680fa7cb73502
47fac81a2dd809df5c42ca1362f71d553572d2b1
6458883dfa2bdfd483e92e5f847a229508ef00ce1dbd11f49eec369d0bd3160a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f5318cc-4728-4160-afd1-9d20b79b7de9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9914
x-amzn-requestid: 4db4ed29-20b4-4ca7-8835-2463d0989d5b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVVFHQYIAMFc4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638135b9-613da006118724124e345b29;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:38:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7cJmhEGkKqLUQUMqGuYtWBeu_1nlEUAxgTMy4ABekPJYrJP95wE6Jg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:59:05 GMT
age: 60526
etag: "47fac81a2dd809df5c42ca1362f71d553572d2b1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
nanouwho.com/11?rnd=333454046&z=4825329&b=15868710&var=&rqtdbc=1&rcvdbc=1&btp=7&rb=hsmPUojBq5y2hyqzbokp2umS9iLk60o6OzKFOOezwTyz3Ka01CJvjzWr68k2ErnyeK7fs4UDwbmZlT4tFFG-kgPsrIckouCEqeR-bvqLxVtA-tarEw06QBOwma4W7TgTxrUo-T415u1rPWyA2VxqX5PS7MOCcIEazyIKzJll3eY6-Fn-_I5cYxJN5tlRURJZ38hN5mQgcL6ZOQW6kd25Hy6baZGIy9ayxU-w4Z229tnbeANskfTnnr5-nslXpjpqut5gjgFoAAbj4aKedG_FLZMMe_8YyjZusLBfggyjbSYWtkeYHW-5BqOpSZpIzfFLRKG4HP4NVtDyJ3LKzBC9X3AGnXT6ld-KjdNzxJdyd72ewwQpbsFOdf9TvpMgNtGWYSarmUGx3hQzQxekMsXUZT2ekES1b67nVgrXCnj-m95rfvLu5fWNuuQ2CGq7JjDngYj0wbY_Yz2pwhzJxSIsuUhndcPQHabUY1zRaGLTIBPMFDy1vsXH8QGnxoWU6XBdUVp_xKpvyeZmRe5cWcZluOBTtpaOrgwJ4M1ZRvOl-dOcaLz1SkKiwUydFMI2tMrGzUX3-JS-6Wnoop8nkaDTsVRdxjzS_kYYponFjOplVT9ngozJOGnuN1mHZeuKZugp-a2NZvc3sFz-6k8eQk5E8w==&ruid=b4850326-4ebe-460f-9e4b-b59a6a5726fa&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=9&sah=1002&drf=&hil=1&ist=0&ot=733
200 OK 0 B URL HTTP/2 nanouwho.com/11?rnd=333454046&z=4825329&b=15868710&var=&rqtdbc=1&rcvdbc=1&btp=7&rb=hsmPUojBq5y2hyqzbokp2umS9iLk60o6OzKFOOezwTyz3Ka01CJvjzWr68k2ErnyeK7fs4UDwbmZlT4tFFG-kgPsrIckouCEqeR-bvqLxVtA-tarEw06QBOwma4W7TgTxrUo-T415u1rPWyA2VxqX5PS7MOCcIEazyIKzJll3eY6-Fn-_I5cYxJN5tlRURJZ38hN5mQgcL6ZOQW6kd25Hy6baZGIy9ayxU-w4Z229tnbeANskfTnnr5-nslXpjpqut5gjgFoAAbj4aKedG_FLZMMe_8YyjZusLBfggyjbSYWtkeYHW-5BqOpSZpIzfFLRKG4HP4NVtDyJ3LKzBC9X3AGnXT6ld-KjdNzxJdyd72ewwQpbsFOdf9TvpMgNtGWYSarmUGx3hQzQxekMsXUZT2ekES1b67nVgrXCnj-m95rfvLu5fWNuuQ2CGq7JjDngYj0wbY_Yz2pwhzJxSIsuUhndcPQHabUY1zRaGLTIBPMFDy1vsXH8QGnxoWU6XBdUVp_xKpvyeZmRe5cWcZluOBTtpaOrgwJ4M1ZRvOl-dOcaLz1SkKiwUydFMI2tMrGzUX3-JS-6Wnoop8nkaDTsVRdxjzS_kYYponFjOplVT9ngozJOGnuN1mHZeuKZugp-a2NZvc3sFz-6k8eQk5E8w==&ruid=b4850326-4ebe-460f-9e4b-b59a6a5726fa&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=9&sah=1002&drf=&hil=1&ist=0&ot=733
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /11?rnd=333454046&z=4825329&b=15868710&var=&rqtdbc=1&rcvdbc=1&btp=7&rb=hsmPUojBq5y2hyqzbokp2umS9iLk60o6OzKFOOezwTyz3Ka01CJvjzWr68k2ErnyeK7fs4UDwbmZlT4tFFG-kgPsrIckouCEqeR-bvqLxVtA-tarEw06QBOwma4W7TgTxrUo-T415u1rPWyA2VxqX5PS7MOCcIEazyIKzJll3eY6-Fn-_I5cYxJN5tlRURJZ38hN5mQgcL6ZOQW6kd25Hy6baZGIy9ayxU-w4Z229tnbeANskfTnnr5-nslXpjpqut5gjgFoAAbj4aKedG_FLZMMe_8YyjZusLBfggyjbSYWtkeYHW-5BqOpSZpIzfFLRKG4HP4NVtDyJ3LKzBC9X3AGnXT6ld-KjdNzxJdyd72ewwQpbsFOdf9TvpMgNtGWYSarmUGx3hQzQxekMsXUZT2ekES1b67nVgrXCnj-m95rfvLu5fWNuuQ2CGq7JjDngYj0wbY_Yz2pwhzJxSIsuUhndcPQHabUY1zRaGLTIBPMFDy1vsXH8QGnxoWU6XBdUVp_xKpvyeZmRe5cWcZluOBTtpaOrgwJ4M1ZRvOl-dOcaLz1SkKiwUydFMI2tMrGzUX3-JS-6Wnoop8nkaDTsVRdxjzS_kYYponFjOplVT9ngozJOGnuN1mHZeuKZugp-a2NZvc3sFz-6k8eQk5E8w==&ruid=b4850326-4ebe-460f-9e4b-b59a6a5726fa&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=9&sah=1002&drf=&hil=1&ist=0&ot=733 HTTP/1.1
Host: nanouwho.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.9xmovies.pro
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Cookie: scm=1; OAID=w0ni774421py068433462h4l6eqcx916; oaidts=1669474069
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:51 GMT
content-type: image/jpeg
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: https://www.9xmovies.pro
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
x-trace-id: ee842fd7a56ba8f1369c2c72a847f139
access-control-expose-headers: X-Sc
set-cookie: OAID=w0ni774421py068433462h4l6eqcx916; expires=Sun, 26 Nov 2023 14:47:51 GMT; secure; SameSite=None
oaidts=1669474069; expires=Sun, 26 Nov 2023 14:47:51 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72e29c5-d9d3-43d5-8c71-f66a22a3f112.jpeg
200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72e29c5-d9d3-43d5-8c71-f66a22a3f112.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9bc7c4877bfa24d0c1bbb774cd906af1
75d9a14e98ffba5a71a6f710be721b593338ffdc
b0e1d9af095632e6d75bc7606bccfb0c1903f5173696cefb7e36c3d34a98358e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72e29c5-d9d3-43d5-8c71-f66a22a3f112.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6560
x-amzn-requestid: e8956a92-d016-41a2-99b4-631a6db3b8db
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: byQzsFY3IAMF9iA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63772e7d-2337148b0a824d134aaab9d7;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 07:04:29 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: nqv3cZb0_TFYs1XuLw1pCg4B1HmA87mj4S1Sjh3cgXyWd3GnweAY7w==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 05:14:37 GMT
age: 34394
etag: "75d9a14e98ffba5a71a6f710be721b593338ffdc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1de44df6-bdc7-487f-a2a0-b42d26be2420.jpeg
200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1de44df6-bdc7-487f-a2a0-b42d26be2420.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 17ebe470d040a6ea8c57e9b9d4f4e828
1ac7a410cd4f3709f476c776dd5646dd982dcfa8
d65114b68fcc12344c6df7bf294718b79822fa9782d3bd54ca044b66f82052b1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1de44df6-bdc7-487f-a2a0-b42d26be2420.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15818
x-amzn-requestid: a6570859-3b03-492e-9f84-e25b01223da2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLXrUF3bIAMF8CA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381397b-379b1bcf2ac0715835e10e48;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:54:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: HgiyaodE2vJx5JL8QfOiTersSAgAwq74gtsPkpHUhnQ3In2vZ-3rbQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:33:09 GMT
etag: "1ac7a410cd4f3709f476c776dd5646dd982dcfa8"
content-type: image/jpeg
age: 58482
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
offerimage.com/www/images/e27e78d3b01907b714b7d939d7eed85d.png
200 OK 43 kB URL HTTP/2 offerimage.com/www/images/e27e78d3b01907b714b7d939d7eed85d.png
IP
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash e27e78d3b01907b714b7d939d7eed85d
2d4aa0d84925e5031861258c341788450ba8b43c
37024bac32f0cc3299c2492471b40e6beb2fd7b3cb73b172d68207e87cdfd6e6
GET /www/images/e27e78d3b01907b714b7d939d7eed85d.png HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:47:51 GMT
content-type: image/png
content-length: 43157
last-modified: Sun, 27 Sep 2020 15:59:04 GMT
etag: "5f70b6c8-a895"
expires: Sun, 27 Nov 2022 09:10:38 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: HIT
age: 20233
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77036bf13f599932-ARN
X-Firefox-Spdy: h2
interstitial-07.com/?l=fGSQjuZz7Swescy&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Fnanouwho.com%2F12%3Frnd%3D2459729337%26z%3D4825329%26b%3D15868710%26c%3D6361426%26var%3D%26d%3Dhttps%253A%252F%252Fsingelstodate.com%252Fbase.php%253Fc%253D1246%2526key%253Dbd5c0d9cab8b310c30203a37caeb039f%2526zoneid%253D%257Bzoneid%257D%2526cost%253D%257Bcost%257D%2526subid%253D%2524%257BSUBID%257D%2526banner%253D%257Bbannerid%257D%26cln%3D1%26btp%3D7%26rb%3DhsmPUojBq5y2hyqzbokp2umS9iLk60o6OzKFOOezwTyz3Ka01CJvjzWr68k2ErnyeK7fs4UDwbmZlT4tFFG-kgPsrIckouCEqeR-bvqLxVtA-tarEw06QBOwma4W7TgTxrUo-T415u1rPWyA2VxqX5PS7MOCcIEazyIKzJll3eY6-Fn-_I5cYxJN5tlRURJZ38hN5mQgcL6ZOQW6kd25Hy6baZGIy9ayxU-w4Z229tnbeANskfTnnr5-nslXpjpqut5gjgFoAAbj4aKedG_FLZMMe_8YyjZusLBfggyjbSYWtkeYHW-5BqOpSZpIzfFLRKG4HP4NVtDyJ3LKzBC9X3AGnXT6ld-KjdNzxJdyd72ewwQpbsFOdf9TvpMgNtGWYSarmUGx3hQzQxekMsXUZT2ekES1b67nVgrXCnj-m95rfvLu5fWNuuQ2CGq7JjDngYj0wbY_Yz2pwhzJxSIsuUhndcPQHabUY1zRaGLTIBPMFDy1vsXH8QGnxoWU6XBdUVp_xKpvyeZmRe5cWcZluOBTtpaOrgwJ4M1ZRvOl-dOcaLz1SkKiwUydFMI2tMrGzUX3-JS-6Wnoop8nkaDTsVRdxjzS_kYYponFjOplVT9ngozJOGnuN1mHZeuKZugp-a2NZvc3sFz-6k8eQk5E8w%3D%3D%26bag%3D6gL6ovyohk0MtEc6YjTuRA%3D%3D%26ruid%3Db4850326-4ebe-460f-9e4b-b59a6a5726fa%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D1%26gp%3D-1%26bp%3D-1%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fwww.9xmovies.pro%252F%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1268%26wiw%3D1280%26wih%3D939%26wfc%3D9%26sah%3D1002%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0
200 OK 3.1 kB URL HTTP/2 interstitial-07.com/?l=fGSQjuZz7Swescy&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Fnanouwho.com%2F12%3Frnd%3D2459729337%26z%3D4825329%26b%3D15868710%26c%3D6361426%26var%3D%26d%3Dhttps%253A%252F%252Fsingelstodate.com%252Fbase.php%253Fc%253D1246%2526key%253Dbd5c0d9cab8b310c30203a37caeb039f%2526zoneid%253D%257Bzoneid%257D%2526cost%253D%257Bcost%257D%2526subid%253D%2524%257BSUBID%257D%2526banner%253D%257Bbannerid%257D%26cln%3D1%26btp%3D7%26rb%3DhsmPUojBq5y2hyqzbokp2umS9iLk60o6OzKFOOezwTyz3Ka01CJvjzWr68k2ErnyeK7fs4UDwbmZlT4tFFG-kgPsrIckouCEqeR-bvqLxVtA-tarEw06QBOwma4W7TgTxrUo-T415u1rPWyA2VxqX5PS7MOCcIEazyIKzJll3eY6-Fn-_I5cYxJN5tlRURJZ38hN5mQgcL6ZOQW6kd25Hy6baZGIy9ayxU-w4Z229tnbeANskfTnnr5-nslXpjpqut5gjgFoAAbj4aKedG_FLZMMe_8YyjZusLBfggyjbSYWtkeYHW-5BqOpSZpIzfFLRKG4HP4NVtDyJ3LKzBC9X3AGnXT6ld-KjdNzxJdyd72ewwQpbsFOdf9TvpMgNtGWYSarmUGx3hQzQxekMsXUZT2ekES1b67nVgrXCnj-m95rfvLu5fWNuuQ2CGq7JjDngYj0wbY_Yz2pwhzJxSIsuUhndcPQHabUY1zRaGLTIBPMFDy1vsXH8QGnxoWU6XBdUVp_xKpvyeZmRe5cWcZluOBTtpaOrgwJ4M1ZRvOl-dOcaLz1SkKiwUydFMI2tMrGzUX3-JS-6Wnoop8nkaDTsVRdxjzS_kYYponFjOplVT9ngozJOGnuN1mHZeuKZugp-a2NZvc3sFz-6k8eQk5E8w%3D%3D%26bag%3D6gL6ovyohk0MtEc6YjTuRA%3D%3D%26ruid%3Db4850326-4ebe-460f-9e4b-b59a6a5726fa%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D1%26gp%3D-1%26bp%3D-1%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fwww.9xmovies.pro%252F%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1268%26wiw%3D1280%26wih%3D939%26wfc%3D9%26sah%3D1002%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1483)
Hash 223f87adf6a54abc68353d669dbfab57
5b3e27d7a0112506dc0c6d3765a633e391ef9d9d
511a6c59ce30f969dc65f556b3aa5cc1feab767d386fc8e4f1366b4fddb70b50
GET /?l=fGSQjuZz7Swescy&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Fnanouwho.com%2F12%3Frnd%3D2459729337%26z%3D4825329%26b%3D15868710%26c%3D6361426%26var%3D%26d%3Dhttps%253A%252F%252Fsingelstodate.com%252Fbase.php%253Fc%253D1246%2526key%253Dbd5c0d9cab8b310c30203a37caeb039f%2526zoneid%253D%257Bzoneid%257D%2526cost%253D%257Bcost%257D%2526subid%253D%2524%257BSUBID%257D%2526banner%253D%257Bbannerid%257D%26cln%3D1%26btp%3D7%26rb%3DhsmPUojBq5y2hyqzbokp2umS9iLk60o6OzKFOOezwTyz3Ka01CJvjzWr68k2ErnyeK7fs4UDwbmZlT4tFFG-kgPsrIckouCEqeR-bvqLxVtA-tarEw06QBOwma4W7TgTxrUo-T415u1rPWyA2VxqX5PS7MOCcIEazyIKzJll3eY6-Fn-_I5cYxJN5tlRURJZ38hN5mQgcL6ZOQW6kd25Hy6baZGIy9ayxU-w4Z229tnbeANskfTnnr5-nslXpjpqut5gjgFoAAbj4aKedG_FLZMMe_8YyjZusLBfggyjbSYWtkeYHW-5BqOpSZpIzfFLRKG4HP4NVtDyJ3LKzBC9X3AGnXT6ld-KjdNzxJdyd72ewwQpbsFOdf9TvpMgNtGWYSarmUGx3hQzQxekMsXUZT2ekES1b67nVgrXCnj-m95rfvLu5fWNuuQ2CGq7JjDngYj0wbY_Yz2pwhzJxSIsuUhndcPQHabUY1zRaGLTIBPMFDy1vsXH8QGnxoWU6XBdUVp_xKpvyeZmRe5cWcZluOBTtpaOrgwJ4M1ZRvOl-dOcaLz1SkKiwUydFMI2tMrGzUX3-JS-6Wnoop8nkaDTsVRdxjzS_kYYponFjOplVT9ngozJOGnuN1mHZeuKZugp-a2NZvc3sFz-6k8eQk5E8w%3D%3D%26bag%3D6gL6ovyohk0MtEc6YjTuRA%3D%3D%26ruid%3Db4850326-4ebe-460f-9e4b-b59a6a5726fa%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D1%26gp%3D-1%26bp%3D-1%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fwww.9xmovies.pro%252F%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1268%26wiw%3D1280%26wih%3D939%26wfc%3D9%26sah%3D1002%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0 HTTP/1.1
Host: interstitial-07.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:51 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.4.25
set-cookie: reverse=sfUAC1qfkNd75jYR8SUnZ1D3BFapLvqWuLE0b1DAIrk; expires=Sat, 26-Nov-2022 15:47:51 GMT; Max-Age=3600; path=/
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
content-encoding: br
X-Firefox-Spdy: h2
interstitial-07.com/contents/s/dc/65/14/302c22848059853f86238c989f/0514928580037.png
200 OK 17 kB URL HTTP/2 interstitial-07.com/contents/s/dc/65/14/302c22848059853f86238c989f/0514928580037.png
IP
File type PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash dc6514302c22848059853f86238c989f
8c1532bfdeb6b4005bb89b9a33354bc215adc6c2
7a6a7196e0849db4fb22a8d97ec5a67e10e81c8b7210eca795530eb57df75219
GET /contents/s/dc/65/14/302c22848059853f86238c989f/0514928580037.png HTTP/1.1
Host: interstitial-07.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://interstitial-07.com/?l=vf4vHwnZrOjSXMf&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Fupgulpinon.com%2F12%3Frnd%3D2293250506%26z%3D4825384%26b%3D15748416%26c%3D6329529%26var%3D%26d%3Dhttps%253A%252F%252Fi.bybit.com%252FabgwmH3%26cln%3D1%26btp%3D7%26rb%3DyIgdo_PLopC0y2ZrR6oVdGsLQftr5va_m6pWs_dpTUosdXXF6U01AzNeaH-yIPJoe_R3aoEpLpLyoyZdYiL49cOukaDxz_IMffSk9qEsG0PNCnP2JdyVNfzkFagjlQ6tjCIGKNF7CqcRJZ_elC64YXjI3IGKFHJHGy1eh0x7UzA7qz-VZEoo8-qTvX_HVkWpxaEgcC0ifBBYg-iGBoJaqsZecCFz2UgbLMey2dh5c2sjtRR4plLCAmeSuQKt5GCb5lWzp8YkqUUmX5lzcoLOxYym7UnSwlNe0wOS1rsGzBeMBG3LabTc9dlluIj9gA7ZqmLvvVfZ7uGS0LhusGDI17aGqzBTXGhurPea5pUDoF_Q2YCACujpma-8lfi8yZIu0J5wfAnLacQq_hXezUTBmy_6LOmKuxl1l2-SGKo9z7EZvx3-yZdTsdCwtpqsEzKcnoa2YPTOhSwWIH1pYNvG8WogpHHObLW3dRM09A4WtbW8SGYBloQR78yAIYANPSTaLvopQKwuRFNN3vOkvNOQUMQAZ3hPact3Qn1OzxwPqBNhY7PtZKdSUHaL0eESy2Um0il2DQONl4AFdQVSdxRvLUl98e__ugtmSX1OZN8ZxoAvBDA45HVF-ecBMRVymCEBwPHNWEwVpEgqrpdi2Zas3TX4WaR_tPWgkrcynIDUb-mKYibfSjc_1qiomOHz6LkZ5KRjD7XMpenZIV1p%26bag%3D2Vtk9xF_Ft9oNvl2qEPeRQ%3D%3D%26ruid%3De889324d-6f8d-4f62-953a-d62eaec1429c%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D1%26gp%3D-1%26bp%3D-1%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fwww.9xmovies.pro%252F%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1268%26wiw%3D1280%26wih%3D939%26wfc%3D9%26sah%3D1002%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:51 GMT
content-type: image/png
content-length: 16562
last-modified: Fri, 18 Nov 2022 13:36:40 GMT
vary: Accept-Encoding
etag: "63778a68-40b2"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
accept-ranges: bytes
X-Firefox-Spdy: h2
offerimage.com/www/images/bb6ee966fa882a0b586332a80eedaeb5.png
200 OK 37 kB URL HTTP/2 offerimage.com/www/images/bb6ee966fa882a0b586332a80eedaeb5.png
IP
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash bb6ee966fa882a0b586332a80eedaeb5
556eebc491e99672f18da637f0e138d80add49cf
69fb6d2912ff792a8beb7f2cc5a8aece88ad5d42f823f5b67e17d689cadaf957
GET /www/images/bb6ee966fa882a0b586332a80eedaeb5.png HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:47:51 GMT
content-type: image/png
content-length: 36768
last-modified: Fri, 20 May 2022 13:33:01 GMT
etag: "6287988d-8fa0"
expires: Sun, 27 Nov 2022 11:11:37 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: HIT
age: 12974
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77036bf309329932-ARN
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 85c1cf9caf44bef6cb44388506ede3e4
5114a695768daef58137a2b0213bb3bd9eed5f5c
71ca43ce811d5a850dc7e1993fc7bd0af51082b46cb7af8dca23da8d58cf4621
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "71CA43CE811D5A850DC7E1993FC7BD0AF51082B46CB7AF8DCA23DA8D58CF4621"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12780
Expires: Sat, 26 Nov 2022 18:20:51 GMT
Date: Sat, 26 Nov 2022 14:47:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 85c1cf9caf44bef6cb44388506ede3e4
5114a695768daef58137a2b0213bb3bd9eed5f5c
71ca43ce811d5a850dc7e1993fc7bd0af51082b46cb7af8dca23da8d58cf4621
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "71CA43CE811D5A850DC7E1993FC7BD0AF51082B46CB7AF8DCA23DA8D58CF4621"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12780
Expires: Sat, 26 Nov 2022 18:20:51 GMT
Date: Sat, 26 Nov 2022 14:47:51 GMT
Connection: keep-alive
betotodilea.com/500/4825328?excludes=&oaid=w0ni774421py068433462h4l6eqcx916&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=10&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
200 OK 118 kB URL HTTP/2 betotodilea.com/500/4825328?excludes=&oaid=w0ni774421py068433462h4l6eqcx916&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=10&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
Size 118 kB (117738 bytes)
Hash a84a58c1ab1fac6ef2f1e95848a403e4
3f9524a407605768b0f1bdfb6b7f65a33cd1b79b
081bec1d9ef516f114904c91784654cb34d68491f8ebc852ee3b2bd4077d2363
Analyzer Verdict Alert quad9 Sinkholed
GET /500/4825328?excludes=&oaid=w0ni774421py068433462h4l6eqcx916&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=10&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://www.9xmovies.pro
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Cookie: OAID=9e2b2fe412994060b73487c19d3eb8c5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:51 GMT
content-type: application/javascript
x-trace-id: 7d7e32a12d5ced5f4b55e7fdc584dc6a
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
vary: Origin
access-control-allow-origin: https://www.9xmovies.pro
access-control-expose-headers: Link
access-control-allow-credentials: true
set-cookie: OAID=w0ni774421py068433462h4l6eqcx916; expires=Sun, 26 Nov 2023 14:47:51 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
interstitial-07.com/contents/s/d6/57/d0/b45c722c9203953e7fbb92fc33/01117258015882.jpeg
200 OK 20 kB URL HTTP/2 interstitial-07.com/contents/s/d6/57/d0/b45c722c9203953e7fbb92fc33/01117258015882.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3\012- data
Hash d657d0b45c722c9203953e7fbb92fc33
e1ff29e4b8f1ea03d163e6a3c8f4d381cae5a3e2
40785963d6afef460b6d58db44d00d3bbed11a81f88e64e6a1b91d317b220d40
GET /contents/s/d6/57/d0/b45c722c9203953e7fbb92fc33/01117258015882.jpeg HTTP/1.1
Host: interstitial-07.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://interstitial-07.com/?l=fGSQjuZz7Swescy&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Fnanouwho.com%2F12%3Frnd%3D2459729337%26z%3D4825329%26b%3D15868710%26c%3D6361426%26var%3D%26d%3Dhttps%253A%252F%252Fsingelstodate.com%252Fbase.php%253Fc%253D1246%2526key%253Dbd5c0d9cab8b310c30203a37caeb039f%2526zoneid%253D%257Bzoneid%257D%2526cost%253D%257Bcost%257D%2526subid%253D%2524%257BSUBID%257D%2526banner%253D%257Bbannerid%257D%26cln%3D1%26btp%3D7%26rb%3DhsmPUojBq5y2hyqzbokp2umS9iLk60o6OzKFOOezwTyz3Ka01CJvjzWr68k2ErnyeK7fs4UDwbmZlT4tFFG-kgPsrIckouCEqeR-bvqLxVtA-tarEw06QBOwma4W7TgTxrUo-T415u1rPWyA2VxqX5PS7MOCcIEazyIKzJll3eY6-Fn-_I5cYxJN5tlRURJZ38hN5mQgcL6ZOQW6kd25Hy6baZGIy9ayxU-w4Z229tnbeANskfTnnr5-nslXpjpqut5gjgFoAAbj4aKedG_FLZMMe_8YyjZusLBfggyjbSYWtkeYHW-5BqOpSZpIzfFLRKG4HP4NVtDyJ3LKzBC9X3AGnXT6ld-KjdNzxJdyd72ewwQpbsFOdf9TvpMgNtGWYSarmUGx3hQzQxekMsXUZT2ekES1b67nVgrXCnj-m95rfvLu5fWNuuQ2CGq7JjDngYj0wbY_Yz2pwhzJxSIsuUhndcPQHabUY1zRaGLTIBPMFDy1vsXH8QGnxoWU6XBdUVp_xKpvyeZmRe5cWcZluOBTtpaOrgwJ4M1ZRvOl-dOcaLz1SkKiwUydFMI2tMrGzUX3-JS-6Wnoop8nkaDTsVRdxjzS_kYYponFjOplVT9ngozJOGnuN1mHZeuKZugp-a2NZvc3sFz-6k8eQk5E8w%3D%3D%26bag%3D6gL6ovyohk0MtEc6YjTuRA%3D%3D%26ruid%3Db4850326-4ebe-460f-9e4b-b59a6a5726fa%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D1%26gp%3D-1%26bp%3D-1%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fwww.9xmovies.pro%252F%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1268%26wiw%3D1280%26wih%3D939%26wfc%3D9%26sah%3D1002%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:51 GMT
content-type: image/jpeg
content-length: 19879
last-modified: Wed, 05 Oct 2022 17:04:55 GMT
vary: Accept-Encoding
etag: "633db937-4da7"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
accept-ranges: bytes
X-Firefox-Spdy: h2
interstitial-07.com/contents/s/9b/2c/29/3f4695bb8f89f5bdc53f2634e2/01175794239723.jpeg
200 OK 63 kB URL HTTP/2 interstitial-07.com/contents/s/9b/2c/29/3f4695bb8f89f5bdc53f2634e2/01175794239723.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 492x328, components 3\012- data
Hash 9b2c293f4695bb8f89f5bdc53f2634e2
fda95c173965012fa72bd0386a0f1e4f0e5220fa
f7090a9b5e00f32721b1d83183b54e836e4237f6d407186327f7835caf3c265a
GET /contents/s/9b/2c/29/3f4695bb8f89f5bdc53f2634e2/01175794239723.jpeg HTTP/1.1
Host: interstitial-07.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://interstitial-07.com/?l=fGSQjuZz7Swescy&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Fnanouwho.com%2F12%3Frnd%3D2459729337%26z%3D4825329%26b%3D15868710%26c%3D6361426%26var%3D%26d%3Dhttps%253A%252F%252Fsingelstodate.com%252Fbase.php%253Fc%253D1246%2526key%253Dbd5c0d9cab8b310c30203a37caeb039f%2526zoneid%253D%257Bzoneid%257D%2526cost%253D%257Bcost%257D%2526subid%253D%2524%257BSUBID%257D%2526banner%253D%257Bbannerid%257D%26cln%3D1%26btp%3D7%26rb%3DhsmPUojBq5y2hyqzbokp2umS9iLk60o6OzKFOOezwTyz3Ka01CJvjzWr68k2ErnyeK7fs4UDwbmZlT4tFFG-kgPsrIckouCEqeR-bvqLxVtA-tarEw06QBOwma4W7TgTxrUo-T415u1rPWyA2VxqX5PS7MOCcIEazyIKzJll3eY6-Fn-_I5cYxJN5tlRURJZ38hN5mQgcL6ZOQW6kd25Hy6baZGIy9ayxU-w4Z229tnbeANskfTnnr5-nslXpjpqut5gjgFoAAbj4aKedG_FLZMMe_8YyjZusLBfggyjbSYWtkeYHW-5BqOpSZpIzfFLRKG4HP4NVtDyJ3LKzBC9X3AGnXT6ld-KjdNzxJdyd72ewwQpbsFOdf9TvpMgNtGWYSarmUGx3hQzQxekMsXUZT2ekES1b67nVgrXCnj-m95rfvLu5fWNuuQ2CGq7JjDngYj0wbY_Yz2pwhzJxSIsuUhndcPQHabUY1zRaGLTIBPMFDy1vsXH8QGnxoWU6XBdUVp_xKpvyeZmRe5cWcZluOBTtpaOrgwJ4M1ZRvOl-dOcaLz1SkKiwUydFMI2tMrGzUX3-JS-6Wnoop8nkaDTsVRdxjzS_kYYponFjOplVT9ngozJOGnuN1mHZeuKZugp-a2NZvc3sFz-6k8eQk5E8w%3D%3D%26bag%3D6gL6ovyohk0MtEc6YjTuRA%3D%3D%26ruid%3Db4850326-4ebe-460f-9e4b-b59a6a5726fa%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D1%26gp%3D-1%26bp%3D-1%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fwww.9xmovies.pro%252F%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1268%26wiw%3D1280%26wih%3D939%26wfc%3D9%26sah%3D1002%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:51 GMT
content-type: image/jpeg
content-length: 63121
last-modified: Wed, 05 Oct 2022 17:04:52 GMT
vary: Accept-Encoding
etag: "633db934-f691"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
accept-ranges: bytes
X-Firefox-Spdy: h2
unphionetor.com/fv.js?t=72747&cb=936280631
200 OK 2.2 kB URL HTTP/2 unphionetor.com/fv.js?t=72747&cb=936280631
IP
File type ASCII text, with very long lines (5213), with no line terminators
Hash 0254fb1dad74628b7ad0f97d304fac92
35f7af13a08eb87023ec7df4d3c35c21b2cde79d
47fb6ce428ca80ea69b772e4f66e4e5c622a4005db601746033d04511bd27536
Analyzer Verdict Alert quad9 Sinkholed
GET /fv.js?t=72747&cb=936280631 HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://interstitial-07.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:51 GMT
content-type: text/javascript; charset=utf8
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: e6bf2a748c8c3beed3b41996a3c96968
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
unphionetor.com/vctx?t=72747
204 No Content 0 B URL HTTP/2 unphionetor.com/vctx?t=72747
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /vctx?t=72747 HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://interstitial-07.com
Connection: keep-alive
Referer: https://interstitial-07.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 26 Nov 2022 14:47:51 GMT
access-control-allow-origin: https://interstitial-07.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 2551b05e2495fd405b8bdb83e2ca26f7
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
connect.facebook.net/en_US/sdk.js?hash=e92d1143762bef5dea0b670bdae70367
200 OK 88 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js?hash=e92d1143762bef5dea0b670bdae70367
IP
File type ASCII text, with very long lines (18530)
Hash b7e3765c124b5cbb4932bd07cc3065e1
9e7d4a004414093f804f5917e1e6a5577b241959
a9900a6df535b909b1aea66bed56a0fc7ef802f8e1c838eadb8a827fcd429579
GET /en_US/sdk.js?hash=e92d1143762bef5dea0b670bdae70367 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.9xmovies.pro
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: cb9eaa1420895e1792a4bfa098474053
etag: "5ac1f5416d1dc91b3af10fb721e43cfe"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Sun, 26 Nov 2023 12:17:40 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: t+N2XBJLXLtJMr0HzDBl4Q==
x-fb-debug: ddIlNsTOwwL5CQE1Y2M91JrN8xVZK2eRZMyZ4U9Brr6XgBjN2BLzm7G+rn786gBemS/3T/QdC9cVWuWxzb1qXw==
content-length: 88359
x-fb-trip-id: 1904183273
date: Sat, 26 Nov 2022 14:47:51 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
tractorfoolproofstandard.com/sbar.json?key=82fb5efd15fdce80f8c2e719a1865087
200 OK 3.6 kB URL HTTP/1.1 tractorfoolproofstandard.com/sbar.json?key=82fb5efd15fdce80f8c2e719a1865087
IP
File type JSON data\012- , ASCII text, with very long lines (5644), with no line terminators
Hash 95baf94c0cbdd06a7134fbebcbc95534
48136ab1a20854c1b19a946f9782c24d2ff48c73
e6ff7c0f258208dd37ad1aca95e37f29558208cec12e78cbc8e5b1289a380402
Analyzer Verdict Alert quad9 Sinkholed
GET /sbar.json?key=82fb5efd15fdce80f8c2e719a1865087 HTTP/1.1
Host: tractorfoolproofstandard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.9xmovies.pro
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 26 Nov 2022 14:47:51 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.9xmovies.pro
Access-Control-Allow-Origin: https://www.9xmovies.pro
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=16681438; expires=Sun, 27 Nov 2022 14:47:51 GMT; secure; SameSite=None
pdhtkv=true; expires=Sun, 27 Nov 2022 14:47:51 GMT; secure; SameSite=None
uncs=1; expires=Sun, 27 Nov 2022 14:47:51 GMT; secure; SameSite=None
pdhtkv29=true; expires=Sun, 27 Nov 2022 14:47:51 GMT; secure; SameSite=None
uncs29=1; expires=Sun, 27 Nov 2022 14:47:51 GMT; secure; SameSite=None
slec82fb5efd15fdce80f8c2e719a1865087=[3760946]; expires=Sat, 26 Nov 2022 14:47:56 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9b05b402e89ed073401863224f1ea086
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
upgulpinon.com/11?rnd=831635616&z=4825384&b=15748416&var=&rqtdbc=0&rcvdbc=0&btp=7&rb=yIgdo_PLopC0y2ZrR6oVdGsLQftr5va_m6pWs_dpTUosdXXF6U01AzNeaH-yIPJoe_R3aoEpLpLyoyZdYiL49cOukaDxz_IMffSk9qEsG0PNCnP2JdyVNfzkFagjlQ6tjCIGKNF7CqcRJZ_elC64YXjI3IGKFHJHGy1eh0x7UzA7qz-VZEoo8-qTvX_HVkWpxaEgcC0ifBBYg-iGBoJaqsZecCFz2UgbLMey2dh5c2sjtRR4plLCAmeSuQKt5GCb5lWzp8YkqUUmX5lzcoLOxYym7UnSwlNe0wOS1rsGzBeMBG3LabTc9dlluIj9gA7ZqmLvvVfZ7uGS0LhusGDI17aGqzBTXGhurPea5pUDoF_Q2YCACujpma-8lfi8yZIu0J5wfAnLacQq_hXezUTBmy_6LOmKuxl1l2-SGKo9z7EZvx3-yZdTsdCwtpqsEzKcnoa2YPTOhSwWIH1pYNvG8WogpHHObLW3dRM09A4WtbW8SGYBloQR78yAIYANPSTaLvopQKwuRFNN3vOkvNOQUMQAZ3hPact3Qn1OzxwPqBNhY7PtZKdSUHaL0eESy2Um0il2DQONl4AFdQVSdxRvLUl98e__ugtmSX1OZN8ZxoAvBDA45HVF-ecBMRVymCEBwPHNWEwVpEgqrpdi2Zas3TX4WaR_tPWgkrcynIDUb-mKYibfSjc_1qiomOHz6LkZ5KRjD7XMpenZIV1p&ruid=e889324d-6f8d-4f62-953a-d62eaec1429c&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=9&sah=1002&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1
200 OK 0 B URL HTTP/2 upgulpinon.com/11?rnd=831635616&z=4825384&b=15748416&var=&rqtdbc=0&rcvdbc=0&btp=7&rb=yIgdo_PLopC0y2ZrR6oVdGsLQftr5va_m6pWs_dpTUosdXXF6U01AzNeaH-yIPJoe_R3aoEpLpLyoyZdYiL49cOukaDxz_IMffSk9qEsG0PNCnP2JdyVNfzkFagjlQ6tjCIGKNF7CqcRJZ_elC64YXjI3IGKFHJHGy1eh0x7UzA7qz-VZEoo8-qTvX_HVkWpxaEgcC0ifBBYg-iGBoJaqsZecCFz2UgbLMey2dh5c2sjtRR4plLCAmeSuQKt5GCb5lWzp8YkqUUmX5lzcoLOxYym7UnSwlNe0wOS1rsGzBeMBG3LabTc9dlluIj9gA7ZqmLvvVfZ7uGS0LhusGDI17aGqzBTXGhurPea5pUDoF_Q2YCACujpma-8lfi8yZIu0J5wfAnLacQq_hXezUTBmy_6LOmKuxl1l2-SGKo9z7EZvx3-yZdTsdCwtpqsEzKcnoa2YPTOhSwWIH1pYNvG8WogpHHObLW3dRM09A4WtbW8SGYBloQR78yAIYANPSTaLvopQKwuRFNN3vOkvNOQUMQAZ3hPact3Qn1OzxwPqBNhY7PtZKdSUHaL0eESy2Um0il2DQONl4AFdQVSdxRvLUl98e__ugtmSX1OZN8ZxoAvBDA45HVF-ecBMRVymCEBwPHNWEwVpEgqrpdi2Zas3TX4WaR_tPWgkrcynIDUb-mKYibfSjc_1qiomOHz6LkZ5KRjD7XMpenZIV1p&ruid=e889324d-6f8d-4f62-953a-d62eaec1429c&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=9&sah=1002&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /11?rnd=831635616&z=4825384&b=15748416&var=&rqtdbc=0&rcvdbc=0&btp=7&rb=yIgdo_PLopC0y2ZrR6oVdGsLQftr5va_m6pWs_dpTUosdXXF6U01AzNeaH-yIPJoe_R3aoEpLpLyoyZdYiL49cOukaDxz_IMffSk9qEsG0PNCnP2JdyVNfzkFagjlQ6tjCIGKNF7CqcRJZ_elC64YXjI3IGKFHJHGy1eh0x7UzA7qz-VZEoo8-qTvX_HVkWpxaEgcC0ifBBYg-iGBoJaqsZecCFz2UgbLMey2dh5c2sjtRR4plLCAmeSuQKt5GCb5lWzp8YkqUUmX5lzcoLOxYym7UnSwlNe0wOS1rsGzBeMBG3LabTc9dlluIj9gA7ZqmLvvVfZ7uGS0LhusGDI17aGqzBTXGhurPea5pUDoF_Q2YCACujpma-8lfi8yZIu0J5wfAnLacQq_hXezUTBmy_6LOmKuxl1l2-SGKo9z7EZvx3-yZdTsdCwtpqsEzKcnoa2YPTOhSwWIH1pYNvG8WogpHHObLW3dRM09A4WtbW8SGYBloQR78yAIYANPSTaLvopQKwuRFNN3vOkvNOQUMQAZ3hPact3Qn1OzxwPqBNhY7PtZKdSUHaL0eESy2Um0il2DQONl4AFdQVSdxRvLUl98e__ugtmSX1OZN8ZxoAvBDA45HVF-ecBMRVymCEBwPHNWEwVpEgqrpdi2Zas3TX4WaR_tPWgkrcynIDUb-mKYibfSjc_1qiomOHz6LkZ5KRjD7XMpenZIV1p&ruid=e889324d-6f8d-4f62-953a-d62eaec1429c&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=9&sah=1002&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1 HTTP/1.1
Host: upgulpinon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.9xmovies.pro
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Cookie: scm=1; OAID=w0ni774421py068433462h4l6eqcx916; oaidts=1669474068
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:51 GMT
content-type: image/jpeg
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: https://www.9xmovies.pro
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
x-trace-id: 11c3c09002b4f93ec433c27e048c3233
access-control-expose-headers: X-Sc
set-cookie: OAID=w0ni774421py068433462h4l6eqcx916; expires=Sun, 26 Nov 2023 14:47:51 GMT; secure; SameSite=None
oaidts=1669474068; expires=Sun, 26 Nov 2023 14:47:51 GMT; secure; SameSite=None
oaidvc=1; expires=Sun, 26 Nov 2023 14:47:51 GMT; secure; SameSite=None
CNT=1_v1_QE3wAAEAAAB6SzgA; expires=Sat, 26 Nov 2022 15:47:51 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
unphionetor.com/fv.js?t=72747&cb=10806481
200 OK 6.1 kB URL HTTP/2 unphionetor.com/fv.js?t=72747&cb=10806481
IP
Hash 1bbfb0b6d0ad99bc359efa5335380c26
6c292f502fb87758722c1133bae8eb95a6852df5
6ea345ba8a03f2fc63461e3a5a819127fcc5fd19edb5ccee27fab1bc77902df4
Analyzer Verdict Alert quad9 Sinkholed
GET /fv.js?t=72747&cb=10806481 HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://interstitial-07.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:51 GMT
content-type: text/javascript; charset=utf8
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 8e98f0539fc13345a7bba02ee35d2caa
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
upgulpinon.com/15?rnd=1932359379&z=4825384&var=&rb=yIgdo_PLopC0y2ZrR6oVdGsLQftr5va_m6pWs_dpTUosdXXF6U01AzNeaH-yIPJoe_R3aoEpLpLyoyZdYiL49cOukaDxz_IMffSk9qEsG0PNCnP2JdyVNfzkFagjlQ6tjCIGKNF7CqcRJZ_elC64YXjI3IGKFHJHGy1eh0x7UzA7qz-VZEoo8-qTvX_HVkWpxaEgcC0ifBBYg-iGBoJaqsZecCFz2UgbLMey2dh5c2sjtRR4plLCAmeSuQKt5GCb5lWzp8YkqUUmX5lzcoLOxYym7UnSwlNe0wOS1rsGzBeMBG3LabTc9dlluIj9gA7ZqmLvvVfZ7uGS0LhusGDI17aGqzBTXGhurPea5pUDoF_Q2YCACujpma-8lfi8yZIu0J5wfAnLacQq_hXezUTBmy_6LOmKuxl1l2-SGKo9z7EZvx3-yZdTsdCwtpqsEzKcnoa2YPTOhSwWIH1pYNvG8WogpHHObLW3dRM09A4WtbW8SGYBloQR78yAIYANPSTaLvopQKwuRFNN3vOkvNOQUMQAZ3hPact3Qn1OzxwPqBNhY7PtZKdSUHaL0eESy2Um0il2DQONl4AFdQVSdxRvLUl98e__ugtmSX1OZN8ZxoAvBDA45HVF-ecBMRVymCEBwPHNWEwVpEgqrpdi2Zas3TX4WaR_tPWgkrcynIDUb-mKYibfSjc_1qiomOHz6LkZ5KRjD7XMpenZIV1p&ruid=e889324d-6f8d-4f62-953a-d62eaec1429c&uci=%7B%22path%22%3A%7B%22count%22%3A0%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A2.36%2C%22location%22%3A%22https%3A%2F%2Fwww.9xmovies.pro%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A0%2C%22wdov%22%3A0%2C%22wvr%22%3A1%2C%22wiv%22%3Atrue%2C%22isIONS%22%3Atrue%7D
204 No Content 0 B URL HTTP/2 upgulpinon.com/15?rnd=1932359379&z=4825384&var=&rb=yIgdo_PLopC0y2ZrR6oVdGsLQftr5va_m6pWs_dpTUosdXXF6U01AzNeaH-yIPJoe_R3aoEpLpLyoyZdYiL49cOukaDxz_IMffSk9qEsG0PNCnP2JdyVNfzkFagjlQ6tjCIGKNF7CqcRJZ_elC64YXjI3IGKFHJHGy1eh0x7UzA7qz-VZEoo8-qTvX_HVkWpxaEgcC0ifBBYg-iGBoJaqsZecCFz2UgbLMey2dh5c2sjtRR4plLCAmeSuQKt5GCb5lWzp8YkqUUmX5lzcoLOxYym7UnSwlNe0wOS1rsGzBeMBG3LabTc9dlluIj9gA7ZqmLvvVfZ7uGS0LhusGDI17aGqzBTXGhurPea5pUDoF_Q2YCACujpma-8lfi8yZIu0J5wfAnLacQq_hXezUTBmy_6LOmKuxl1l2-SGKo9z7EZvx3-yZdTsdCwtpqsEzKcnoa2YPTOhSwWIH1pYNvG8WogpHHObLW3dRM09A4WtbW8SGYBloQR78yAIYANPSTaLvopQKwuRFNN3vOkvNOQUMQAZ3hPact3Qn1OzxwPqBNhY7PtZKdSUHaL0eESy2Um0il2DQONl4AFdQVSdxRvLUl98e__ugtmSX1OZN8ZxoAvBDA45HVF-ecBMRVymCEBwPHNWEwVpEgqrpdi2Zas3TX4WaR_tPWgkrcynIDUb-mKYibfSjc_1qiomOHz6LkZ5KRjD7XMpenZIV1p&ruid=e889324d-6f8d-4f62-953a-d62eaec1429c&uci=%7B%22path%22%3A%7B%22count%22%3A0%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A2.36%2C%22location%22%3A%22https%3A%2F%2Fwww.9xmovies.pro%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A0%2C%22wdov%22%3A0%2C%22wvr%22%3A1%2C%22wiv%22%3Atrue%2C%22isIONS%22%3Atrue%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /15?rnd=1932359379&z=4825384&var=&rb=yIgdo_PLopC0y2ZrR6oVdGsLQftr5va_m6pWs_dpTUosdXXF6U01AzNeaH-yIPJoe_R3aoEpLpLyoyZdYiL49cOukaDxz_IMffSk9qEsG0PNCnP2JdyVNfzkFagjlQ6tjCIGKNF7CqcRJZ_elC64YXjI3IGKFHJHGy1eh0x7UzA7qz-VZEoo8-qTvX_HVkWpxaEgcC0ifBBYg-iGBoJaqsZecCFz2UgbLMey2dh5c2sjtRR4plLCAmeSuQKt5GCb5lWzp8YkqUUmX5lzcoLOxYym7UnSwlNe0wOS1rsGzBeMBG3LabTc9dlluIj9gA7ZqmLvvVfZ7uGS0LhusGDI17aGqzBTXGhurPea5pUDoF_Q2YCACujpma-8lfi8yZIu0J5wfAnLacQq_hXezUTBmy_6LOmKuxl1l2-SGKo9z7EZvx3-yZdTsdCwtpqsEzKcnoa2YPTOhSwWIH1pYNvG8WogpHHObLW3dRM09A4WtbW8SGYBloQR78yAIYANPSTaLvopQKwuRFNN3vOkvNOQUMQAZ3hPact3Qn1OzxwPqBNhY7PtZKdSUHaL0eESy2Um0il2DQONl4AFdQVSdxRvLUl98e__ugtmSX1OZN8ZxoAvBDA45HVF-ecBMRVymCEBwPHNWEwVpEgqrpdi2Zas3TX4WaR_tPWgkrcynIDUb-mKYibfSjc_1qiomOHz6LkZ5KRjD7XMpenZIV1p&ruid=e889324d-6f8d-4f62-953a-d62eaec1429c&uci=%7B%22path%22%3A%7B%22count%22%3A0%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A2.36%2C%22location%22%3A%22https%3A%2F%2Fwww.9xmovies.pro%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A0%2C%22wdov%22%3A0%2C%22wvr%22%3A1%2C%22wiv%22%3Atrue%2C%22isIONS%22%3Atrue%7D HTTP/1.1
Host: upgulpinon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.9xmovies.pro
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Cookie: scm=1; OAID=w0ni774421py068433462h4l6eqcx916; oaidts=1669474068; oaidvc=1; CNT=1_v1_QE3wAAEAAAB6SzgA
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 26 Nov 2022 14:47:51 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://www.9xmovies.pro
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
x-trace-id: 86a0ed81d6a3aefe39643f4f28b14d23
access-control-expose-headers: X-Sc
set-cookie: OAID=w0ni774421py068433462h4l6eqcx916; expires=Sun, 26 Nov 2023 14:47:51 GMT; secure; SameSite=None
oaidts=1669474068; expires=Sun, 26 Nov 2023 14:47:51 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
tobaltoyon.com/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: tobaltoyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.9xmovies.pro/
Content-Type: application/json
Origin: https://www.9xmovies.pro
Content-Length: 733
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:51 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 850c423954cc31cac9c8bdc6454b442b
access-control-allow-origin: https://www.9xmovies.pro
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
unphionetor.com/vbl?t=72747&bid=undefined&aid=undefined
204 No Content 0 B URL HTTP/2 unphionetor.com/vbl?t=72747&bid=undefined&aid=undefined
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
POST /vbl?t=72747&bid=undefined&aid=undefined HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://interstitial-07.com
Connection: keep-alive
Referer: https://interstitial-07.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 26 Nov 2022 14:47:51 GMT
access-control-allow-origin: https://interstitial-07.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 787c69b08fefe6cab43d7a2f2f4c68cf
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
unphionetor.com/vbl?t=72747&bid=undefined&aid=undefined
204 No Content 0 B URL HTTP/2 unphionetor.com/vbl?t=72747&bid=undefined&aid=undefined
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
POST /vbl?t=72747&bid=undefined&aid=undefined HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://interstitial-07.com
Connection: keep-alive
Referer: https://interstitial-07.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 26 Nov 2022 14:47:51 GMT
access-control-allow-origin: https://interstitial-07.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 540a305978e73863abe5a02ac41f5cd3
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
tractorfoolproofstandard.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSuXuNFTy6C7EHpmwoy6Z6Z3plxD8G4RoLZJO6uBLxVV1VPylR3NVX9M8kp7IJEUBj14sFD55tkgxrEvXhblMleJCBkVCQH49mbsLgHQZGZDAQfVL336nuH7%2Ftevb%2BbnxEPOT1dvaG3pFJ0Nqh57ktrMuG6tO7ybdf3at41d00mV5vX3N74MsWrvhfUvJfdNwXb0LN1z%2Fc83%2FPdBWlEpHuzExQyPez4tY5Xa9ZrftBEz%2Fy%2Ft7kDSx3w4oxchuSjJ9d%2FuA%2FJhkjib64Lu5Hp9JU34lzRTBsU%2FOCdZCPRZYL4ooyMgyg5mE5D2xEhn12CTg6mCqCLvbEChHJEnF99hMnBlCbCYv%2BcaaggEoT8aZTFEEINIekQTN%2BF5CcEYBzLK0jie8valHTzHKVjdERmHj%2BCLEdk5rdnkcRfzyvZc29plWdSJxa9qILsDSG7Q6T5EbItB7I8AsvuQPIfyezjJSTx3opVGpJXE%2FVSDiGjIZTog1oH%2BfhIB3nkIE8dxPzUpUEn8rxWFEaNRrvJGGs0GAvaV3nAG8125CFnY3p9ZGkfTPXBzDZSs40N%2BclJcHlEyM4vMPn3sOsVLHdgsxFx3t5GwSuUgqC0BCUlKCVBmRGURbXPla3b6h5XNg%2F9aa5Pc6Ma6Ky7S%2Fd11hUJ2U3PyDMTf%2F794Awb4tRt16MwEBH3g4gz0faiNquLlt%2Bhfvtq4LVbsLKCtJcmkrfkiFx5cIh0vLTPFUJ6BKuOwKQDmj8PWg5adQ90fdBse9hKDju9WBdS2FpqNLiukGYzyDadXXVGrkx4dFgdgh3P%2Ff1H7%2Bd%2FHn0LZiqkpsJ78iFBV%2B0MbuqS7N3UpSX3V9JMxnKLjnd4K6OZmPnyLbFZasMXr9v%2BF6%2BxMTAuD28Lmy3RhMuka8lX85JzYRa0YYI8WLRrIlzN7fp8bpI8XVp9fWExTo2wVupkCCpPWp%2BCyRF56sb25He%2B8OFDSDOEySvE%2BTGZBqQ%2BAku3YdPjub8%2BWvn9Gn8XVhMYdTETpg7KvBqYenjxqCSBEhc9DStYcWFBKI6%2F%2B%2FMc27U76BoHNLuLJK5QmAqFqkBVHzZ%2FYpCl5njup8YkECpnECrj7IXKqI%2FPrbXy1BVB5EXCq4sw6oRRi3q8EzU7Ie34ohUG1EdmR%2BzOi8%2F9BwAA%2F%2F8BAAD%2F%2FyaHiYd1BAAA
200 OK 7 B URL HTTP/1.1 tractorfoolproofstandard.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSuXuNFTy6C7EHpmwoy6Z6Z3plxD8G4RoLZJO6uBLxVV1VPylR3NVX9M8kp7IJEUBj14sFD55tkgxrEvXhblMleJCBkVCQH49mbsLgHQZGZDAQfVL336nuH7%2Ftevb%2BbnxEPOT1dvaG3pFJ0Nqh57ktrMuG6tO7ybdf3at41d00mV5vX3N74MsWrvhfUvJfdNwXb0LN1z%2Fc83%2FPdBWlEpHuzExQyPez4tY5Xa9ZrftBEz%2Fy%2Ft7kDSx3w4oxchuSjJ9d%2FuA%2FJhkjib64Lu5Hp9JU34lzRTBsU%2FOCdZCPRZYL4ooyMgyg5mE5D2xEhn12CTg6mCqCLvbEChHJEnF99hMnBlCbCYv%2BcaaggEoT8aZTFEEINIekQTN%2BF5CcEYBzLK0jie8valHTzHKVjdERmHj%2BCLEdk5rdnkcRfzyvZc29plWdSJxa9qILsDSG7Q6T5EbItB7I8AsvuQPIfyezjJSTx3opVGpJXE%2FVSDiGjIZTog1oH%2BfhIB3nkIE8dxPzUpUEn8rxWFEaNRrvJGGs0GAvaV3nAG8125CFnY3p9ZGkfTPXBzDZSs40N%2BclJcHlEyM4vMPn3sOsVLHdgsxFx3t5GwSuUgqC0BCUlKCVBmRGURbXPla3b6h5XNg%2F9aa5Pc6Ma6Ky7S%2Fd11hUJ2U3PyDMTf%2F794Awb4tRt16MwEBH3g4gz0faiNquLlt%2Bhfvtq4LVbsLKCtJcmkrfkiFx5cIh0vLTPFUJ6BKuOwKQDmj8PWg5adQ90fdBse9hKDju9WBdS2FpqNLiukGYzyDadXXVGrkx4dFgdgh3P%2Ff1H7%2Bd%2FHn0LZiqkpsJ78iFBV%2B0MbuqS7N3UpSX3V9JMxnKLjnd4K6OZmPnyLbFZasMXr9v%2BF6%2BxMTAuD28Lmy3RhMuka8lX85JzYRa0YYI8WLRrIlzN7fp8bpI8XVp9fWExTo2wVupkCCpPWp%2BCyRF56sb25He%2B8OFDSDOEySvE%2BTGZBqQ%2BAku3YdPjub8%2BWvn9Gn8XVhMYdTETpg7KvBqYenjxqCSBEhc9DStYcWFBKI6%2F%2B%2FMc27U76BoHNLuLJK5QmAqFqkBVHzZ%2FYpCl5njup8YkECpnECrj7IXKqI%2FPrbXy1BVB5EXCq4sw6oRRi3q8EzU7Ie34ohUG1EdmR%2BzOi8%2F9BwAA%2F%2F8BAAD%2F%2FyaHiYd1BAAA
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSuXuNFTy6C7EHpmwoy6Z6Z3plxD8G4RoLZJO6uBLxVV1VPylR3NVX9M8kp7IJEUBj14sFD55tkgxrEvXhblMleJCBkVCQH49mbsLgHQZGZDAQfVL336nuH7%2Ftevb%2BbnxEPOT1dvaG3pFJ0Nqh57ktrMuG6tO7ybdf3at41d00mV5vX3N74MsWrvhfUvJfdNwXb0LN1z%2Fc83%2FPdBWlEpHuzExQyPez4tY5Xa9ZrftBEz%2Fy%2Ft7kDSx3w4oxchuSjJ9d%2FuA%2FJhkjib64Lu5Hp9JU34lzRTBsU%2FOCdZCPRZYL4ooyMgyg5mE5D2xEhn12CTg6mCqCLvbEChHJEnF99hMnBlCbCYv%2BcaaggEoT8aZTFEEINIekQTN%2BF5CcEYBzLK0jie8valHTzHKVjdERmHj%2BCLEdk5rdnkcRfzyvZc29plWdSJxa9qILsDSG7Q6T5EbItB7I8AsvuQPIfyezjJSTx3opVGpJXE%2FVSDiGjIZTog1oH%2BfhIB3nkIE8dxPzUpUEn8rxWFEaNRrvJGGs0GAvaV3nAG8125CFnY3p9ZGkfTPXBzDZSs40N%2BclJcHlEyM4vMPn3sOsVLHdgsxFx3t5GwSuUgqC0BCUlKCVBmRGURbXPla3b6h5XNg%2F9aa5Pc6Ma6Ky7S%2Fd11hUJ2U3PyDMTf%2F794Awb4tRt16MwEBH3g4gz0faiNquLlt%2Bhfvtq4LVbsLKCtJcmkrfkiFx5cIh0vLTPFUJ6BKuOwKQDmj8PWg5adQ90fdBse9hKDju9WBdS2FpqNLiukGYzyDadXXVGrkx4dFgdgh3P%2Ff1H7%2Bd%2FHn0LZiqkpsJ78iFBV%2B0MbuqS7N3UpSX3V9JMxnKLjnd4K6OZmPnyLbFZasMXr9v%2BF6%2BxMTAuD28Lmy3RhMuka8lX85JzYRa0YYI8WLRrIlzN7fp8bpI8XVp9fWExTo2wVupkCCpPWp%2BCyRF56sb25He%2B8OFDSDOEySvE%2BTGZBqQ%2BAku3YdPjub8%2BWvn9Gn8XVhMYdTETpg7KvBqYenjxqCSBEhc9DStYcWFBKI6%2F%2B%2FMc27U76BoHNLuLJK5QmAqFqkBVHzZ%2FYpCl5njup8YkECpnECrj7IXKqI%2FPrbXy1BVB5EXCq4sw6oRRi3q8EzU7Ie34ohUG1EdmR%2BzOi8%2F9BwAA%2F%2F8BAAD%2F%2FyaHiYd1BAAA HTTP/1.1
Host: tractorfoolproofstandard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Cookie: u_pl=16681438; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec82fb5efd15fdce80f8c2e719a1865087=[3760946]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 26 Nov 2022 14:47:52 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 892f5c31834f02900a713b861af8b3e4
Strict-Transport-Security: max-age=0; includeSubdomains
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f3a3efe248a599bcccf04881f3d686cb
10e5741399303e7c20f334d8dd72b4b8c968c0d4
cef064183db51cefadcca610b91c5ea86154ae2024029d60e59a152a7a3b1723
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CEF064183DB51CEFADCCA610B91C5EA86154AE2024029D60E59A152A7A3B1723"
Last-Modified: Sat, 26 Nov 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14296
Expires: Sat, 26 Nov 2022 18:46:08 GMT
Date: Sat, 26 Nov 2022 14:47:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c0285adfe1c03ece15941876c3655519
ad3012f2c06e7d5e0036026aac114da29db4e2a3
28d1729de2f16e8b2feec61b058f0953920c3d5713fc8f25af3ee9f6b6f79c3b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "28D1729DE2F16E8B2FEEC61B058F0953920C3D5713FC8F25AF3EE9F6B6F79C3B"
Last-Modified: Sat, 26 Nov 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16310
Expires: Sat, 26 Nov 2022 19:19:42 GMT
Date: Sat, 26 Nov 2022 14:47:52 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 666f0822fa3b2bd37642dc6f1f9b95ea
b082ce304fa32d1afd9eee2c00c4d751d444f730
ea0fd5b59bc464c03f64e107247d245f8b9e65b5ad6593400952e0f978ba5251
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "EA0FD5B59BC464C03F64E107247D245F8B9E65B5AD6593400952E0F978BA5251"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16316
Expires: Sat, 26 Nov 2022 19:19:48 GMT
Date: Sat, 26 Nov 2022 14:47:52 GMT
Connection: keep-alive
tractorfoolproofstandard.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Finterstitial%2Fsoftware%2FflashPlayer%2Fmac%2Fmulti%2F1%2Findex.html&l=3323&fd=482
200 OK 0 B URL HTTP/1.1 tractorfoolproofstandard.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Finterstitial%2Fsoftware%2FflashPlayer%2Fmac%2Fmulti%2F1%2Findex.html&l=3323&fd=482
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Finterstitial%2Fsoftware%2FflashPlayer%2Fmac%2Fmulti%2F1%2Findex.html&l=3323&fd=482 HTTP/1.1
Host: tractorfoolproofstandard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Cookie: u_pl=16681438; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec82fb5efd15fdce80f8c2e719a1865087=[3760946]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 26 Nov 2022 14:47:52 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
cdn.creative-bars1.com/sb/interstitial/software/flashPlayer/mac/multi/1/img/flash-logo.png
200 OK 9.4 kB URL HTTP/2 cdn.creative-bars1.com/sb/interstitial/software/flashPlayer/mac/multi/1/img/flash-logo.png
IP
File type PNG image data, 240 x 240, 8-bit colormap, non-interlaced\012- data
Hash 910542c04f8bf2f90ee33d17d538a006
18d5943e5d51539038f7988c34bccef2937c5545
5969cb3c5c4f573f5c05035ddf9748ee17d5c71df6fca4e484f65d30e2694e57
GET /sb/interstitial/software/flashPlayer/mac/multi/1/img/flash-logo.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:47:52 GMT
content-type: image/png
content-length: 9360
last-modified: Wed, 01 Sep 2021 12:22:39 GMT
etag: "612f708f-2490"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 953596
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hTLXfqFgzBGgY60oSzW5hpF6Umcnof%2F%2FUeHkog6N3TeI6F%2BV1Lad3WQGygcDRL9hZIb2sQrw4pBXoxWP34hoH%2B%2BrkgjMFu8f2FgFY6qXog8jqxGcmIYUFX8rq%2F0te214huZezSOyNqqq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77036bf98bff7327-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
unseenreport.com/pxf.gif?uuid=973d9a81-8edd-4e73-afc8-68275e408250&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=82fb5efd15fdce80f8c2e719a1865087&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=14
200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=973d9a81-8edd-4e73-afc8-68275e408250&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=82fb5efd15fdce80f8c2e719a1865087&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=14
IP
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=973d9a81-8edd-4e73-afc8-68275e408250&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=82fb5efd15fdce80f8c2e719a1865087&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=14 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sat, 26 Nov 2022 14:47:52 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e8e82cd2823753830cd8da3cb9f984e8
Strict-Transport-Security: max-age=0; includeSubdomains
e1.o.lencr.org/
200 OK 1.0 kB IP
ASN #20940 Akamai International B.V.
File type gzip compressed data, max compression\012- data
Hash 65ae9cd5d393ad9c8a8449233a929663
61281755528beef30a89c287c8f27397755546f4
667d9b93ef014587235187e283ce9bb118f8342da705b35c597a660aaf1f8fc2
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "EA0FD5B59BC464C03F64E107247D245F8B9E65B5AD6593400952E0F978BA5251"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16316
Expires: Sat, 26 Nov 2022 19:19:48 GMT
Date: Sat, 26 Nov 2022 14:47:52 GMT
Connection: keep-alive
tractorfoolproofstandard.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Finterstitial%2Fsoftware%2FflashPlayer%2Fmac%2Fmulti%2F1%2Fcss%2Fanimate.css&l=79249&fd=378
200 OK 0 B URL HTTP/1.1 tractorfoolproofstandard.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Finterstitial%2Fsoftware%2FflashPlayer%2Fmac%2Fmulti%2F1%2Fcss%2Fanimate.css&l=79249&fd=378
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Finterstitial%2Fsoftware%2FflashPlayer%2Fmac%2Fmulti%2F1%2Fcss%2Fanimate.css&l=79249&fd=378 HTTP/1.1
Host: tractorfoolproofstandard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Cookie: u_pl=16681438; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec82fb5efd15fdce80f8c2e719a1865087=[3760946]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 26 Nov 2022 14:47:52 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
tractorfoolproofstandard.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Finterstitial%2Fsoftware%2FflashPlayer%2Fmac%2Fmulti%2F1%2Fcss%2Fstyle.css&l=4522&fd=377
200 OK 0 B URL HTTP/1.1 tractorfoolproofstandard.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Finterstitial%2Fsoftware%2FflashPlayer%2Fmac%2Fmulti%2F1%2Fcss%2Fstyle.css&l=4522&fd=377
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Finterstitial%2Fsoftware%2FflashPlayer%2Fmac%2Fmulti%2F1%2Fcss%2Fstyle.css&l=4522&fd=377 HTTP/1.1
Host: tractorfoolproofstandard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Cookie: u_pl=16681438; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec82fb5efd15fdce80f8c2e719a1865087=[3760946]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 26 Nov 2022 14:47:52 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
tractorfoolproofstandard.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Finterstitial%2Fsoftware%2FflashPlayer%2Fmac%2Fmulti%2F1%2Fjs%2Fscript.js&l=23003&fd=428
200 OK 0 B URL HTTP/1.1 tractorfoolproofstandard.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Finterstitial%2Fsoftware%2FflashPlayer%2Fmac%2Fmulti%2F1%2Fjs%2Fscript.js&l=23003&fd=428
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Finterstitial%2Fsoftware%2FflashPlayer%2Fmac%2Fmulti%2F1%2Fjs%2Fscript.js&l=23003&fd=428 HTTP/1.1
Host: tractorfoolproofstandard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Cookie: u_pl=16681438; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec82fb5efd15fdce80f8c2e719a1865087=[3760946]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 26 Nov 2022 14:47:53 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
tractorfoolproofstandard.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSuXuNFTy6C7EGZmwoy6Z6Z3ulxD8G4RoLZJO6uBLxVV1VPylR3NVX9M8kp7IJEUBj14sFD55tkgxrEvXhblMleJCBkVCQH49mbsLgHQZGZDAQfVL336nuH7%2Ftevb%2BbnxEXOT1dvaG3pFJ01q%2B7tZfWZMJ1aWvLt2ueW3ev1dZkcrV1rdYbX6Z41XP9uvty7U3BNvRsw%2FVc13O92oI0ItK92QkKmR52vHrHrbcadc9voWf%2B39vcgaUOeHFGLkPy0ZPrP9yHZEMk8TfXhd3IdPrKG3GuaKYNCn7wTrKR6DJBfFFGxkGUHEynoe2IkM8uQScHUwXQxd5YAUI5Is6vHsLkYEoTYbF%2FzjRUEAlC%2FjTKYgihhpB0CKbvQvITAjCO5RUk8b1lbUq6eY7SMToiM48fQZYjMvPbs0jir%2BeV7NVuaZVnUicWvaiC7A0hu0Ok%2BRGyLQeyPALL7kDyH8ns4yUk8d6KVRqSVxP1Ug4hoyGU6INaB%2Fn4SAd55CBPHcT8tEb9TuS67SiMms2gxRhrNhnzg6vc581WELnI2ZheH1naB1N9MLON1GxjQ35y4l8eEbLzC0z%2BPex6Bcsd2GxEnLe3UfAKpSAoLUFJCUpJUGYEZVHtc2UbtrrHlc1Db5ob09ysBjrr7tJ9nXVFQnbTM%2FLMxJ9%2FPzjDhjitBY0o9EXEPT%2FiTARuFLCGaHsd6gVXfTdow8oK0l6aSN6SI3LlwSHS8dI%2BVwjpEaw6ApMOaP48aDloN1zQ9UErcLGVHHZ6sS6ksPXUaHBdIc1mkG06u%2BqMXJnw6LAGBDue%2B%2FuP3s%2F%2FPPoWzFRITYX35EOCrtoZ3NQl2bupS0vur6SZjOUWHe%2FwVkYzMfPlW2Kz1IYvXrf9L15jY2BcHt4WNluiCZdJ15Kv5iXnwixowwR5sGjXRLia2%2FX53CR5urT6%2BsJinBphrdTJEFSetD8FkyPy1I3tye984cOHkGYIk1eI82MyDUh9BJZuw6bHc399tPL7Nf4urCYw6mImTB2UeTUwjfDiUUkCJS56Glaw4sKCUBx%2F9%2Bc5tmt30DUOaHYXSVyhMBUKVYGqPmz%2BxCBLzfHcT81JIFTOIFTG2QuVUR%2BfW2vlac33WiIIgzbjPBSMe%2B1GM2i6boPzVrsjvA4yO2J3XnzuPwAAAP%2F%2FAQAA%2F%2F8yjwdhdQQAAA%3D%3D
200 OK 7 B URL HTTP/1.1 tractorfoolproofstandard.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSuXuNFTy6C7EGZmwoy6Z6Z3ulxD8G4RoLZJO6uBLxVV1VPylR3NVX9M8kp7IJEUBj14sFD55tkgxrEvXhblMleJCBkVCQH49mbsLgHQZGZDAQfVL336nuH7%2Ftevb%2BbnxEXOT1dvaG3pFJ01q%2B7tZfWZMJ1aWvLt2ueW3ev1dZkcrV1rdYbX6Z41XP9uvty7U3BNvRsw%2FVc13O92oI0ItK92QkKmR52vHrHrbcadc9voWf%2B39vcgaUOeHFGLkPy0ZPrP9yHZEMk8TfXhd3IdPrKG3GuaKYNCn7wTrKR6DJBfFFGxkGUHEynoe2IkM8uQScHUwXQxd5YAUI5Is6vHsLkYEoTYbF%2FzjRUEAlC%2FjTKYgihhpB0CKbvQvITAjCO5RUk8b1lbUq6eY7SMToiM48fQZYjMvPbs0jir%2BeV7NVuaZVnUicWvaiC7A0hu0Ok%2BRGyLQeyPALL7kDyH8ns4yUk8d6KVRqSVxP1Ug4hoyGU6INaB%2Fn4SAd55CBPHcT8tEb9TuS67SiMms2gxRhrNhnzg6vc581WELnI2ZheH1naB1N9MLON1GxjQ35y4l8eEbLzC0z%2BPex6Bcsd2GxEnLe3UfAKpSAoLUFJCUpJUGYEZVHtc2UbtrrHlc1Db5ob09ysBjrr7tJ9nXVFQnbTM%2FLMxJ9%2FPzjDhjitBY0o9EXEPT%2FiTARuFLCGaHsd6gVXfTdow8oK0l6aSN6SI3LlwSHS8dI%2BVwjpEaw6ApMOaP48aDloN1zQ9UErcLGVHHZ6sS6ksPXUaHBdIc1mkG06u%2BqMXJnw6LAGBDue%2B%2FuP3s%2F%2FPPoWzFRITYX35EOCrtoZ3NQl2bupS0vur6SZjOUWHe%2FwVkYzMfPlW2Kz1IYvXrf9L15jY2BcHt4WNluiCZdJ15Kv5iXnwixowwR5sGjXRLia2%2FX53CR5urT6%2BsJinBphrdTJEFSetD8FkyPy1I3tye984cOHkGYIk1eI82MyDUh9BJZuw6bHc399tPL7Nf4urCYw6mImTB2UeTUwjfDiUUkCJS56Glaw4sKCUBx%2F9%2Bc5tmt30DUOaHYXSVyhMBUKVYGqPmz%2BxCBLzfHcT81JIFTOIFTG2QuVUR%2BfW2vlac33WiIIgzbjPBSMe%2B1GM2i6boPzVrsjvA4yO2J3XnzuPwAAAP%2F%2FAQAA%2F%2F8yjwdhdQQAAA%3D%3D
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSuXuNFTy6C7EGZmwoy6Z6Z3ulxD8G4RoLZJO6uBLxVV1VPylR3NVX9M8kp7IJEUBj14sFD55tkgxrEvXhblMleJCBkVCQH49mbsLgHQZGZDAQfVL336nuH7%2Ftevb%2BbnxEXOT1dvaG3pFJ01q%2B7tZfWZMJ1aWvLt2ueW3ev1dZkcrV1rdYbX6Z41XP9uvty7U3BNvRsw%2FVc13O92oI0ItK92QkKmR52vHrHrbcadc9voWf%2B39vcgaUOeHFGLkPy0ZPrP9yHZEMk8TfXhd3IdPrKG3GuaKYNCn7wTrKR6DJBfFFGxkGUHEynoe2IkM8uQScHUwXQxd5YAUI5Is6vHsLkYEoTYbF%2FzjRUEAlC%2FjTKYgihhpB0CKbvQvITAjCO5RUk8b1lbUq6eY7SMToiM48fQZYjMvPbs0jir%2BeV7NVuaZVnUicWvaiC7A0hu0Ok%2BRGyLQeyPALL7kDyH8ns4yUk8d6KVRqSVxP1Ug4hoyGU6INaB%2Fn4SAd55CBPHcT8tEb9TuS67SiMms2gxRhrNhnzg6vc581WELnI2ZheH1naB1N9MLON1GxjQ35y4l8eEbLzC0z%2BPex6Bcsd2GxEnLe3UfAKpSAoLUFJCUpJUGYEZVHtc2UbtrrHlc1Db5ob09ysBjrr7tJ9nXVFQnbTM%2FLMxJ9%2FPzjDhjitBY0o9EXEPT%2FiTARuFLCGaHsd6gVXfTdow8oK0l6aSN6SI3LlwSHS8dI%2BVwjpEaw6ApMOaP48aDloN1zQ9UErcLGVHHZ6sS6ksPXUaHBdIc1mkG06u%2BqMXJnw6LAGBDue%2B%2FuP3s%2F%2FPPoWzFRITYX35EOCrtoZ3NQl2bupS0vur6SZjOUWHe%2FwVkYzMfPlW2Kz1IYvXrf9L15jY2BcHt4WNluiCZdJ15Kv5iXnwixowwR5sGjXRLia2%2FX53CR5urT6%2BsJinBphrdTJEFSetD8FkyPy1I3tye984cOHkGYIk1eI82MyDUh9BJZuw6bHc399tPL7Nf4urCYw6mImTB2UeTUwjfDiUUkCJS56Glaw4sKCUBx%2F9%2Bc5tmt30DUOaHYXSVyhMBUKVYGqPmz%2BxCBLzfHcT81JIFTOIFTG2QuVUR%2BfW2vlac33WiIIgzbjPBSMe%2B1GM2i6boPzVrsjvA4yO2J3XnzuPwAAAP%2F%2FAQAA%2F%2F8yjwdhdQQAAA%3D%3D HTTP/1.1
Host: tractorfoolproofstandard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Cookie: u_pl=16681438; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec82fb5efd15fdce80f8c2e719a1865087=[3760946]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 26 Nov 2022 14:47:53 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f9e687619dfc2fa79961324ebdcf3216
Strict-Transport-Security: max-age=0; includeSubdomains
tractorfoolproofstandard.com/pixel/sbs?c=1
200 OK 0 B URL HTTP/1.1 tractorfoolproofstandard.com/pixel/sbs?c=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: tractorfoolproofstandard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Cookie: u_pl=16681438; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec82fb5efd15fdce80f8c2e719a1865087=[3760946]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 26 Nov 2022 14:47:53 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
upgulpinon.com/15?rnd=1932359379&z=4825384&var=&rb=yIgdo_PLopC0y2ZrR6oVdGsLQftr5va_m6pWs_dpTUosdXXF6U01AzNeaH-yIPJoe_R3aoEpLpLyoyZdYiL49cOukaDxz_IMffSk9qEsG0PNCnP2JdyVNfzkFagjlQ6tjCIGKNF7CqcRJZ_elC64YXjI3IGKFHJHGy1eh0x7UzA7qz-VZEoo8-qTvX_HVkWpxaEgcC0ifBBYg-iGBoJaqsZecCFz2UgbLMey2dh5c2sjtRR4plLCAmeSuQKt5GCb5lWzp8YkqUUmX5lzcoLOxYym7UnSwlNe0wOS1rsGzBeMBG3LabTc9dlluIj9gA7ZqmLvvVfZ7uGS0LhusGDI17aGqzBTXGhurPea5pUDoF_Q2YCACujpma-8lfi8yZIu0J5wfAnLacQq_hXezUTBmy_6LOmKuxl1l2-SGKo9z7EZvx3-yZdTsdCwtpqsEzKcnoa2YPTOhSwWIH1pYNvG8WogpHHObLW3dRM09A4WtbW8SGYBloQR78yAIYANPSTaLvopQKwuRFNN3vOkvNOQUMQAZ3hPact3Qn1OzxwPqBNhY7PtZKdSUHaL0eESy2Um0il2DQONl4AFdQVSdxRvLUl98e__ugtmSX1OZN8ZxoAvBDA45HVF-ecBMRVymCEBwPHNWEwVpEgqrpdi2Zas3TX4WaR_tPWgkrcynIDUb-mKYibfSjc_1qiomOHz6LkZ5KRjD7XMpenZIV1p&ruid=e889324d-6f8d-4f62-953a-d62eaec1429c&uci=%7B%22path%22%3A%7B%22count%22%3A0%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A4.364%2C%22location%22%3A%22https%3A%2F%2Fwww.9xmovies.pro%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A0%2C%22wdov%22%3A0%2C%22wvr%22%3A1%2C%22wiv%22%3Atrue%2C%22isIONS%22%3Atrue%7D
204 No Content 0 B URL HTTP/2 upgulpinon.com/15?rnd=1932359379&z=4825384&var=&rb=yIgdo_PLopC0y2ZrR6oVdGsLQftr5va_m6pWs_dpTUosdXXF6U01AzNeaH-yIPJoe_R3aoEpLpLyoyZdYiL49cOukaDxz_IMffSk9qEsG0PNCnP2JdyVNfzkFagjlQ6tjCIGKNF7CqcRJZ_elC64YXjI3IGKFHJHGy1eh0x7UzA7qz-VZEoo8-qTvX_HVkWpxaEgcC0ifBBYg-iGBoJaqsZecCFz2UgbLMey2dh5c2sjtRR4plLCAmeSuQKt5GCb5lWzp8YkqUUmX5lzcoLOxYym7UnSwlNe0wOS1rsGzBeMBG3LabTc9dlluIj9gA7ZqmLvvVfZ7uGS0LhusGDI17aGqzBTXGhurPea5pUDoF_Q2YCACujpma-8lfi8yZIu0J5wfAnLacQq_hXezUTBmy_6LOmKuxl1l2-SGKo9z7EZvx3-yZdTsdCwtpqsEzKcnoa2YPTOhSwWIH1pYNvG8WogpHHObLW3dRM09A4WtbW8SGYBloQR78yAIYANPSTaLvopQKwuRFNN3vOkvNOQUMQAZ3hPact3Qn1OzxwPqBNhY7PtZKdSUHaL0eESy2Um0il2DQONl4AFdQVSdxRvLUl98e__ugtmSX1OZN8ZxoAvBDA45HVF-ecBMRVymCEBwPHNWEwVpEgqrpdi2Zas3TX4WaR_tPWgkrcynIDUb-mKYibfSjc_1qiomOHz6LkZ5KRjD7XMpenZIV1p&ruid=e889324d-6f8d-4f62-953a-d62eaec1429c&uci=%7B%22path%22%3A%7B%22count%22%3A0%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A4.364%2C%22location%22%3A%22https%3A%2F%2Fwww.9xmovies.pro%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A0%2C%22wdov%22%3A0%2C%22wvr%22%3A1%2C%22wiv%22%3Atrue%2C%22isIONS%22%3Atrue%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /15?rnd=1932359379&z=4825384&var=&rb=yIgdo_PLopC0y2ZrR6oVdGsLQftr5va_m6pWs_dpTUosdXXF6U01AzNeaH-yIPJoe_R3aoEpLpLyoyZdYiL49cOukaDxz_IMffSk9qEsG0PNCnP2JdyVNfzkFagjlQ6tjCIGKNF7CqcRJZ_elC64YXjI3IGKFHJHGy1eh0x7UzA7qz-VZEoo8-qTvX_HVkWpxaEgcC0ifBBYg-iGBoJaqsZecCFz2UgbLMey2dh5c2sjtRR4plLCAmeSuQKt5GCb5lWzp8YkqUUmX5lzcoLOxYym7UnSwlNe0wOS1rsGzBeMBG3LabTc9dlluIj9gA7ZqmLvvVfZ7uGS0LhusGDI17aGqzBTXGhurPea5pUDoF_Q2YCACujpma-8lfi8yZIu0J5wfAnLacQq_hXezUTBmy_6LOmKuxl1l2-SGKo9z7EZvx3-yZdTsdCwtpqsEzKcnoa2YPTOhSwWIH1pYNvG8WogpHHObLW3dRM09A4WtbW8SGYBloQR78yAIYANPSTaLvopQKwuRFNN3vOkvNOQUMQAZ3hPact3Qn1OzxwPqBNhY7PtZKdSUHaL0eESy2Um0il2DQONl4AFdQVSdxRvLUl98e__ugtmSX1OZN8ZxoAvBDA45HVF-ecBMRVymCEBwPHNWEwVpEgqrpdi2Zas3TX4WaR_tPWgkrcynIDUb-mKYibfSjc_1qiomOHz6LkZ5KRjD7XMpenZIV1p&ruid=e889324d-6f8d-4f62-953a-d62eaec1429c&uci=%7B%22path%22%3A%7B%22count%22%3A0%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A4.364%2C%22location%22%3A%22https%3A%2F%2Fwww.9xmovies.pro%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A0%2C%22wdov%22%3A0%2C%22wvr%22%3A1%2C%22wiv%22%3Atrue%2C%22isIONS%22%3Atrue%7D HTTP/1.1
Host: upgulpinon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.9xmovies.pro
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Cookie: scm=1; OAID=w0ni774421py068433462h4l6eqcx916; oaidts=1669474068; oaidvc=1; CNT=1_v1_QE3wAAEAAAB6SzgA
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 26 Nov 2022 14:47:53 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://www.9xmovies.pro
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
x-trace-id: 3b6079c2ff7b28ddf231beb8a6a2cef3
access-control-expose-headers: X-Sc
set-cookie: OAID=w0ni774421py068433462h4l6eqcx916; expires=Sun, 26 Nov 2023 14:47:53 GMT; secure; SameSite=None
oaidts=1669474068; expires=Sun, 26 Nov 2023 14:47:53 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
eehuzaih.com/impression/0rJem9t4VPFpEupgRSH3IW0Zo-susK9xMrS4e09ySRxQgvk6MMO_XwvqPIMSri2bs7jE5xYwXOJMDa5aATNnQ1rDKmLu-DiWU11lAz7tIxY1A2m_FmKfYFrKyNENa1tyFCjY-XhnyWHw7gf21PTVZIEoo3zSE8VjTEOho4ZSye4tdvZDx5m2Lmgg6-A7_OPACEp1NWB4NFCSfy5KoH4EEROuO7EFiq4YrZblYg4ye6Iro8nb_g2o3bf3uGcpjfXcbQK2NmKl-50dDoN_kkSg6xquhJI5ObBO-Vx-xQ5sagSkGfD_ySn2t7_OY2TOtuZq5-BUULRO1jKRun9Yus8fCL5VSfdYKZu3m_Sh4-l83zYDtKD8WlAg2lQyMM4sKs5rMEOVbQUrIAowDRuZkutxsN3svbC25JJg7_RmPwTOsyF7dt3LnzSQgEQL_U96gKKNsAm6JePuraSmVUBtoPZc515C7MY_1emh8sP94XbyZnKCFDY6Gjw4i-tA8riEkHEdlAbAvCZBhKtQ0XZNX7yyhmSUdqJ7B4cFBSLfx_sFxyMBFRgx00vgpqvd53KEy5lPyUFdJFcty75hpNImtewKmTmlgb86JIcRb0XU89J3HYbLWHBKoY617wYaqNjWetf61PS71Btdcfqp_R4KYAW558gEZar0r5rdTnj9HwN7mdqN-_qyYYR6C7bkxKWPRrRTP0iBaq-996h4kCySgq3aNCkQh3lduVv47JhvTz0BrhuuVukuVrsl-uBgeYaPN-TKSTFZ_kZevSIkbbohXkP1f2zDVoO2evh4Et-TZbpTPLY=?_z=5031525&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=13&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
200 OK 43 B URL HTTP/2 eehuzaih.com/impression/0rJem9t4VPFpEupgRSH3IW0Zo-susK9xMrS4e09ySRxQgvk6MMO_XwvqPIMSri2bs7jE5xYwXOJMDa5aATNnQ1rDKmLu-DiWU11lAz7tIxY1A2m_FmKfYFrKyNENa1tyFCjY-XhnyWHw7gf21PTVZIEoo3zSE8VjTEOho4ZSye4tdvZDx5m2Lmgg6-A7_OPACEp1NWB4NFCSfy5KoH4EEROuO7EFiq4YrZblYg4ye6Iro8nb_g2o3bf3uGcpjfXcbQK2NmKl-50dDoN_kkSg6xquhJI5ObBO-Vx-xQ5sagSkGfD_ySn2t7_OY2TOtuZq5-BUULRO1jKRun9Yus8fCL5VSfdYKZu3m_Sh4-l83zYDtKD8WlAg2lQyMM4sKs5rMEOVbQUrIAowDRuZkutxsN3svbC25JJg7_RmPwTOsyF7dt3LnzSQgEQL_U96gKKNsAm6JePuraSmVUBtoPZc515C7MY_1emh8sP94XbyZnKCFDY6Gjw4i-tA8riEkHEdlAbAvCZBhKtQ0XZNX7yyhmSUdqJ7B4cFBSLfx_sFxyMBFRgx00vgpqvd53KEy5lPyUFdJFcty75hpNImtewKmTmlgb86JIcRb0XU89J3HYbLWHBKoY617wYaqNjWetf61PS71Btdcfqp_R4KYAW558gEZar0r5rdTnj9HwN7mdqN-_qyYYR6C7bkxKWPRrRTP0iBaq-996h4kCySgq3aNCkQh3lduVv47JhvTz0BrhuuVukuVrsl-uBgeYaPN-TKSTFZ_kZevSIkbbohXkP1f2zDVoO2evh4Et-TZbpTPLY=?_z=5031525&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=13&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
Analyzer Verdict Alert quad9 Sinkholed
GET /impression/0rJem9t4VPFpEupgRSH3IW0Zo-susK9xMrS4e09ySRxQgvk6MMO_XwvqPIMSri2bs7jE5xYwXOJMDa5aATNnQ1rDKmLu-DiWU11lAz7tIxY1A2m_FmKfYFrKyNENa1tyFCjY-XhnyWHw7gf21PTVZIEoo3zSE8VjTEOho4ZSye4tdvZDx5m2Lmgg6-A7_OPACEp1NWB4NFCSfy5KoH4EEROuO7EFiq4YrZblYg4ye6Iro8nb_g2o3bf3uGcpjfXcbQK2NmKl-50dDoN_kkSg6xquhJI5ObBO-Vx-xQ5sagSkGfD_ySn2t7_OY2TOtuZq5-BUULRO1jKRun9Yus8fCL5VSfdYKZu3m_Sh4-l83zYDtKD8WlAg2lQyMM4sKs5rMEOVbQUrIAowDRuZkutxsN3svbC25JJg7_RmPwTOsyF7dt3LnzSQgEQL_U96gKKNsAm6JePuraSmVUBtoPZc515C7MY_1emh8sP94XbyZnKCFDY6Gjw4i-tA8riEkHEdlAbAvCZBhKtQ0XZNX7yyhmSUdqJ7B4cFBSLfx_sFxyMBFRgx00vgpqvd53KEy5lPyUFdJFcty75hpNImtewKmTmlgb86JIcRb0XU89J3HYbLWHBKoY617wYaqNjWetf61PS71Btdcfqp_R4KYAW558gEZar0r5rdTnj9HwN7mdqN-_qyYYR6C7bkxKWPRrRTP0iBaq-996h4kCySgq3aNCkQh3lduVv47JhvTz0BrhuuVukuVrsl-uBgeYaPN-TKSTFZ_kZevSIkbbohXkP1f2zDVoO2evh4Et-TZbpTPLY=?_z=5031525&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=13&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: eehuzaih.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Cookie: OAID=w0ni774421py068433462h4l6eqcx916
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:54 GMT
content-type: image/gif
content-length: 43
x-trace-id: 7d6453e38a1590b8dc78aee65214a555
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
betotodilea.com/impression/s94ERpfmMFSRq0Hyp8jI-YsWDyuewf2yn66SeaVYks96677wSM8ZvUqpmssIQliK5Yl3UKwSTEx1alMuw1i8rkkGDetL7zTxGG1DyKbxbJFCWDZ3VV0TOPcWKtLwL8w33TRZfIm21-XdDbC2VfNAEAaTvDkrbPFoLJnrH4SE2BgGOje7F2MO3ZfwNHTbRihc3Hja6Z6KOc3mwWs8jUcbWY4o3ieqe4vDXV7rCtLlugyrTS0HUKxSRuXkgIy_wKmixKz_xwnhx4SCm4VT69lHWmCMIbu-0zHfNR_7_nNMiPWyDso-zH3rroK4Sk59r1SY1fpGyFZVbmgIq9jz9RBYc7R_TVHNOfr-4ukfiomx8AAjtg5_BA-c_gH_7uUVHn5Anz8-TYHS6sX-RDwCXASfaN3LBBOx-hAqModPM8Q5Zn5gbRnmZ1xayRiyaCcIydNwFa4jeJRPi-8T83BJDPq9Fw7TAeBiGiIQoe__-kRYemcEJMFyioUMdxYNz5fvQ3ZCEUPLouYpbLj-rg-XmSxxvNCBZ2STyziNv1dJgsSHYwYmB9FWLRxh533uxact6TbNOUCTseRLQDt0nE6G4_RNNlNq0Sv2Z3n4KIoKV1FtZ0x1hXsm6Xtc0fZKbBwZqVGaEwhJognH46ktgx1VEzlgCRn6fMdOFRGJ6zTu0Ug5HwMpp4uFsUXGuyMq0bHFYkgo6znW66OIuO728oxy?_z=4825328&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=13&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
200 OK 43 B URL HTTP/2 betotodilea.com/impression/s94ERpfmMFSRq0Hyp8jI-YsWDyuewf2yn66SeaVYks96677wSM8ZvUqpmssIQliK5Yl3UKwSTEx1alMuw1i8rkkGDetL7zTxGG1DyKbxbJFCWDZ3VV0TOPcWKtLwL8w33TRZfIm21-XdDbC2VfNAEAaTvDkrbPFoLJnrH4SE2BgGOje7F2MO3ZfwNHTbRihc3Hja6Z6KOc3mwWs8jUcbWY4o3ieqe4vDXV7rCtLlugyrTS0HUKxSRuXkgIy_wKmixKz_xwnhx4SCm4VT69lHWmCMIbu-0zHfNR_7_nNMiPWyDso-zH3rroK4Sk59r1SY1fpGyFZVbmgIq9jz9RBYc7R_TVHNOfr-4ukfiomx8AAjtg5_BA-c_gH_7uUVHn5Anz8-TYHS6sX-RDwCXASfaN3LBBOx-hAqModPM8Q5Zn5gbRnmZ1xayRiyaCcIydNwFa4jeJRPi-8T83BJDPq9Fw7TAeBiGiIQoe__-kRYemcEJMFyioUMdxYNz5fvQ3ZCEUPLouYpbLj-rg-XmSxxvNCBZ2STyziNv1dJgsSHYwYmB9FWLRxh533uxact6TbNOUCTseRLQDt0nE6G4_RNNlNq0Sv2Z3n4KIoKV1FtZ0x1hXsm6Xtc0fZKbBwZqVGaEwhJognH46ktgx1VEzlgCRn6fMdOFRGJ6zTu0Ug5HwMpp4uFsUXGuyMq0bHFYkgo6znW66OIuO728oxy?_z=4825328&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=13&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
Analyzer Verdict Alert quad9 Sinkholed
GET /impression/s94ERpfmMFSRq0Hyp8jI-YsWDyuewf2yn66SeaVYks96677wSM8ZvUqpmssIQliK5Yl3UKwSTEx1alMuw1i8rkkGDetL7zTxGG1DyKbxbJFCWDZ3VV0TOPcWKtLwL8w33TRZfIm21-XdDbC2VfNAEAaTvDkrbPFoLJnrH4SE2BgGOje7F2MO3ZfwNHTbRihc3Hja6Z6KOc3mwWs8jUcbWY4o3ieqe4vDXV7rCtLlugyrTS0HUKxSRuXkgIy_wKmixKz_xwnhx4SCm4VT69lHWmCMIbu-0zHfNR_7_nNMiPWyDso-zH3rroK4Sk59r1SY1fpGyFZVbmgIq9jz9RBYc7R_TVHNOfr-4ukfiomx8AAjtg5_BA-c_gH_7uUVHn5Anz8-TYHS6sX-RDwCXASfaN3LBBOx-hAqModPM8Q5Zn5gbRnmZ1xayRiyaCcIydNwFa4jeJRPi-8T83BJDPq9Fw7TAeBiGiIQoe__-kRYemcEJMFyioUMdxYNz5fvQ3ZCEUPLouYpbLj-rg-XmSxxvNCBZ2STyziNv1dJgsSHYwYmB9FWLRxh533uxact6TbNOUCTseRLQDt0nE6G4_RNNlNq0Sv2Z3n4KIoKV1FtZ0x1hXsm6Xtc0fZKbBwZqVGaEwhJognH46ktgx1VEzlgCRn6fMdOFRGJ6zTu0Ug5HwMpp4uFsUXGuyMq0bHFYkgo6znW66OIuO728oxy?_z=4825328&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=13&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Cookie: OAID=w0ni774421py068433462h4l6eqcx916
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:54 GMT
content-type: image/gif
content-length: 43
x-trace-id: 107aa7734847b1ee8f572b2338632833
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
betotodilea.com/500/4825328?excludes=15867747&oaid=3cf5712921204b2b85f64055bbba950d&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=13&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
200 OK 0 B URL HTTP/2 betotodilea.com/500/4825328?excludes=15867747&oaid=3cf5712921204b2b85f64055bbba950d&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=13&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
OPTIONS /500/4825328?excludes=15867747&oaid=3cf5712921204b2b85f64055bbba950d&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=13&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.9xmovies.pro/
Origin: https://www.9xmovies.pro
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:54 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://www.9xmovies.pro
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-allow-credentials: true
access-control-max-age: 600
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
offerimage.com/www/images/af998b3568313b8e420e478b440512f6.jpeg
200 OK 14 kB URL HTTP/2 offerimage.com/www/images/af998b3568313b8e420e478b440512f6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3\012- data
Hash af998b3568313b8e420e478b440512f6
14a705bb3342842b682668f6b25ae049a242aa4c
f3f97e78bc45c5e8d1dcd55572b3164951fb6fa93e983963fb1873e20c6da093
GET /www/images/af998b3568313b8e420e478b440512f6.jpeg HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:47:54 GMT
content-type: image/jpeg
content-length: 14274
cache-control: max-age=86400
cf-bgj: h2pri
etag: "6381073b-37c2"
expires: Sun, 27 Nov 2022 11:12:59 GMT
last-modified: Fri, 25 Nov 2022 18:19:39 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 12895
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77036c065c959932-ARN
X-Firefox-Spdy: h2
betotodilea.com/impression/vmHR_zYD-thO_YcDMAsk33nI_S1kIBcj0H46_NrX7EcVpgcHVVOatSddIhgo3r5i8Ckrk2RbF5eBvd5ToPojFpTF2tbNILWW2ye6nTQfcg7yF6kAEeP4qjUughaWw7QIrYu-HRMV_G1lG7SzJAmiRplOowK3vsGtiKNHFGihJm_B98wZqCYEyhxZfFacQKF1mlkRLOdohwMuJlVdtJ1v4FCse4sSAHFhco-Hbyx_FWfsXi4LBfw48nes4UnKzjX9hiz3kIbtu4gW2n0BVZSaHht5zLXgtZMG90DF-jHiPGUWYMvnp_L-u935fx-RslWqVaQihlsn2WlpKJmWp5TubNC4TWaMhYiJxzoO5YcPQ-8e2UwiXWq2stsHL5ATBlEC5HW5remU-_gdlOGcNZ4EWqaHeEPryf4IT1yKPXaLcPIzqhp2S4QVSHka0Fw6BOtGVxzKX1zH4wKbeER1NXQWKGXGYMtKzQXJEBouUY70AkFN16gfsUKEPxqgQmD6-u0YDNN9G7CQETzuq7ZFQ6v8AZ4g8yjVwsc1UZVGTi7oxROxjVulJQbr5vLUn_NyQyfyGwIK-Ulf6fq3t4sXuP3NCK_OQ30G6UNZ6fDH8VtmSbvxSVJtXYkzABeHLn1smlQ2DLI1DGhab6T0Uv2mpIp4iZ8PqxA=?_z=4825328&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=13&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
200 OK 43 B URL HTTP/2 betotodilea.com/impression/vmHR_zYD-thO_YcDMAsk33nI_S1kIBcj0H46_NrX7EcVpgcHVVOatSddIhgo3r5i8Ckrk2RbF5eBvd5ToPojFpTF2tbNILWW2ye6nTQfcg7yF6kAEeP4qjUughaWw7QIrYu-HRMV_G1lG7SzJAmiRplOowK3vsGtiKNHFGihJm_B98wZqCYEyhxZfFacQKF1mlkRLOdohwMuJlVdtJ1v4FCse4sSAHFhco-Hbyx_FWfsXi4LBfw48nes4UnKzjX9hiz3kIbtu4gW2n0BVZSaHht5zLXgtZMG90DF-jHiPGUWYMvnp_L-u935fx-RslWqVaQihlsn2WlpKJmWp5TubNC4TWaMhYiJxzoO5YcPQ-8e2UwiXWq2stsHL5ATBlEC5HW5remU-_gdlOGcNZ4EWqaHeEPryf4IT1yKPXaLcPIzqhp2S4QVSHka0Fw6BOtGVxzKX1zH4wKbeER1NXQWKGXGYMtKzQXJEBouUY70AkFN16gfsUKEPxqgQmD6-u0YDNN9G7CQETzuq7ZFQ6v8AZ4g8yjVwsc1UZVGTi7oxROxjVulJQbr5vLUn_NyQyfyGwIK-Ulf6fq3t4sXuP3NCK_OQ30G6UNZ6fDH8VtmSbvxSVJtXYkzABeHLn1smlQ2DLI1DGhab6T0Uv2mpIp4iZ8PqxA=?_z=4825328&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=13&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
Analyzer Verdict Alert quad9 Sinkholed
GET /impression/vmHR_zYD-thO_YcDMAsk33nI_S1kIBcj0H46_NrX7EcVpgcHVVOatSddIhgo3r5i8Ckrk2RbF5eBvd5ToPojFpTF2tbNILWW2ye6nTQfcg7yF6kAEeP4qjUughaWw7QIrYu-HRMV_G1lG7SzJAmiRplOowK3vsGtiKNHFGihJm_B98wZqCYEyhxZfFacQKF1mlkRLOdohwMuJlVdtJ1v4FCse4sSAHFhco-Hbyx_FWfsXi4LBfw48nes4UnKzjX9hiz3kIbtu4gW2n0BVZSaHht5zLXgtZMG90DF-jHiPGUWYMvnp_L-u935fx-RslWqVaQihlsn2WlpKJmWp5TubNC4TWaMhYiJxzoO5YcPQ-8e2UwiXWq2stsHL5ATBlEC5HW5remU-_gdlOGcNZ4EWqaHeEPryf4IT1yKPXaLcPIzqhp2S4QVSHka0Fw6BOtGVxzKX1zH4wKbeER1NXQWKGXGYMtKzQXJEBouUY70AkFN16gfsUKEPxqgQmD6-u0YDNN9G7CQETzuq7ZFQ6v8AZ4g8yjVwsc1UZVGTi7oxROxjVulJQbr5vLUn_NyQyfyGwIK-Ulf6fq3t4sXuP3NCK_OQ30G6UNZ6fDH8VtmSbvxSVJtXYkzABeHLn1smlQ2DLI1DGhab6T0Uv2mpIp4iZ8PqxA=?_z=4825328&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=13&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Cookie: OAID=3cf5712921204b2b85f64055bbba950d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:57 GMT
content-type: image/gif
content-length: 43
x-trace-id: 6411c1d506f804210fb6dd9b19a0658d
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18e649ab-6d56-47c9-ab7e-c65d9bdfcffd.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18e649ab-6d56-47c9-ab7e-c65d9bdfcffd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 926df9839ec3d924b563b55d8bccace8
c47a3884465fc02b5c57faa5ffbd986ba29c64c2
a97cd625959aa81bc516024628315b2c6e2ce94f76cd579751a686a6611cc4d2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18e649ab-6d56-47c9-ab7e-c65d9bdfcffd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 6789
x-amzn-requestid: eede6332-5376-4f9c-83fc-f894430c1f4b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLWWYFFgoAMFhaQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381375b-66d7ffc70f7d901420a503da;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:44:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: -6kE-HDfLIQMtzuaOuArCjtxgpQUgxMrpjcT7pDIdY7CDlJNK1GZWA==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:46:24 GMT
etag: "c47a3884465fc02b5c57faa5ffbd986ba29c64c2"
content-type: image/jpeg
age: 61293
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
upgulpinon.com/15?rnd=1932359379&z=4825384&var=&rb=yIgdo_PLopC0y2ZrR6oVdGsLQftr5va_m6pWs_dpTUosdXXF6U01AzNeaH-yIPJoe_R3aoEpLpLyoyZdYiL49cOukaDxz_IMffSk9qEsG0PNCnP2JdyVNfzkFagjlQ6tjCIGKNF7CqcRJZ_elC64YXjI3IGKFHJHGy1eh0x7UzA7qz-VZEoo8-qTvX_HVkWpxaEgcC0ifBBYg-iGBoJaqsZecCFz2UgbLMey2dh5c2sjtRR4plLCAmeSuQKt5GCb5lWzp8YkqUUmX5lzcoLOxYym7UnSwlNe0wOS1rsGzBeMBG3LabTc9dlluIj9gA7ZqmLvvVfZ7uGS0LhusGDI17aGqzBTXGhurPea5pUDoF_Q2YCACujpma-8lfi8yZIu0J5wfAnLacQq_hXezUTBmy_6LOmKuxl1l2-SGKo9z7EZvx3-yZdTsdCwtpqsEzKcnoa2YPTOhSwWIH1pYNvG8WogpHHObLW3dRM09A4WtbW8SGYBloQR78yAIYANPSTaLvopQKwuRFNN3vOkvNOQUMQAZ3hPact3Qn1OzxwPqBNhY7PtZKdSUHaL0eESy2Um0il2DQONl4AFdQVSdxRvLUl98e__ugtmSX1OZN8ZxoAvBDA45HVF-ecBMRVymCEBwPHNWEwVpEgqrpdi2Zas3TX4WaR_tPWgkrcynIDUb-mKYibfSjc_1qiomOHz6LkZ5KRjD7XMpenZIV1p&ruid=e889324d-6f8d-4f62-953a-d62eaec1429c&uci=%7B%22path%22%3A%7B%22count%22%3A0%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A8.368%2C%22location%22%3A%22https%3A%2F%2Fwww.9xmovies.pro%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A0%2C%22wdov%22%3A0%2C%22wvr%22%3A1%2C%22wiv%22%3Atrue%2C%22isIONS%22%3Atrue%7D
204 No Content 0 B URL HTTP/2 upgulpinon.com/15?rnd=1932359379&z=4825384&var=&rb=yIgdo_PLopC0y2ZrR6oVdGsLQftr5va_m6pWs_dpTUosdXXF6U01AzNeaH-yIPJoe_R3aoEpLpLyoyZdYiL49cOukaDxz_IMffSk9qEsG0PNCnP2JdyVNfzkFagjlQ6tjCIGKNF7CqcRJZ_elC64YXjI3IGKFHJHGy1eh0x7UzA7qz-VZEoo8-qTvX_HVkWpxaEgcC0ifBBYg-iGBoJaqsZecCFz2UgbLMey2dh5c2sjtRR4plLCAmeSuQKt5GCb5lWzp8YkqUUmX5lzcoLOxYym7UnSwlNe0wOS1rsGzBeMBG3LabTc9dlluIj9gA7ZqmLvvVfZ7uGS0LhusGDI17aGqzBTXGhurPea5pUDoF_Q2YCACujpma-8lfi8yZIu0J5wfAnLacQq_hXezUTBmy_6LOmKuxl1l2-SGKo9z7EZvx3-yZdTsdCwtpqsEzKcnoa2YPTOhSwWIH1pYNvG8WogpHHObLW3dRM09A4WtbW8SGYBloQR78yAIYANPSTaLvopQKwuRFNN3vOkvNOQUMQAZ3hPact3Qn1OzxwPqBNhY7PtZKdSUHaL0eESy2Um0il2DQONl4AFdQVSdxRvLUl98e__ugtmSX1OZN8ZxoAvBDA45HVF-ecBMRVymCEBwPHNWEwVpEgqrpdi2Zas3TX4WaR_tPWgkrcynIDUb-mKYibfSjc_1qiomOHz6LkZ5KRjD7XMpenZIV1p&ruid=e889324d-6f8d-4f62-953a-d62eaec1429c&uci=%7B%22path%22%3A%7B%22count%22%3A0%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A8.368%2C%22location%22%3A%22https%3A%2F%2Fwww.9xmovies.pro%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A0%2C%22wdov%22%3A0%2C%22wvr%22%3A1%2C%22wiv%22%3Atrue%2C%22isIONS%22%3Atrue%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /15?rnd=1932359379&z=4825384&var=&rb=yIgdo_PLopC0y2ZrR6oVdGsLQftr5va_m6pWs_dpTUosdXXF6U01AzNeaH-yIPJoe_R3aoEpLpLyoyZdYiL49cOukaDxz_IMffSk9qEsG0PNCnP2JdyVNfzkFagjlQ6tjCIGKNF7CqcRJZ_elC64YXjI3IGKFHJHGy1eh0x7UzA7qz-VZEoo8-qTvX_HVkWpxaEgcC0ifBBYg-iGBoJaqsZecCFz2UgbLMey2dh5c2sjtRR4plLCAmeSuQKt5GCb5lWzp8YkqUUmX5lzcoLOxYym7UnSwlNe0wOS1rsGzBeMBG3LabTc9dlluIj9gA7ZqmLvvVfZ7uGS0LhusGDI17aGqzBTXGhurPea5pUDoF_Q2YCACujpma-8lfi8yZIu0J5wfAnLacQq_hXezUTBmy_6LOmKuxl1l2-SGKo9z7EZvx3-yZdTsdCwtpqsEzKcnoa2YPTOhSwWIH1pYNvG8WogpHHObLW3dRM09A4WtbW8SGYBloQR78yAIYANPSTaLvopQKwuRFNN3vOkvNOQUMQAZ3hPact3Qn1OzxwPqBNhY7PtZKdSUHaL0eESy2Um0il2DQONl4AFdQVSdxRvLUl98e__ugtmSX1OZN8ZxoAvBDA45HVF-ecBMRVymCEBwPHNWEwVpEgqrpdi2Zas3TX4WaR_tPWgkrcynIDUb-mKYibfSjc_1qiomOHz6LkZ5KRjD7XMpenZIV1p&ruid=e889324d-6f8d-4f62-953a-d62eaec1429c&uci=%7B%22path%22%3A%7B%22count%22%3A0%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A8.368%2C%22location%22%3A%22https%3A%2F%2Fwww.9xmovies.pro%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A0%2C%22wdov%22%3A0%2C%22wvr%22%3A1%2C%22wiv%22%3Atrue%2C%22isIONS%22%3Atrue%7D HTTP/1.1
Host: upgulpinon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.9xmovies.pro
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Cookie: scm=1; OAID=w0ni774421py068433462h4l6eqcx916; oaidts=1669474068; oaidvc=1; CNT=1_v1_QE3wAAEAAAB6SzgA
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 26 Nov 2022 14:47:57 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://www.9xmovies.pro
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
x-trace-id: 7322edb5f5845413d9c5066c2bb4f88b
access-control-expose-headers: X-Sc
set-cookie: OAID=w0ni774421py068433462h4l6eqcx916; expires=Sun, 26 Nov 2023 14:47:57 GMT; secure; SameSite=None
oaidts=1669474068; expires=Sun, 26 Nov 2023 14:47:57 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
tobaltoyon.com/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: tobaltoyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.9xmovies.pro/
Content-Type: application/json
Origin: https://www.9xmovies.pro
Content-Length: 378
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:58 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 81b1c338a445dbda1b50e3684e922c5b
access-control-allow-origin: https://www.9xmovies.pro
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.mirrorservice.org/sites/download.qt-project.org/official_releases/qtcreator/9.0/9.0.0/qt-creator-opensource-windows-x86_64-9.0.0.exe
200 OK 0 B URL HTTP/1.1 www.mirrorservice.org/sites/download.qt-project.org/official_releases/qtcreator/9.0/9.0.0/qt-creator-opensource-windows-x86_64-9.0.0.exe
IP
ASN #786 Jisc Services Limited
GET /sites/download.qt-project.org/official_releases/qtcreator/9.0/9.0.0/qt-creator-opensource-windows-x86_64-9.0.0.exe HTTP/1.1
Host: www.mirrorservice.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 14:47:49 GMT
Server: Apache
Last-Modified: Tue, 22 Nov 2022 08:08:01 GMT
Accept-Ranges: bytes
Content-Length: 289790616
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: application/x-msdos-program
interstitial-07.com/?l=vf4vHwnZrOjSXMf&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Fupgulpinon.com%2F12%3Frnd%3D2293250506%26z%3D4825384%26b%3D15748416%26c%3D6329529%26var%3D%26d%3Dhttps%253A%252F%252Fi.bybit.com%252FabgwmH3%26cln%3D1%26btp%3D7%26rb%3DyIgdo_PLopC0y2ZrR6oVdGsLQftr5va_m6pWs_dpTUosdXXF6U01AzNeaH-yIPJoe_R3aoEpLpLyoyZdYiL49cOukaDxz_IMffSk9qEsG0PNCnP2JdyVNfzkFagjlQ6tjCIGKNF7CqcRJZ_elC64YXjI3IGKFHJHGy1eh0x7UzA7qz-VZEoo8-qTvX_HVkWpxaEgcC0ifBBYg-iGBoJaqsZecCFz2UgbLMey2dh5c2sjtRR4plLCAmeSuQKt5GCb5lWzp8YkqUUmX5lzcoLOxYym7UnSwlNe0wOS1rsGzBeMBG3LabTc9dlluIj9gA7ZqmLvvVfZ7uGS0LhusGDI17aGqzBTXGhurPea5pUDoF_Q2YCACujpma-8lfi8yZIu0J5wfAnLacQq_hXezUTBmy_6LOmKuxl1l2-SGKo9z7EZvx3-yZdTsdCwtpqsEzKcnoa2YPTOhSwWIH1pYNvG8WogpHHObLW3dRM09A4WtbW8SGYBloQR78yAIYANPSTaLvopQKwuRFNN3vOkvNOQUMQAZ3hPact3Qn1OzxwPqBNhY7PtZKdSUHaL0eESy2Um0il2DQONl4AFdQVSdxRvLUl98e__ugtmSX1OZN8ZxoAvBDA45HVF-ecBMRVymCEBwPHNWEwVpEgqrpdi2Zas3TX4WaR_tPWgkrcynIDUb-mKYibfSjc_1qiomOHz6LkZ5KRjD7XMpenZIV1p%26bag%3D2Vtk9xF_Ft9oNvl2qEPeRQ%3D%3D%26ruid%3De889324d-6f8d-4f62-953a-d62eaec1429c%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D1%26gp%3D-1%26bp%3D-1%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fwww.9xmovies.pro%252F%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1268%26wiw%3D1280%26wih%3D939%26wfc%3D9%26sah%3D1002%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0
200 OK 0 B URL HTTP/2 interstitial-07.com/?l=vf4vHwnZrOjSXMf&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Fupgulpinon.com%2F12%3Frnd%3D2293250506%26z%3D4825384%26b%3D15748416%26c%3D6329529%26var%3D%26d%3Dhttps%253A%252F%252Fi.bybit.com%252FabgwmH3%26cln%3D1%26btp%3D7%26rb%3DyIgdo_PLopC0y2ZrR6oVdGsLQftr5va_m6pWs_dpTUosdXXF6U01AzNeaH-yIPJoe_R3aoEpLpLyoyZdYiL49cOukaDxz_IMffSk9qEsG0PNCnP2JdyVNfzkFagjlQ6tjCIGKNF7CqcRJZ_elC64YXjI3IGKFHJHGy1eh0x7UzA7qz-VZEoo8-qTvX_HVkWpxaEgcC0ifBBYg-iGBoJaqsZecCFz2UgbLMey2dh5c2sjtRR4plLCAmeSuQKt5GCb5lWzp8YkqUUmX5lzcoLOxYym7UnSwlNe0wOS1rsGzBeMBG3LabTc9dlluIj9gA7ZqmLvvVfZ7uGS0LhusGDI17aGqzBTXGhurPea5pUDoF_Q2YCACujpma-8lfi8yZIu0J5wfAnLacQq_hXezUTBmy_6LOmKuxl1l2-SGKo9z7EZvx3-yZdTsdCwtpqsEzKcnoa2YPTOhSwWIH1pYNvG8WogpHHObLW3dRM09A4WtbW8SGYBloQR78yAIYANPSTaLvopQKwuRFNN3vOkvNOQUMQAZ3hPact3Qn1OzxwPqBNhY7PtZKdSUHaL0eESy2Um0il2DQONl4AFdQVSdxRvLUl98e__ugtmSX1OZN8ZxoAvBDA45HVF-ecBMRVymCEBwPHNWEwVpEgqrpdi2Zas3TX4WaR_tPWgkrcynIDUb-mKYibfSjc_1qiomOHz6LkZ5KRjD7XMpenZIV1p%26bag%3D2Vtk9xF_Ft9oNvl2qEPeRQ%3D%3D%26ruid%3De889324d-6f8d-4f62-953a-d62eaec1429c%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D1%26gp%3D-1%26bp%3D-1%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fwww.9xmovies.pro%252F%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1268%26wiw%3D1280%26wih%3D939%26wfc%3D9%26sah%3D1002%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0
IP
GET /?l=vf4vHwnZrOjSXMf&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Fupgulpinon.com%2F12%3Frnd%3D2293250506%26z%3D4825384%26b%3D15748416%26c%3D6329529%26var%3D%26d%3Dhttps%253A%252F%252Fi.bybit.com%252FabgwmH3%26cln%3D1%26btp%3D7%26rb%3DyIgdo_PLopC0y2ZrR6oVdGsLQftr5va_m6pWs_dpTUosdXXF6U01AzNeaH-yIPJoe_R3aoEpLpLyoyZdYiL49cOukaDxz_IMffSk9qEsG0PNCnP2JdyVNfzkFagjlQ6tjCIGKNF7CqcRJZ_elC64YXjI3IGKFHJHGy1eh0x7UzA7qz-VZEoo8-qTvX_HVkWpxaEgcC0ifBBYg-iGBoJaqsZecCFz2UgbLMey2dh5c2sjtRR4plLCAmeSuQKt5GCb5lWzp8YkqUUmX5lzcoLOxYym7UnSwlNe0wOS1rsGzBeMBG3LabTc9dlluIj9gA7ZqmLvvVfZ7uGS0LhusGDI17aGqzBTXGhurPea5pUDoF_Q2YCACujpma-8lfi8yZIu0J5wfAnLacQq_hXezUTBmy_6LOmKuxl1l2-SGKo9z7EZvx3-yZdTsdCwtpqsEzKcnoa2YPTOhSwWIH1pYNvG8WogpHHObLW3dRM09A4WtbW8SGYBloQR78yAIYANPSTaLvopQKwuRFNN3vOkvNOQUMQAZ3hPact3Qn1OzxwPqBNhY7PtZKdSUHaL0eESy2Um0il2DQONl4AFdQVSdxRvLUl98e__ugtmSX1OZN8ZxoAvBDA45HVF-ecBMRVymCEBwPHNWEwVpEgqrpdi2Zas3TX4WaR_tPWgkrcynIDUb-mKYibfSjc_1qiomOHz6LkZ5KRjD7XMpenZIV1p%26bag%3D2Vtk9xF_Ft9oNvl2qEPeRQ%3D%3D%26ruid%3De889324d-6f8d-4f62-953a-d62eaec1429c%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D1%26gp%3D-1%26bp%3D-1%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fwww.9xmovies.pro%252F%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1268%26wiw%3D1280%26wih%3D939%26wfc%3D9%26sah%3D1002%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0 HTTP/1.1
Host: interstitial-07.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:51 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.4.24
set-cookie: reverse=z9xvrg_XnpTkgKIdosSDow-m5m03zYvIvmlJ5qP_AZQ; expires=Sat, 26-Nov-2022 15:47:51 GMT; Max-Age=3600; path=/
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
content-encoding: br
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/interstitial/software/flashPlayer/mac/multi/1/img/close.svg
200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/interstitial/software/flashPlayer/mac/multi/1/img/close.svg
IP
GET /sb/interstitial/software/flashPlayer/mac/multi/1/img/close.svg HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:47:52 GMT
content-type: image/svg+xml
last-modified: Wed, 01 Sep 2021 12:22:39 GMT
etag: W/"612f708f-4ff"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 953496
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3ycQlIsYDaPaNJncX1DazQav6PnK53SJNPi5S%2FV76SRFrbVxQXCR%2FQCZL4dQ1AIS5D7bwBYqZ9X6r2rbA%2Byv5TQG2SKC2EcPWkDHZnFR%2FDyBrIlM43xC7lkQcJvhtjz4f6WCkd2ZSZEH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77036bf98bfd7327-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
betotodilea.com/500/4825328?excludes=15867747&oaid=3cf5712921204b2b85f64055bbba950d&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=13&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
200 OK 0 B URL HTTP/2 betotodilea.com/500/4825328?excludes=15867747&oaid=3cf5712921204b2b85f64055bbba950d&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=13&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /500/4825328?excludes=15867747&oaid=3cf5712921204b2b85f64055bbba950d&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=13&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://www.9xmovies.pro
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Cookie: OAID=w0ni774421py068433462h4l6eqcx916
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:54 GMT
content-type: application/javascript
x-trace-id: 83d28f1f2529cbfc92e539395c6f0257
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://www.9xmovies.pro
access-control-expose-headers: Link
access-control-allow-credentials: true
set-cookie: OAID=3cf5712921204b2b85f64055bbba950d; expires=Sun, 26 Nov 2023 14:47:54 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=PT+Sans:400,400i,700,700i
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=PT+Sans:400,400i,700,700i
IP
GET /css?family=PT+Sans:400,400i,700,700i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 26 Nov 2022 14:47:48 GMT
date: Sat, 26 Nov 2022 14:47:48 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
upgulpinon.com/27/22b0ff6d446d45dfe24f0ae457b1c7db
200 OK 0 B URL HTTP/2 upgulpinon.com/27/22b0ff6d446d45dfe24f0ae457b1c7db
IP
GET /27/22b0ff6d446d45dfe24f0ae457b1c7db HTTP/1.1
Host: upgulpinon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Cookie: scm=1; OAID=26a85a97f97c4efba4128df027271748; oaidts=1669474068
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:49 GMT
content-type: application/javascript
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
cache-control: max-age:290304000, public
last-modified: Fri, 25 Nov 2022 08:14:39 GMT
expires: Fri, 25 Dec 2082 08:14:39 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/interstitial/software/flashPlayer/mac/multi/1/css/animate.css
200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/interstitial/software/flashPlayer/mac/multi/1/css/animate.css
IP
GET /sb/interstitial/software/flashPlayer/mac/multi/1/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.9xmovies.pro
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:47:52 GMT
content-type: text/css
last-modified: Wed, 01 Sep 2021 12:22:34 GMT
etag: W/"612f708a-13591"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5oIKPDvdW205O%2Fb99LlXym8S%2Bmeryp23cyBIEQy%2BAxc2dCAawG8kcbPuG2ORMU4TOfymAuaRNLPDtlV%2B7%2F%2F3kzabHq3g8O3dpAzibPQtCozA1LHnJrOw7p7WDm2FKnxD45NppRC7Pm2W"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77036bf95bcb7327-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/interstitial/software/flashPlayer/mac/multi/1/js/jquery.min.js
200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/interstitial/software/flashPlayer/mac/multi/1/js/jquery.min.js
IP
GET /sb/interstitial/software/flashPlayer/mac/multi/1/js/jquery.min.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:47:52 GMT
content-type: application/javascript
last-modified: Wed, 01 Sep 2021 12:22:37 GMT
etag: W/"612f708d-149a0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 953596
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sN%2BtKm%2FPU5%2BOAYIN84%2BB%2B1Mz6Y1hqjJOeNEtbFbAprc%2FNDuNZmItoC5qtB%2FAH5yjvQ9kItBYbbdvKmQ7YSmDzsqHLrMb%2BcZCph5a8fXPOQw%2Fj%2FTd4sD8LQB6DT7vQ66OJa45cwRfpVhr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77036bf98c007327-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
eehuzaih.com/500/5031525?excludes=&oaid=w0ni774421py068433462h4l6eqcx916&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=10&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
200 OK 0 B URL HTTP/2 eehuzaih.com/500/5031525?excludes=&oaid=w0ni774421py068433462h4l6eqcx916&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=10&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /500/5031525?excludes=&oaid=w0ni774421py068433462h4l6eqcx916&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=10&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: eehuzaih.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://www.9xmovies.pro
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Cookie: OAID=9dec102bbdf647ab960aaed91bd20b04
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:50 GMT
content-type: application/javascript
x-trace-id: a6d1e5f59f4f5716e5a89ba3d95a4293
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://www.9xmovies.pro
access-control-expose-headers: Link
access-control-allow-credentials: true
set-cookie: OAID=w0ni774421py068433462h4l6eqcx916; expires=Sun, 26 Nov 2023 14:47:50 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
ibrapush.com/pfe/current/tag.min.js?z=4825330
200 OK 0 B URL HTTP/2 ibrapush.com/pfe/current/tag.min.js?z=4825330
IP
GET /pfe/current/tag.min.js?z=4825330 HTTP/1.1
Host: ibrapush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:49 GMT
content-type: application/javascript
last-modified: Thu, 24 Nov 2022 15:53:54 GMT
etag: W/"637f9392-39be"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
link: <https://my.rtmark.net>; rel=dns-prefetch;, <https://my.rtmark.net>; rel=preconnect
content-encoding: gzip
X-Firefox-Spdy: h2
nanouwho.com/1?z=4825329
200 OK 0 B IP
Analyzer Verdict Alert quad9 Sinkholed
GET /1?z=4825329 HTTP/1.1
Host: nanouwho.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:49 GMT
content-type: text/javascript
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
x-trace-id: 40b445ac90bce62aa6ab99cb65fd1d16
access-control-expose-headers: X-Sc
x-sc: 5wN5TBXYOKTK7Tm5R_5lMxhDB40an0juYUMJQt9xJnB946JRGZfHyNKxSwQS990YxYsnd5HC_c7SQW4INSdWVSUVWp8=
set-cookie: scm=1; expires=Sun, 26 Nov 2023 14:47:49 GMT; secure; SameSite=None
OAID=76e8e6c4a4ab4065b82c1e65291061a6; expires=Sun, 26 Nov 2023 14:47:49 GMT; secure; SameSite=None
oaidts=1669474069; expires=Sun, 26 Nov 2023 14:47:49 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/interstitial/software/flashPlayer/mac/multi/1/css/style.css
200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/interstitial/software/flashPlayer/mac/multi/1/css/style.css
IP
GET /sb/interstitial/software/flashPlayer/mac/multi/1/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.9xmovies.pro
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:47:52 GMT
content-type: text/css
last-modified: Wed, 01 Sep 2021 12:22:34 GMT
etag: W/"612f708a-11aa"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uiqw4xLw7IptkelkAkW%2B9Amwh1UnhRGcrngEaAyIALeAyigP5xFx7UAXO4SFwoesjjk5L2VKlEvDbU4GdbUfnPmDX0cYTpQNWFKHUAbvunfY3LEXhjSt7ZH7lYvDUdK6Ei%2FdY8Pze%2BjR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77036bf96bd17327-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/interstitial/software/flashPlayer/mac/multi/1/js/script.js
200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/interstitial/software/flashPlayer/mac/multi/1/js/script.js
IP
GET /sb/interstitial/software/flashPlayer/mac/multi/1/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.9xmovies.pro
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:47:53 GMT
content-type: application/javascript
last-modified: Wed, 01 Sep 2021 12:22:36 GMT
etag: W/"612f708c-7082"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PwVvKCO0mXrxil3%2FFYoD6SSF4wj2O1VGGikVBhwjekOH7T0byU8AT4rcvdfHSLmCUdAzrDaNzDz7CAr2dLLDpu%2F%2FSX8z1iRZ2N6y65JamT%2BMvr8dSczPj%2FWQE6gJTpvgbowlvkdEBO6f"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77036bfa3cf67327-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
bedrapiona.com/5/4825331/?oo=1&js_build=iclick-v1.454.0
200 OK 0 B URL HTTP/2 bedrapiona.com/5/4825331/?oo=1&js_build=iclick-v1.454.0
IP
GET /5/4825331/?oo=1&js_build=iclick-v1.454.0 HTTP/1.1
Host: bedrapiona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.9xmovies.pro
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:49 GMT
content-type: application/json
x-trace-id: 2b422b5291d34daf78b7ae27f721c436
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: https://www.9xmovies.pro
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=b22991b174d846eda41dc535d1eb2779; expires=Sun, 26 Nov 2023 14:47:49 GMT; path=/; secure; SameSite=None
oaidts=1669474069; expires=Sun, 26 Nov 2023 14:47:49 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
bedrapiona.com/5/4825354/?oo=1&js_build=iclick-v1.454.0
200 OK 0 B URL HTTP/2 bedrapiona.com/5/4825354/?oo=1&js_build=iclick-v1.454.0
IP
GET /5/4825354/?oo=1&js_build=iclick-v1.454.0 HTTP/1.1
Host: bedrapiona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.9xmovies.pro
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:49 GMT
content-type: application/json
x-trace-id: 010801bb17382fe6fbe1f5ddabb96563
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: https://www.9xmovies.pro
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=3871c0f9a7d94622b3cde6a2b194d377; expires=Sun, 26 Nov 2023 14:47:49 GMT; path=/; secure; SameSite=None
oaidts=1669474069; expires=Sun, 26 Nov 2023 14:47:49 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
eehuzaih.com/401/5031525
200 OK 0 B IP
Analyzer Verdict Alert quad9 Sinkholed
GET /401/5031525 HTTP/1.1
Host: eehuzaih.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:48 GMT
content-type: application/javascript
x-trace-id: 5088513b7deb6e19620502dd5e4a88bd
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
set-cookie: OAID=9dec102bbdf647ab960aaed91bd20b04; expires=Sun, 26 Nov 2023 14:47:48 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
tobaltoyon.com/pfe/current/tag.min.js?z=4825372
200 OK 0 B URL HTTP/2 tobaltoyon.com/pfe/current/tag.min.js?z=4825372
IP
GET /pfe/current/tag.min.js?z=4825372 HTTP/1.1
Host: tobaltoyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:48 GMT
content-type: application/javascript
last-modified: Thu, 24 Nov 2022 15:53:54 GMT
etag: W/"637f9392-39be"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
rndskittytor.com/400/4825382
200 OK 0 B URL HTTP/2 rndskittytor.com/400/4825382
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /400/4825382 HTTP/1.1
Host: rndskittytor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:48 GMT
content-type: application/javascript
x-trace-id: ba0a25e5afeb2114dc5113291187d7bd
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
set-cookie: OAID=5b3ba55cb395471a8e49e82b65e4c865; expires=Sun, 26 Nov 2023 14:47:48 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
tobaltoyon.com/pfe/current/universal.min.js?v=3.1.405
200 OK 0 B URL HTTP/2 tobaltoyon.com/pfe/current/universal.min.js?v=3.1.405
IP
GET /pfe/current/universal.min.js?v=3.1.405 HTTP/1.1
Host: tobaltoyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.9xmovies.pro/
Origin: https://www.9xmovies.pro
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:49 GMT
content-type: application/javascript
last-modified: Thu, 24 Nov 2022 15:53:54 GMT
etag: W/"637f9392-180b9"
access-control-allow-origin: https://www.9xmovies.pro
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
upgulpinon.com/9?z=4825384&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=9&sah=1002&drf=&hil=1&ist=0&oaid=w0ni774421py068433462h4l6eqcx916
200 OK 0 B URL HTTP/2 upgulpinon.com/9?z=4825384&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=9&sah=1002&drf=&hil=1&ist=0&oaid=w0ni774421py068433462h4l6eqcx916
IP
POST /9?z=4825384&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.9xmovies.pro%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=9&sah=1002&drf=&hil=1&ist=0&oaid=w0ni774421py068433462h4l6eqcx916 HTTP/1.1
Host: upgulpinon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 267
Origin: https://www.9xmovies.pro
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Cookie: scm=1; OAID=26a85a97f97c4efba4128df027271748; oaidts=1669474068
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:47:50 GMT
content-type: application/json
access-control-allow-credentials: true
access-control-allow-origin: https://www.9xmovies.pro
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
x-trace-id: 8b6ea775274d4226c59c996c7e1d5517
access-control-expose-headers: X-Sc
set-cookie: OAID=w0ni774421py068433462h4l6eqcx916; expires=Sun, 26 Nov 2023 14:47:50 GMT; secure; SameSite=None
oaidts=1669474068; expires=Sun, 26 Nov 2023 14:47:50 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
iclickcdn.com/tag.min.js
200 OK 0 B IP
GET /tag.min.js HTTP/1.1
Host: iclickcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:47:48 GMT
content-type: text/javascript; charset=utf-8
x-trace-id: a4721fc628d57a82c7c0f3c502c655cc
cache-control: max-age=86400
last-modified: Wed, 23 Nov 2022 10:06:19 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
expires: Sun, 27 Nov 2022 05:57:21 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 31827
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1dq9hZ095%2FwePyNnM4%2FF8%2FsbA0KglbYimrY93q%2BYWRaaDBC%2FK6Ye1%2B3U6xqLzeDoS%2BJXl8RHNYaaMY8itlxF4phCo%2FX6HYvOKZDQvrk8w5Bt3uCS4QpMR0pbYbTYqGg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77036be218c0b505-OSL
content-encoding: br
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
200 OK 0 B URL HTTP/2 stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
IP
GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9xmovies.pro/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:47:48 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 11/15/2021 21:49:00
cdn-proxyver: 1.0
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 723
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: 2729ae8f2fc6c761bdc17d91cc795f58
cdn-cache: HIT
cf-cache-status: HIT
age: 14920822
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 77036be20e0fb4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
142.250.74.179
139.45.197.242
104.22.32.172
23.36.77.32
18.185.190.54
31.13.72.12