{"report_id":"876b59b7-977f-467e-9088-039ba6da5f4a","version":6,"status":"done","tags":[],"date":"2024-10-28T05:31:12Z","url":{"schema":"http","addr":"6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"title":"6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-01-06T05:31:12Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"6oszwqmr.xyz","ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-07-30","domain_rank":0,"first_seen":"2024-10-22T13:31:06.460135Z","last_seen":"2024-10-22T13:31:06.460135Z","alert_count":15,"request_count":15,"received_data":1187336,"sent_data":7030,"comment":"","tags":null,"fingerprints":null},{"fqdn":"videothumbs.me","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-03-25","domain_rank":0,"first_seen":"2024-03-25T12:39:58Z","last_seen":"2024-10-27T09:24:23.724901Z","alert_count":0,"request_count":1,"received_data":20985,"sent_data":423,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mybiddd.com","ip":{"addr":"94.130.197.239","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2024-08-06","domain_rank":0,"first_seen":"2024-10-17T17:44:21.470103Z","last_seen":"2024-10-25T07:33:27.737854Z","alert_count":0,"request_count":2,"received_data":2852,"sent_data":2824,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kts.cvastico.com","ip":{"addr":"62.122.173.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2022-08-10","domain_rank":0,"first_seen":"2022-08-12T15:13:49Z","last_seen":"2024-10-21T15:15:17.211108Z","alert_count":0,"request_count":2,"received_data":1560,"sent_data":1355,"comment":"","tags":null,"fingerprints":null},{"fqdn":"be2719.rcr22.ams01.cdn112.com","ip":{"addr":"91.211.89.136","port":443,"asn":174,"as":"COGENT-174","country":"Ukraine","country_code":"UA"},"domain_registered":"2023-05-27","domain_rank":0,"first_seen":"2023-05-27T10:38:56Z","last_seen":"2024-10-22T18:16:34.37112Z","alert_count":0,"request_count":4,"received_data":1585663,"sent_data":2303,"comment":"","tags":null,"fingerprints":null},{"fqdn":"uqqmj868.xyz","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-09-24","domain_rank":0,"first_seen":"2024-10-14T17:45:27.816835Z","last_seen":"2024-10-21T22:51:26.67208Z","alert_count":0,"request_count":1,"received_data":808,"sent_data":497,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xml-v4.tri.media","ip":{"addr":"174.137.133.17","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"domain_registered":"2014-12-02","domain_rank":0,"first_seen":"2023-07-02T03:47:49Z","last_seen":"2024-10-27T10:21:53.565139Z","alert_count":0,"request_count":1,"received_data":217,"sent_data":522,"comment":"","tags":null,"fingerprints":null},{"fqdn":"popdemission.com","ip":{"addr":"62.122.168.42","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-03-20","domain_rank":0,"first_seen":"2024-03-20T14:59:36Z","last_seen":"2024-10-27T19:40:08.895696Z","alert_count":0,"request_count":1,"received_data":532,"sent_data":732,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kaminari.systems","ip":{"addr":"31.220.27.154","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2022-10-31","domain_rank":0,"first_seen":"2022-10-31T14:47:03Z","last_seen":"2024-10-23T04:06:50.996707Z","alert_count":0,"request_count":1,"received_data":50158,"sent_data":671,"comment":"","tags":null,"fingerprints":null},{"fqdn":"epededonemile.com","ip":{"addr":"108.157.229.107","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2024-07-08","domain_rank":0,"first_seen":"2024-10-14T06:01:37.666279Z","last_seen":"2024-10-21T08:19:34.037665Z","alert_count":0,"request_count":1,"received_data":2641,"sent_data":517,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ieyri61b.xyz","ip":{"addr":"172.67.207.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2024-08-01","domain_rank":0,"first_seen":"2024-10-23T13:38:57.903637Z","last_seen":"2024-10-23T13:38:57.903637Z","alert_count":0,"request_count":1,"received_data":71867,"sent_data":397,"comment":"","tags":null,"fingerprints":null},{"fqdn":"accounts.google.com","ip":{"addr":"64.233.162.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":81,"first_seen":"2016-03-20T13:44:49Z","last_seen":"2024-10-23T01:32:29.492638Z","alert_count":0,"request_count":1,"received_data":767,"sent_data":680,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"Mnemonic Secure DNS","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-28","alert":"Sinkholed","trigger":"6oszwqmr.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-28","alert":"Sinkholed","trigger":"6oszwqmr.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-28","alert":"Sinkholed","trigger":"6oszwqmr.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-28","alert":"Sinkholed","trigger":"6oszwqmr.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-28","alert":"Sinkholed","trigger":"6oszwqmr.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-28","alert":"Sinkholed","trigger":"6oszwqmr.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-28","alert":"Sinkholed","trigger":"6oszwqmr.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-28","alert":"Sinkholed","trigger":"6oszwqmr.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-28","alert":"Sinkholed","trigger":"6oszwqmr.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-28","alert":"Sinkholed","trigger":"6oszwqmr.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-28","alert":"Sinkholed","trigger":"6oszwqmr.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-28","alert":"Sinkholed","trigger":"6oszwqmr.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-28","alert":"Sinkholed","trigger":"6oszwqmr.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-28","alert":"Sinkholed","trigger":"6oszwqmr.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-28","alert":"Sinkholed","trigger":"6oszwqmr.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"6oszwqmr.xyz/js/xupload.js","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2609e3a9490dcfe748407d3af317c472","sha1":"af55b2b16e9190e09407f67ffae4ca705ea6f112","sha256":"c3c7c3de97ef15965def93fc9317e82854b979aa1a7980fde49b873a04aab85d","sha512":"b91625f27e505e5b1aa63aaa948174ce18e7b53c6e30179e483b59695a8b9b6be605ada835214e833720d536a79819b102459c3d97be28cd1e401f6ba5e74990","ssdeep":"192:INTUEE9YGs1axsrl6IsZWnrbll621w+4UWdRebMQ4WdReDyYQaQv7OsaaFg+Bnqv:aTfy+tBlV9GRebVReDyYS7OsaaF10fWe","tlshash":"3822664abaa339912a7730390bbf52043b398407104aca54bd5cd6c4af8452897ffbfd","size":10867,"data":"","first_seen":"2023-03-07T01:24:29Z","last_seen":"2026-01-04T16:13:34.876893Z","times_seen":501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6oszwqmr.xyz/player/jw8/vast.js","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3cd85ca1814c3fd976764bf6b83b989d","sha1":"90e931622205c6adfbc75cfe681563a127580f05","sha256":"2e4fe3d8b3565a3f8b5ec0ecfe0e5f26a756401b6847dd475327793da41897f5","sha512":"79ef69e9df2dc8184962724bf27bffca5a509c89d5e9a9ae8f350b1f2291a4851b7ce31b2649f2678097e92559cd4f31344b4996f7abf1c0fcd7af71a0a3cc7b","ssdeep":"1536:clcxhF+/+IrkRT+N+uD9CwS65+sDS0VjE3vuV1WuSpimRmmy/k0xeo+egJvLc9gD:cSpuD9CG05Vh6gV5hQfs","tlshash":"8da3a78e7395b52146d2a0b8603f01067337160f680e826cf56aedea5c7da4e727bf74","size":107114,"data":"","first_seen":"2023-09-18T06:50:32Z","last_seen":"2026-01-17T22:53:50.787658Z","times_seen":1185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6oszwqmr.xyz/js/jquery.js","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-29T15:35:27.032693Z","times_seen":457436,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"db3498662496c15148e54c5507b3656d","sha1":"c745063e70418ef97a7e779c91038245e7d5f0f3","sha256":"3801089037879aa21d4396497492efcacbb5908ec4a16ed6c7e846fee817e6b7","sha512":"e5d0e4d2f4e5888a980b5e9148011723f2a86f7b61fad87bf23ea87f288554d39b03bb62e197dc71429dfd38878ed266f4487388782f86b33070f12b51d3c4d3","ssdeep":"","tlshash":"d0c04c17275cd439d539ea39c920b5d7b92b606491129a8c3648246c73530095c814bb","size":140,"data":"","first_seen":"2024-10-28T05:31:14.567043Z","last_seen":"2024-10-28T05:31:14.567043Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9f65a1ea61c99521274aa8cae75cf64c","sha1":"8f6c4b1e4d6b97ba85a557d2303f501cf834fe96","sha256":"63d1ba1f37f9df17aa589c2b237b36897935faf9c1263c90b1baf149ea8374c1","sha512":"4df09d0f909f7cf5978352741ca18eef2e6adfab4a98b34d3e6c891bf1ea10a0054832313b5290c1536b464ee5ef966da4a7e986fab1b13e587dd2076a326b7a","ssdeep":"","tlshash":"c7f00e942cd840244373002527bb9248b47969392c0aed14f94c84812f99ebc08bb90c","size":514,"data":"","first_seen":"2024-04-13T15:29:14Z","last_seen":"2025-04-05T17:24:57.232946Z","times_seen":460,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kts.cvastico.com/in/885/?subid=2044015014\u0026domain=nodomain\u0026target_id=0","fqdn":"kts.cvastico.com","domain":"cvastico.com","tld":"com"},"ip":{"addr":"62.122.173.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"1411f0bf213c282f8d880865247ba6266cf5156d6e92da60584cd413d4fef464c7f60d","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-29T15:35:16.745016Z","times_seen":14379833,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"41391453b019db05ca990652b5075bef","sha1":"4f559c1c6b1fe6789b8744ea742f9166b701ad05","sha256":"3ca61764edcd256dedea08b377b9205ae61f1186a12bddc526730defd631f5e3","sha512":"478c196e9b743eaab733d5bbf8ffb261374f4732886b03e5d64a6d35d9dd314e57c4e58546d75e9e1049fd20edc1eac2151225e965deb2e93f466d6e1e2fe0de","ssdeep":"","tlshash":"74d022afad9c301293001382dc9eb168e02e28241ce881c6fb212854e9348f8f0a8818","size":202,"data":"","first_seen":"2024-10-23T06:24:39.009898Z","last_seen":"2024-10-28T09:07:36.76406Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6oszwqmr.xyz/js/jquery.cookie.js","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae0c2c5d8f01f7d35bb698bb618a62f7","sha1":"63556a22ddea1c5f23a5cf7d0b6d35c7aab54e20","sha256":"75aef2e95ea7f3a70999396fba0c2ab866f4ff06313cf1b07780d800a5fc1ebc","sha512":"eac94ca9d884692af8bdf12aa6e902a3be4eed0772ad8f2932ac1c3328b83a7351cdf743a409bbc0a3cd385956c08d3203d51c572bb1680489e37330fe27a2bb","ssdeep":"96:uBZph6UDUtp8cNM7GyBRCUKncj1vXuLLwM/ZW3ObB83O8sKtFdCcn71wl:evh6SUtHUCUs8dcBB9Kl+l","tlshash":"8e91e1273a4c133d299217f57aad10d8aa34b7302155d16c784cf6b62354c13cdfb2ea","size":4331,"data":"","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-04-28T08:58:14.960635Z","times_seen":4392,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"47e574848430ac650959aadf82894692","sha1":"729fbfb3360326f829f4b8afdf84d025c4f414af","sha256":"64cc090a104bd6938abcee688b92a8497ee32190bd9c277d80dcbf9ec74006a3","sha512":"e5ab12629a9e26c8471f642c2749949c5f9a0c7393b738f06aa0640ac5d816280c178e2374cb48e8b067aa6674940c12542da98f53f0fd8c2d8cb119e819d452","ssdeep":"","tlshash":"dad05b4e935c40ec61e3151ee11c7941731552a5d511553dfc5c2d21342456f791daa7","size":258,"data":"","first_seen":"2024-10-08T13:07:25Z","last_seen":"2024-12-31T19:38:26.438196Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0e497e8a4bfbd18004add59c513be3ef","sha1":"717ba09d7cb507ac12e973cc4bdccb4d905129d5","sha256":"4fd443a904c4cc7f8547d369967b842fc3ab4a3f82a7202537260d2bfea9769a","sha512":"d2be221c813225007e67eb7298962ed2c7e8d0c0a4fd10171e714bb5f9b83d863b63679e5c36e35d6e95b37faf6e1ff2203e300d4df4aada26884a9eeaeae219","ssdeep":"","tlshash":"7eb0120b6faceafc0a14057ef6297457bf019150b8855838f3782670a423077a81e7f2","size":111,"data":"","first_seen":"2024-10-08T13:07:25Z","last_seen":"2024-10-28T09:07:36.765753Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"110480de368ce37744ce2c4f53ecff08","sha1":"76d0cf501f3c6c4913ee390721bc5bd580dd49c4","sha256":"138c82c0720cf82c9142015b4c81760f4c56a5429dd3a8e15c2d24edf9ab18c8","sha512":"aee25acdb6f823a0ae308bc6e3b2cad099abe55149d63c4d972b3b0548441d3d90a67e945fcce10dba827769d87f3c0830cfc3b4784c9f59f4d1e709ce4842ee","ssdeep":"","tlshash":"ea5000000000c000000000300000000f000030c3000300c000000000f0300000030000","size":8,"data":"","first_seen":"2023-05-12T12:11:21Z","last_seen":"2026-04-28T10:03:58.414268Z","times_seen":494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6oszwqmr.xyz/js/ls.js","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6784d7271569579cbc7e508fddb3fbb","sha1":"61be0722316952e865893972791486e26961cdda","sha256":"96f2f3c87be4a0582def1b5e1e9e19aa0529adb7fd9277cede56c1eefd906d01","sha512":"d42027f51f276430f53215a68100fea2106e2c4347a28ebf9fd6e11c7c42fff66c5638f8c5981a0f2a15c3ff8a17ee44c8cc5abfef0ebeeafd2f8d8662f41ce0","ssdeep":"","tlshash":"4f41f08275e1d9904be004e728b1c001e638992e705d62e0f7a7de817c9949bcfb57fa","size":2063,"data":"","first_seen":"2023-03-07T12:42:21Z","last_seen":"2026-01-14T01:06:54.841625Z","times_seen":1446,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4f98cf8486a8beb4d2d271b8e9304216","sha1":"112dd81cdd24e37a4554c9a5c5327b30a476acf8","sha256":"77b18c051d8450512853f4643dd7ac0e4c3205b7ec4cd1373ca5ad0dd2f470c3","sha512":"110b22e3e2f501f3dcc8f1dea02efaaa338ae6379f15907e15301de227279570bd997c4dbdb46e3c8814dd61779303c6fd26b9c0dfe53f3a733c1379da5e85aa","ssdeep":"","tlshash":"ca90003208200280ae2c0a20200aa0888820ae3b232208a28bb20a0a08088a0028cbe2","size":43,"data":"","first_seen":"2023-03-08T08:46:55Z","last_seen":"2026-04-29T01:49:06.665455Z","times_seen":1586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ieyri61b.xyz/js/dwarf.js","fqdn":"ieyri61b.xyz","domain":"ieyri61b.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"645c49c2f4d766a0f53aebc6f39c84be","sha1":"2cf649c9048d567904389d8032e28f9b82e688f8","sha256":"637717a3de6b2f9043510f3c9df0ea404eee6df9d6c99a528b4603c590858811","sha512":"efe08785fd5b22e8d5d52b5b135a666dc825114211f9f6851358f7210dea73768208e001d1072086c993d4bacfeb8c791ffcc2d847c836e1162fd8c7e2136709","ssdeep":"768:eo9zshhRfOHrhbwb8zX1AHpY9l8VseFnvxpHwBBEJKvoQF5LDg2Ktb3RLAkbjaHH:/9zsfUK2AHAuaEGDobhLAknyLj","tlshash":"1b63d75d7193700961c2e9fc007f3a4e6467c840b8aa8c9a77b4d782dc7c46d98979fb","size":70990,"data":"","first_seen":"2024-10-23T13:39:03.568923Z","last_seen":"2024-10-28T09:07:36.758824Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6oszwqmr.xyz/js/bafsd.js","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2432aca90e92e0370d2ded2545eb1fa","sha1":"8f1ae40f7dc9c4ccfcb91d04530a1f072e9d06eb","sha256":"89c40275bddb7257d519bda010de1c4df70a30b5f84be325f2ae53168f276cb5","sha512":"7278ab65bac73bbba9750c49161c677ad6d98d8d16f5f692a3b19e99423c2b32a9785a1bd4045321f4ffd0cf3c6270e5fe4b4ab1cc7bbe4f7cdfc3c40bb3f373","ssdeep":"192:Tb2KC3RtGFnoYcAb/XkLM17rbN5rYrWcYYgC/55wJjJUjfQFU75+xCj+8NcC+5wK:WLsrqh56lUb4kochTK","tlshash":"a852428b738da2be86fa33e4c43f2494e97ed272c115c4fab5b58a801d90815c397d79","size":13706,"data":"","first_seen":"2024-10-04T15:55:15Z","last_seen":"2026-04-29T01:49:06.636996Z","times_seen":1328,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"ec03ac81d4770732a794c99071d8bf16","sha1":"f98b40573f032ea2d4ee003c29b47f6b2a23c287","sha256":"eed6d993035e79bf1a35005c77ab3494ca2be9816b0068c08174daf02caffeca","sha512":"5df0807455dfbf00a640e6f80417564287c911ad1e351717003f4d16421dc46759ce7927d5bbddcc633455eb23d756a933790ff3840fe4162371359156c3f1e5","ssdeep":"","tlshash":"a680045f705c14157414c0701404c1101dc7054ccd05d734513405011451cc5447cc07","size":34,"data":"","first_seen":"2024-10-26T13:30:44.645051Z","last_seen":"2025-12-08T22:35:41.686196Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d882b49167571a8dc4de310e0b2e623d","sha1":"426f496e1155dfab34840a7a467866838448c8d0","sha256":"6dc67eafa621e57610ed67c02b1c0c5532e495dfe555dcade99fb81b6744899b","sha512":"aef46b85426812f38eb29a030e1f82d73c053df2d2d9077eb0563f9906353228fd5ffec1d5afc12a76b564031171bf2ec78c994b883ebed865ebe5aad64fc674","ssdeep":"","tlshash":"e3c02b64e22c32c038bfe310486beb2c7503a5337f4b4e54196954aa2c2cd3b705b9f9","size":154,"data":"","first_seen":"2023-03-08T08:46:55Z","last_seen":"2026-04-29T01:49:06.646616Z","times_seen":1574,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"36e0f7e5e53c5804e2188799d503746b","sha1":"6a1df181d1324e3bd50ce865861a990cbe185c7b","sha256":"3685002591a539aa34044215aac57a04d32a0f485bdf1719223803c4a5198dcb","sha512":"643a6da70fa1801f1e6a8293832840b38f905b6bc84a6d3fc81d345314ffcb07f5f57ad982e66f191f6f04b7347364b2571e37a5f14956bdefa5f2192782f181","ssdeep":"","tlshash":"063153b63128347882f6166f7cbb664df07b55512e1e9080a01ce4643828fb9f6338ce","size":1524,"data":"","first_seen":"2023-03-08T08:46:55Z","last_seen":"2026-02-24T20:36:29.365569Z","times_seen":492,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6oszwqmr.xyz/js/dnsads.js?dfp=1\u0026ad_code=2\u0026adsrc=3","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"99eccae6afa72c589ae54b5c3890282a","sha1":"0f102f8f5b556635de65d16cf70fa8269c6761b4","sha256":"b74a58316385de04b054737776e71c160cd60d2d01b5440b32c21651fb0ab8d3","sha512":"01bc413c1695c125b8ab111c60974da99989b618fb674631d998db519996966c569503efb97a3c760b50069e87b6b42891985b00c64810a43935ada075a19d24","ssdeep":"","tlshash":"b19004dd04d17c75cc1c0000040f045f013005035057fd104055cc05d1c7d004134c05","size":38,"data":"","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-04-24T16:13:40.046458Z","times_seen":2614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e9d6cd61779885b139cdf866708495b3","sha1":"77842276411ba2576b8934238e485d87132d6d8e","sha256":"68b45420627478f606328cde6fc6a868aac7328cfa5756b971a5d1e3bfd15df8","sha512":"162ef355737f1368e5d88d0f96eea8fb81cdc303a7ee8d66a21ec0ccd99d954d815507d77d21e8f5f05ba24f7d51e9f6cdcfb87ba059b268c157ab9562eb32c1","ssdeep":"48:IoqZDghZf2hWvA4ETOfM1dhNq+nb3MWyfkMqbQyZMpD6eWx7VIU07RngTnQtzOyW:zICtHM1dh0zjlqEaMpmeRN7RgT0Ths5F","tlshash":"e49145cb2aa8f003378c1fa3ed2a96b7d26d93e574957d03632c76cc2a14d06f165b94","size":4434,"data":"","first_seen":"2024-10-22T03:47:20.417315Z","last_seen":"2025-01-25T22:43:56.186604Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"47a7df3210911e27dfdc28583faa9264","sha1":"fb289b528d31f67e951e5415dd4e0cfca739b654","sha256":"f46f00646225f54664e4d7bb625fb06dbcfc86904826cd3382efa56c4d524ddc","sha512":"c6430fbeb6dc94e8b607f85825c3aa2b6486101fe3df10da8031dc7577bebdab521a32188470000a00d165a87657a8956349684e4ccc1a332b14f4d66f8c08cf","ssdeep":"","tlshash":"a3a002a81264d1729c5915dea80a854c3618b561875976465763b924954c2520274d28","size":60,"data":"","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-02-10T10:28:48.923754Z","times_seen":1349,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6oszwqmr.xyz/player/jw8_26/jwplayer.js?v=5.0.2","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f91de142eed44442bad231961488c5d0","sha1":"ea6c79968011a5b59e444d792f7ab048a1f7e31d","sha256":"b3031ee0f2674c203fe1400df12a96148c4bed344553fc9063c3846ba8466295","sha512":"9870ce81ead889f1a2f26abb9bc4cf17d69abba0eadec70d74e299d52791c66ab4b4669f747ef35e429928ed718d09b31ecdefee26fbb7498f694b56fd8ae370","ssdeep":"1536:lrGRl1EevCcKntukU2YYKDjAPkotbKSrvodmBiScMsz1x5rjk0ECjIUMj7DEYR/H:DeQtqR/wooiAUMj7DT9","tlshash":"5fb31ae631c2b4e643e628daa07a4041f23a0545380dc5a4fa6cede63d67947b177fbc","size":111441,"data":"","first_seen":"2024-04-13T15:29:14Z","last_seen":"2026-04-29T01:49:06.578087Z","times_seen":1532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6oszwqmr.xyz/player/jw8_26/jwplayer.core.controls.js?v=2","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fee77850b6b254569cf03f43a4dfdde4","sha1":"35841d306d3404fbef6825371ffdbcd992ade913","sha256":"50b22ddf7e9cf49716e33660cc9de3c2bbf3cb90f203d8af93810f8f97bdee3f","sha512":"84d9c23a355b9aa6e6d37f4e4090a41a250499a6c3bb8d5808fa2851a376edfe71d7f1d3d35f658266299339ae88c85fc478a820014c19eeed4e026b4cdab683","ssdeep":"3072:wKH7nFuhglX/qZ3ux2wI9Y7J+3qbOXUvDY6MnJMyXR286CcYZ6mfjq:vHxA4/qZ3V3Y7J+30Y6MnJt2lSZ6mfjq","tlshash":"7d641832214256359aea82da76514604b3398085f516cfacff2ceddd4c6e8cb31f6bb4","size":326903,"data":"","first_seen":"2024-03-12T19:48:43Z","last_seen":"2026-04-29T01:49:06.621031Z","times_seen":1806,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6oszwqmr.xyz/player/jw8_26/provider.hlsjs.js?v=2","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f95e38aa7bb0943693b51bd6a7deed0","sha1":"26c89f76894108f76ad23af32ecc6b1e708993ba","sha256":"1b1263b7061aaca7fe0b69168b16cb2401a7fe2ada08ccfdd373ee06c7d125b1","sha512":"664696a45bacbf3ee40fe544f92104f568b10a6cffb6a3fffa9afe351294d00dc0a1883d50cc799a1b1dba0fd00797047729670ee72c19cf0e302539fe63b075","ssdeep":"6144:GCXemC8LqtXLauG9L2aEyflDc2iGLY6I2KlqJxRC9i5q9GYqT:1MXxG9L2By5cbOYRqJxRCG","tlshash":"36943bed7795a02642c2a1a5903f4617633b7d0a3409c1bcfa2be9d75db8849b03bf74","size":422959,"data":"","first_seen":"2024-04-13T15:29:15Z","last_seen":"2026-04-29T01:49:06.616522Z","times_seen":1519,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a64e7f768d0ad9b907d79d8f27752e87","sha1":"b2617219e43c11c4b31c0c6e9d8c56fde7749ac1","sha256":"1ca64b885570255b810d45573fb5d3eb51536047b921166edeebe346f30b3dfe","sha512":"262fc0e4b4ff593a2c2e1e18846c8675b027b2cc255a9c59777019a7795a250e84b80c1e3fe697c131a02d2d4ce9cafc17241b5b3af285495f2a254b602948e6","ssdeep":"96:aC7xtfsZ3yOiaHvuIn9lZlUqR1AlqeQ800rOmDWfN9K9BfffJyqT+rZl1x1DIaO5:aC7x/wTnzACjx4WfN9CfwU+HRp5K","tlshash":"cdd1f92e3c9758478e65569c041f6344a3622c17bf25c120f1e19a8b7bd3b90b2eb3dc","size":6444,"data":"","first_seen":"2024-10-28T05:31:14.589525Z","last_seen":"2024-10-28T05:31:14.589525Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":[{"md5":"6bd27b6b738af6a37136a7bd06feacc4","sha1":"b65d3d07d6b1a7da4f9f74db288ddf7d8bc4bdba","sha256":"2ea2a85fc544f0d011f74057cc5565f4892ca3a0893c4a07d2b8725c809177e3","sha512":"8d637f0e522e98c8f68755117e8d390845714a0426d84b1dddc385314cecccb90fd25a54d667a6af95dc3455bfb4a82aed670f461271c24de55585a51ef4458d","ssdeep":"192:u6wOK8JWiIHlIfhzLuWCp+o8Y18ww9hphupt:uJOK8YHlIpzLuWS+o808wAhphuv","tlshash":"d4f1e95ee5941c2bc17362f87e837104223b4e51de9ccac8f8b21584217959635bfe8d","size":7757,"data":"","first_seen":"2024-10-28T05:31:14.591858Z","last_seen":"2024-10-28T05:31:14.591858Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"6oszwqmr.xyz/js/dnsads.js?dfp=1\u0026ad_code=2\u0026adsrc=3","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","date":"2024-10-28T05:30:39.621Z","timestamp":1730093439621,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6oszwqmr.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Sep 2024 13:41:49 GMT","end":"Thu, 26 Dec 2024 13:41:48 GMT"},"fingerprint":{"sha1":"2A:E1:7C:BD:92:46:C2:FF:11:03:8B:CC:44:03:FF:5D:95:3A:EC:0C","sha256":"C7:A5:3D:4A:5C:F6:2B:DF:02:C3:23:52:68:61:A8:1E:08:33:2C:58:54:DB:BB:F7:ED:84:E4:1C:EB:77:96:9C"}}},"request":{"raw":"GET /js/dnsads.js?dfp=1\u0026ad_code=2\u0026adsrc=3 HTTP/1.1\r\nHost: 6oszwqmr.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 28 Oct 2024 05:30:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 38\r\nlast-modified: Mon, 13 Sep 2021 15:50:14 GMT\r\netag: \"613f7336-26\"\r\nexpires: Tue, 29 Oct 2024 12:33:26 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: HIT\r\nage: 493033\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=fKX9gORwmhd%2BqwJ0eqqQTZcwiqQfbbRHyq1Hl2y1Snuc1nbheivWr0Pl4o81h8SJTfQjfDHry97RSvJTzBbW0dHpqVmh569nN5lAUNfSEO67X0ebdAig5PpIlXTvrxg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8d9888fd9ce256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=19797\u0026sent=27\u0026recv=15\u0026lost=0\u0026retrans=0\u0026sent_bytes=16149\u0026recv_bytes=3181\u0026delivery_rate=2450\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=dc40a57a2fb08041\u0026ts=181\u0026x=1\", cfExtPri, cfHdrFlush;dur=44\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38,"size_decoded":38,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"99eccae6afa72c589ae54b5c3890282a","sha1":"0f102f8f5b556635de65d16cf70fa8269c6761b4","sha256":"b74a58316385de04b054737776e71c160cd60d2d01b5440b32c21651fb0ab8d3","sha512":"01bc413c1695c125b8ab111c60974da99989b618fb674631d998db519996966c569503efb97a3c760b50069e87b6b42891985b00c64810a43935ada075a19d24","ssdeep":"","tlshash":"eb8000ee08e2bcbec02c0000000e02a802b00c00a023ac20a00e8e0233e2e20c228c3a","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-04-24T16:13:40.046458Z","times_seen":2614,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-28","alert":"Sinkholed","trigger":"6oszwqmr.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"videothumbs.me/72p1shtbayoc.jpg","fqdn":"videothumbs.me","domain":"videothumbs.me","tld":"me"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","date":"2024-10-28T05:30:40.249Z","timestamp":1730093440249,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"videothumbs.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Sep 2024 10:33:09 GMT","end":"Tue, 17 Dec 2024 10:33:08 GMT"},"fingerprint":{"sha1":"C1:4F:45:F9:18:0B:29:97:8B:ED:6F:9D:8C:05:3F:CB:88:3E:D2:BF","sha256":"34:FB:36:5B:87:D6:DC:66:DA:25:96:64:5A:B4:D5:67:E5:88:F3:E7:7F:56:D7:A9:AD:09:6E:70:82:D2:B8:A2"}}},"request":{"raw":"GET /72p1shtbayoc.jpg HTTP/1.1\r\nHost: videothumbs.me\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://6oszwqmr.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 28 Oct 2024 05:30:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20052\r\nlast-modified: Thu, 13 Apr 2023 04:04:04 GMT\r\netag: \"64377f34-4e54\"\r\nexpires: Mon, 04 Nov 2024 00:51:13 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nage: 71371\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TG3G0MVujRJCYIMYDPAhgkuZ1nUhhrFJ04t47UoZV0Em%2F87FLIylB478Y7P896T578eulyq1XpzvIFwE4vAs9pu5Q8ZqKK4CpmmCKRxDmi0d1yUsWSvJI4oUZ1AjBsRHBg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8d9889021868b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=16538\u0026sent=6\u0026recv=9\u0026lost=0\u0026retrans=0\u0026sent_bytes=3208\u0026recv_bytes=1045\u0026delivery_rate=260932\u0026cwnd=252\u0026unsent_bytes=0\u0026cid=495d28f492c5e71a\u0026ts=45\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20052,"size_decoded":20052,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.32.100\", baseline, precision 8, 720x405, components 3","md5":"7b4fdb2be99bb03b4e17fb61f9efcadb","sha1":"b8870b9b6e2642e8ab1f54f0ba4e0b7b921dc3e4","sha256":"aedd2d86853aa7c2c9151e835772cc65f20c646ea8180c61579d5bf5c1f3bf68","sha512":"473872f2479b4172b955e29854d379e58d345ae109cb4e9e082cbaa4b40ec32fb8ff31b36e37b8add58404ba776260b54ae32143fede5e030d212115de63e66b","ssdeep":"384:jhAxquzUxSaUydfFViCUJV1W0JCXyYHcuRq1iajwf02xRiJcy/FAR:jhGqQaSafJFYCUJV8PXyYUPj2xRscy/M","tlshash":"6592d0159e3fd94fd3717df896490a15debd12bc9b4f2a312088e274eacd114a1b205f","first_seen":"2024-10-28T05:31:14.528559Z","last_seen":"2024-10-28T05:31:14.528559Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":88,"dns":35,"connect":17,"send":0,"wait":29,"receive":1,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be2719.rcr22.ams01.cdn112.com/hls2/01/03483/qqsl86ogy3f6_x/master.m3u8?t=fC8bbRW2zcI3kmsu8x9egdUT5gq9v9RbIOK5HwFNM1Y\u0026s=1730093439\u0026e=10800\u0026f=25082241\u0026srv=25\u0026asn=50304\u0026sp=5500\u0026p=","fqdn":"be2719.rcr22.ams01.cdn112.com","domain":"cdn112.com","tld":"com"},"ip":{"addr":"91.211.89.136","port":443,"asn":174,"as":"COGENT-174","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","date":"2024-10-28T05:30:40.268Z","timestamp":1730093440268,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"be2719.rcr22.ams01.cdn112.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Sep 2024 19:53:21 GMT","end":"Mon, 23 Dec 2024 19:53:20 GMT"},"fingerprint":{"sha1":"AD:AD:6E:06:29:22:3F:58:96:5F:71:98:66:48:8D:A4:18:E3:98:B8","sha256":"44:27:9A:04:61:D7:58:1D:D4:B4:C8:D1:E8:37:B0:FB:4F:B2:6F:D2:7A:F6:BB:A8:EA:6D:2D:3E:9E:C5:8A:40"}}},"request":{"raw":"GET /hls2/01/03483/qqsl86ogy3f6_x/master.m3u8?t=fC8bbRW2zcI3kmsu8x9egdUT5gq9v9RbIOK5HwFNM1Y\u0026s=1730093439\u0026e=10800\u0026f=25082241\u0026srv=25\u0026asn=50304\u0026sp=5500\u0026p= HTTP/1.1\r\nHost: be2719.rcr22.ams01.cdn112.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://6oszwqmr.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://6oszwqmr.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 28 Oct 2024 05:30:40 GMT\r\nContent-Type: application/vnd.apple.mpegurl\r\nLast-Modified: Mon, 28 Oct 2024 05:30:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Tue, 29 Oct 2024 02:18:46 GMT\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=259200, no-store, no-cache\r\nSprint-Cache: HIT\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":301,"size_decoded":332,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"80a87cac068656b19a67a3463da10ae6","sha1":"dd14759d278be43395ed3383da6d07aa0f2ef966","sha256":"44f6eea579417875c46907d9600261b45e0ad7ae419b6704a258dbaef88e54ad","sha512":"1994109a27629eb18daa74c74676822fc8af7f3e2ed261683d99babf4e549caeb2945a89db9f249be1ae69d72c486e3d911b283ad4fe70612834168e4e2b6b6c","ssdeep":"","tlshash":"8ee026ed7c7d85b92808c7a51ecc6a3e985b1aee4898e9e4f189036421c1c25a9aa44d","first_seen":"2024-10-28T05:31:14.531105Z","last_seen":"2024-10-28T05:31:14.531105Z","times_seen":1,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":101,"dns":22,"connect":24,"send":0,"wait":32,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be2719.rcr22.ams01.cdn112.com/hls2/01/03483/qqsl86ogy3f6_x/index-v1-a1.m3u8?t=fC8bbRW2zcI3kmsu8x9egdUT5gq9v9RbIOK5HwFNM1Y\u0026s=1730093439\u0026e=10800\u0026f=25082241\u0026srv=25\u0026asn=50304\u0026sp=5500\u0026p=","fqdn":"be2719.rcr22.ams01.cdn112.com","domain":"cdn112.com","tld":"com"},"ip":{"addr":"91.211.89.136","port":443,"asn":174,"as":"COGENT-174","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","date":"2024-10-28T05:30:40.432Z","timestamp":1730093440432,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"be2719.rcr22.ams01.cdn112.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Sep 2024 19:53:21 GMT","end":"Mon, 23 Dec 2024 19:53:20 GMT"},"fingerprint":{"sha1":"AD:AD:6E:06:29:22:3F:58:96:5F:71:98:66:48:8D:A4:18:E3:98:B8","sha256":"44:27:9A:04:61:D7:58:1D:D4:B4:C8:D1:E8:37:B0:FB:4F:B2:6F:D2:7A:F6:BB:A8:EA:6D:2D:3E:9E:C5:8A:40"}}},"request":{"raw":"GET /hls2/01/03483/qqsl86ogy3f6_x/index-v1-a1.m3u8?t=fC8bbRW2zcI3kmsu8x9egdUT5gq9v9RbIOK5HwFNM1Y\u0026s=1730093439\u0026e=10800\u0026f=25082241\u0026srv=25\u0026asn=50304\u0026sp=5500\u0026p= HTTP/1.1\r\nHost: be2719.rcr22.ams01.cdn112.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://6oszwqmr.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://6oszwqmr.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 28 Oct 2024 05:30:40 GMT\r\nContent-Type: application/vnd.apple.mpegurl\r\nLast-Modified: Mon, 28 Oct 2024 05:30:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Tue, 29 Oct 2024 02:18:46 GMT\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=259200, no-store, no-cache\r\nSprint-Cache: HIT\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1235,"size_decoded":26343,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"eb70f087cb30ed4e9d74048c5523008d","sha1":"488e65e6fc1535a5674605c418a7c3e513a1bddc","sha256":"18f5964106c365dbe53ece3d627f1356a03a3fc19c32a5747f5a3631fcd690fb","sha512":"20300f4c021955bfe4c4dc206b14e7cb719d05efc28a4e52f6ebc1af4c8c22a9166e27ce36756954ee96856246d53ec79de1c1502491c00d7af503a7f2fd70e3","ssdeep":"192:hADuZP7txB8SXEtHxBfb4OPre5aiWC2yi0fwCue46:hADg7vB8SXElxBfkYyFLXQe46","tlshash":"c9c2375f18a969f1680dcfa52f9c6dbec5679aba8c28f5f5b0500370349083ea1dc98c","first_seen":"2024-10-28T05:31:14.533539Z","last_seen":"2024-10-28T05:31:14.533539Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be2719.rcr22.ams01.cdn112.com/hls2/01/03483/qqsl86ogy3f6_x/encryption.key?t=fC8bbRW2zcI3kmsu8x9egdUT5gq9v9RbIOK5HwFNM1Y\u0026s=1730093439\u0026e=10800\u0026f=25082241\u0026srv=25\u0026asn=50304\u0026sp=5500\u0026p=","fqdn":"be2719.rcr22.ams01.cdn112.com","domain":"cdn112.com","tld":"com"},"ip":{"addr":"91.211.89.136","port":443,"asn":174,"as":"COGENT-174","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","date":"2024-10-28T05:30:40.473Z","timestamp":1730093440473,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"be2719.rcr22.ams01.cdn112.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Sep 2024 19:53:21 GMT","end":"Mon, 23 Dec 2024 19:53:20 GMT"},"fingerprint":{"sha1":"AD:AD:6E:06:29:22:3F:58:96:5F:71:98:66:48:8D:A4:18:E3:98:B8","sha256":"44:27:9A:04:61:D7:58:1D:D4:B4:C8:D1:E8:37:B0:FB:4F:B2:6F:D2:7A:F6:BB:A8:EA:6D:2D:3E:9E:C5:8A:40"}}},"request":{"raw":"GET /hls2/01/03483/qqsl86ogy3f6_x/encryption.key?t=fC8bbRW2zcI3kmsu8x9egdUT5gq9v9RbIOK5HwFNM1Y\u0026s=1730093439\u0026e=10800\u0026f=25082241\u0026srv=25\u0026asn=50304\u0026sp=5500\u0026p= HTTP/1.1\r\nHost: be2719.rcr22.ams01.cdn112.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://6oszwqmr.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://6oszwqmr.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 28 Oct 2024 05:30:40 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 16\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 29 Oct 2024 01:03:49 GMT\r\nETag: \"5f693e80-10\"\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=259200, no-store, no-cache\r\nSprint-Cache: HIT\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16,"size_decoded":16,"mime_type":"application/octet-stream","magic":"data","md5":"7ed3ac6fa3c20bb70821ff5edecb83c8","sha1":"150c18fd11b0ed2e86dfbe7258b6ce91ff397d51","sha256":"d8892aa97c36d101ed22ebc31df175fb339e9385ebe9e768d907ae81fc66a474","sha512":"78ed12e1a33ca236832950a4507f9b8677ff504dec192fc68efd5c090bb07ab5f53be6008a30ec5422cc924fe64bf1ab66da60db4f8035ae6083a5c091eaf77c","ssdeep":"","tlshash":"0460003000000c00f000003f3003f3c0c000c00c0c0c033030000000c030333cc00003","first_seen":"2024-10-28T05:31:14.536546Z","last_seen":"2024-10-28T05:31:14.536546Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6oszwqmr.xyz/favicon.ico","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","date":"2024-10-28T05:30:40.050Z","timestamp":1730093440050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6oszwqmr.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Sep 2024 13:41:49 GMT","end":"Thu, 26 Dec 2024 13:41:48 GMT"},"fingerprint":{"sha1":"2A:E1:7C:BD:92:46:C2:FF:11:03:8B:CC:44:03:FF:5D:95:3A:EC:0C","sha256":"C7:A5:3D:4A:5C:F6:2B:DF:02:C3:23:52:68:61:A8:1E:08:33:2C:58:54:DB:BB:F7:ED:84:E4:1C:EB:77:96:9C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 6oszwqmr.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh\r\nCookie: lang=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 28 Oct 2024 05:30:40 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Mon, 02 Feb 2015 19:26:28 GMT\r\netag: W/\"54cfcf64-47e\"\r\nexpires: Mon, 04 Nov 2024 00:15:40 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: HIT\r\nage: 18900\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tz3D6M0w9PzvSUZ7%2Bm2IMy4TskRWZqjS3o9JPTnr2HB%2F3jfl%2FCiT8XeK7RtBMtDS0i%2BBLJ44MWPnnbNrgpOm%2Bs%2FbXBqe6cj2OzqKRHhr5EoiKSMfQNvkXoUCMGtjIl4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8d9889005fcd56c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=20100\u0026sent=333\u0026recv=32\u0026lost=0\u0026retrans=0\u0026sent_bytes=369493\u0026recv_bytes=5189\u0026delivery_rate=3416630\u0026cwnd=187200\u0026unsent_bytes=0\u0026cid=dc40a57a2fb08041\u0026ts=619\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5034,"size_decoded":1150,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"f7b404d04734d64575f577b506c22a06","sha1":"485d344ea5ace3529dd472f3fadaa621f046eaf5","sha256":"c53b6a1e519b835191c058325f17d0f3ea15e1507ca47313c94cc54b68741500","sha512":"6d7e6c943f1e253ad80662a1afa62235b605a8657b8f9f132b4a865c4a789030e7acadab3b18d355a09d1a0422435b81c731ba17141126cd02366f5605845ac5","ssdeep":"","tlshash":"552104fa9255b1d8c8426c73f481ffa886191e441b6d5202d4b12d03f8de0f875b1ca7","first_seen":"2023-05-06T16:43:05Z","last_seen":"2026-04-26T03:23:48.702711Z","times_seen":390,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-28","alert":"Sinkholed","trigger":"6oszwqmr.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6oszwqmr.xyz/js/bafsd.js","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","date":"2024-10-28T05:30:39.618Z","timestamp":1730093439618,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6oszwqmr.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Sep 2024 13:41:49 GMT","end":"Thu, 26 Dec 2024 13:41:48 GMT"},"fingerprint":{"sha1":"2A:E1:7C:BD:92:46:C2:FF:11:03:8B:CC:44:03:FF:5D:95:3A:EC:0C","sha256":"C7:A5:3D:4A:5C:F6:2B:DF:02:C3:23:52:68:61:A8:1E:08:33:2C:58:54:DB:BB:F7:ED:84:E4:1C:EB:77:96:9C"}}},"request":{"raw":"GET /js/bafsd.js HTTP/1.1\r\nHost: 6oszwqmr.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 28 Oct 2024 05:30:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 04 Oct 2024 05:52:43 GMT\r\netag: W/\"66ff82ab-358a\"\r\nexpires: Tue, 29 Oct 2024 12:33:26 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: HIT\r\nage: 493033\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DAn76AnHb%2Bc2MHL3iRSIvlv5EQicSDHBfV3H39sEEV80tPIccNxwxoL5YerBs7kEeId80bbty6Bpn6WDFBJYGeqL6fIijZeB8LRJ%2FTL3g94VXAB5GULZRagqHiiMm5g%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8d9888fd9cdd56c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=19797\u0026sent=27\u0026recv=15\u0026lost=0\u0026retrans=0\u0026sent_bytes=16149\u0026recv_bytes=3181\u0026delivery_rate=2450\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=dc40a57a2fb08041\u0026ts=177\u0026x=1\", cfExtPri, cfHdrFlush;dur=13\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10334,"size_decoded":13706,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"c2432aca90e92e0370d2ded2545eb1fa","sha1":"8f1ae40f7dc9c4ccfcb91d04530a1f072e9d06eb","sha256":"89c40275bddb7257d519bda010de1c4df70a30b5f84be325f2ae53168f276cb5","sha512":"7278ab65bac73bbba9750c49161c677ad6d98d8d16f5f692a3b19e99423c2b32a9785a1bd4045321f4ffd0cf3c6270e5fe4b4ab1cc7bbe4f7cdfc3c40bb3f373","ssdeep":"192:Tb2KC3RtGFnoYcAb/XkLM17rbN5rYrWcYYgC/55wJjJUjfQFU75+xCj+8NcC+5wK:WLsrqh56lUb4kochTK","tlshash":"a852428b738da2be86fa33e4c43f2494e97ed272c115c4fab5b58a801d90815c397d79","first_seen":"2024-10-04T15:55:15Z","last_seen":"2026-04-29T01:49:06.636996Z","times_seen":1328,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-28","alert":"Sinkholed","trigger":"6oszwqmr.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be2719.rcr22.ams01.cdn112.com/hls2/01/03483/qqsl86ogy3f6_x/seg-1-v1-a1.ts?t=fC8bbRW2zcI3kmsu8x9egdUT5gq9v9RbIOK5HwFNM1Y\u0026s=1730093439\u0026e=10800\u0026f=25082241\u0026srv=25\u0026asn=50304\u0026sp=5500\u0026p=","fqdn":"be2719.rcr22.ams01.cdn112.com","domain":"cdn112.com","tld":"com"},"ip":{"addr":"91.211.89.136","port":443,"asn":174,"as":"COGENT-174","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","date":"2024-10-28T05:30:40.477Z","timestamp":1730093440477,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"be2719.rcr22.ams01.cdn112.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Sep 2024 19:53:21 GMT","end":"Mon, 23 Dec 2024 19:53:20 GMT"},"fingerprint":{"sha1":"AD:AD:6E:06:29:22:3F:58:96:5F:71:98:66:48:8D:A4:18:E3:98:B8","sha256":"44:27:9A:04:61:D7:58:1D:D4:B4:C8:D1:E8:37:B0:FB:4F:B2:6F:D2:7A:F6:BB:A8:EA:6D:2D:3E:9E:C5:8A:40"}}},"request":{"raw":"GET /hls2/01/03483/qqsl86ogy3f6_x/seg-1-v1-a1.ts?t=fC8bbRW2zcI3kmsu8x9egdUT5gq9v9RbIOK5HwFNM1Y\u0026s=1730093439\u0026e=10800\u0026f=25082241\u0026srv=25\u0026asn=50304\u0026sp=5500\u0026p= HTTP/1.1\r\nHost: be2719.rcr22.ams01.cdn112.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://6oszwqmr.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://6oszwqmr.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 28 Oct 2024 05:30:40 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 1582592\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Tue, 29 Oct 2024 01:03:49 GMT\r\nETag: \"5f693e80-182600\"\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=259200, no-store, no-cache\r\nSprint-Cache: HIT\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1582592,"size_decoded":1582592,"mime_type":"video/mp2t","magic":"data","md5":"40cae0a517cd58cf409d12e2253d3b69","sha1":"2eb0583284048da6945e1ac72fb87b58af0cb1fd","sha256":"eacc8ce6db769b60d022d45749508762d65b9d618bff953bdd197f123eac0ff6","sha512":"a731a96fd4a398b323e5fcbb43c0e74ebad55dccb7ba5451d5925e9eda6c2862cab7108674ff6ae84e074fba9e08c44bb8e0e2d75e986f535349aba07874379a","ssdeep":"49152:hLspxqMYNT85aTEpvqqL4wjXBtIP+NqeKb+6xebW:mzWTAaTuUwj3IGMRx9","tlshash":"e67533c7750294c899e5473f3466cddc2a3ac2c68d83b5e038065e16dac6d1defe660b","first_seen":"2024-10-28T05:31:14.541569Z","last_seen":"2024-10-28T05:31:14.541569Z","times_seen":1,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":31,"receive":285,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6oszwqmr.xyz/adcgi?id=80557588","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","date":"2024-10-28T05:30:40.839Z","timestamp":1730093440839,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6oszwqmr.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Sep 2024 13:41:49 GMT","end":"Thu, 26 Dec 2024 13:41:48 GMT"},"fingerprint":{"sha1":"2A:E1:7C:BD:92:46:C2:FF:11:03:8B:CC:44:03:FF:5D:95:3A:EC:0C","sha256":"C7:A5:3D:4A:5C:F6:2B:DF:02:C3:23:52:68:61:A8:1E:08:33:2C:58:54:DB:BB:F7:ED:84:E4:1C:EB:77:96:9C"}}},"request":{"raw":"GET /adcgi?id=80557588 HTTP/1.1\r\nHost: 6oszwqmr.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh\r\nCookie: lang=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 504 Gateway Timeout\r\ndate: Mon, 28 Oct 2024 05:30:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6323\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=imZGmhsL3jXiJaxrl6dJ3q2hEHVfySEVpZu2v4cGMYDuHjTeunbWWGdcigwG1GuaQV5C3FWt8iiF4hU%2F7UE330ReYYklepWdV1wjigU7491JPWfYVVpZrKAmEZ2N0YQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: same-origin\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nserver: cloudflare\r\ncf-ray: 8d9889054d6356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=22204\u0026sent=335\u0026recv=34\u0026lost=0\u0026retrans=0\u0026sent_bytes=370595\u0026recv_bytes=5507\u0026delivery_rate=22509\u0026cwnd=187200\u0026unsent_bytes=0\u0026cid=dc40a57a2fb08041\u0026ts=1570\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"504","status_text":"Gateway Timeout","fingerprints":null,"data":{"size":6323,"size_decoded":6323,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (394)","md5":"65e2eae683515386ddc9a0ba0432befe","sha1":"61fe15d54776a52110f4d44d27de56cb9b5138ec","sha256":"08631330bf3038ba13d1fca0aeac3d31a1792bbcec8d1e200f3c1ee21acdce6b","sha512":"84f6e4e39f97a931396c4e20f528ad4935961520fcc5cbbc9d0937cac74354c6d3bc4f975812c800ed47b629b04016a2fb829a78a86109c45422a35ba06d864d","ssdeep":"96:1j9jwIjYjbDK/DpKU8DG4Fh2TG4Fw3U24FlAokKmCmna7rR79QaQxR:1j9jhjYjvK/d4DwbRVZv7rl97eR","tlshash":"5fd15471b1f4127a10a382d23695fb5a79e0c613cbff4498b3dcc6632f9ee85a943194","first_seen":"2024-10-28T05:31:14.544406Z","last_seen":"2024-10-28T05:31:14.544406Z","times_seen":1,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-28","alert":"Sinkholed","trigger":"6oszwqmr.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uqqmj868.xyz/","fqdn":"uqqmj868.xyz","domain":"uqqmj868.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","date":"2024-10-28T05:30:49.220Z","timestamp":1730093449220,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uqqmj868.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Sep 2024 06:01:54 GMT","end":"Mon, 23 Dec 2024 06:01:53 GMT"},"fingerprint":{"sha1":"80:B4:6F:5F:E3:AB:82:94:A6:D1:DE:33:8A:98:26:6B:A3:88:64:8D","sha256":"F6:8A:32:38:59:D3:82:85:3F:A8:35:FC:65:43:ED:44:4D:5A:4C:54:D4:CC:08:B7:DC:04:82:62:01:9C:5E:14"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: uqqmj868.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://6oszwqmr.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 28 Oct 2024 05:30:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://epededonemile.com/?fmon=1100125\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=0J5CkOnn4NowPBZ1Ea5VBBZekb2TUVfH5SV28dEpnTiyE6blNuZs4b8OObtwxN5pRFqCsMfhJsL4se7iSvyVpnlt9nR1Z2SoqciBIJT2Z6QS55WXzQtVmWZWOIKqchQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8d98893a1958b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=16515\u0026sent=7\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3204\u0026recv_bytes=1133\u0026delivery_rate=261230\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=3bb65696cc57e1b9\u0026ts=68\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-29T15:35:16.745016Z","times_seen":14379833,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":77,"dns":31,"connect":17,"send":0,"wait":58,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml-v4.tri.media/click?i=1CiyxNEEzHs_0","fqdn":"xml-v4.tri.media","domain":"tri.media","tld":"media"},"ip":{"addr":"174.137.133.17","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","date":"2024-10-28T05:30:49.898Z","timestamp":1730093449898,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.tri.media","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 19 Sep 2024 06:51:24 GMT","end":"Tue, 21 Oct 2025 06:51:23 GMT"},"fingerprint":{"sha1":"3B:55:03:D9:CD:36:CE:5A:84:0F:A1:18:02:6B:14:6E:91:4A:CC:1D","sha256":"62:31:F9:C5:5F:94:8D:63:7D:10:4D:0A:73:22:CA:46:D3:C1:D8:95:E9:67:E8:5C:9D:71:D6:EA:B5:4A:14:BA"}}},"request":{"raw":"GET /click?i=1CiyxNEEzHs_0 HTTP/1.1\r\nHost: xml-v4.tri.media\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6oszwqmr.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Mon, 28 Oct 2024 05:30:50 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store\r\nLocation: https://mybiddd.com/in/p/?spot_id=2004558\u0026cat=25\u0026sub_id=507232629\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-29T15:35:16.745016Z","times_seen":14379833,"resource_available":true,"data":null}},"time_used":841,"timings":{"blocked":354,"dns":39,"connect":94,"send":0,"wait":134,"receive":0,"ssl":216},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6oszwqmr.xyz/assets/css/jw8-theme.css?v=3.0.6","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","date":"2024-10-28T05:30:39.984Z","timestamp":1730093439984,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6oszwqmr.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Sep 2024 13:41:49 GMT","end":"Thu, 26 Dec 2024 13:41:48 GMT"},"fingerprint":{"sha1":"2A:E1:7C:BD:92:46:C2:FF:11:03:8B:CC:44:03:FF:5D:95:3A:EC:0C","sha256":"C7:A5:3D:4A:5C:F6:2B:DF:02:C3:23:52:68:61:A8:1E:08:33:2C:58:54:DB:BB:F7:ED:84:E4:1C:EB:77:96:9C"}}},"request":{"raw":"GET /assets/css/jw8-theme.css?v=3.0.6 HTTP/1.1\r\nHost: 6oszwqmr.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh\r\nCookie: lang=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 28 Oct 2024 05:30:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Apr 2024 15:50:39 GMT\r\netag: W/\"660d7acf-62a2\"\r\nexpires: Thu, 31 Oct 2024 00:03:57 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: HIT\r\nage: 365202\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kc2e%2BOLdZq8Nyz3io4iYD2PYx8%2FzmNl2dEuwxtNHFEJHRdsL%2BJWSNHtibd1XEr9n1h4qChLdCH%2B9T7E796GABtNOW%2BIFoIBUUjiMxccaVeUhOz0tMIzjqQe88%2FLs9k0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8d9888ffef6656c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=21298\u0026sent=140\u0026recv=27\u0026lost=0\u0026retrans=0\u0026sent_bytes=141662\u0026recv_bytes=4705\u0026delivery_rate=850336\u0026cwnd=93600\u0026unsent_bytes=0\u0026cid=dc40a57a2fb08041\u0026ts=546\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10335,"size_decoded":25250,"mime_type":"text/css","magic":"ASCII text, with very long lines (938), with CRLF line terminators","md5":"218f1af32c959506efe281f39309d9a5","sha1":"948fbcdba4275e13fc3e469a04df2d727aabdf4a","sha256":"5425c5e4dfa36e386ee465a9fe20f61290bcd377fe3fd950164c5c6e16301593","sha512":"dade7d9e4bbc40ed8ef3efe25f783875913bc0d32f143de2a68e434ca15515ef7a01c788b58b1949eaf1af95e8e31d70ce2a1f16aca4b0591d9ea2d94eb05f14","ssdeep":"768:jyHyHyoywyfyCy5yAyMyPyby4y/yJyOyDyDyDyRyOyJyTyJyDyGywy8ymyCyUyhv:Smhen8Qn","tlshash":"afb26355c142422d6d3b9678fa337e04ebab258bc746a3f4febc211c8f34186b4e5a54","first_seen":"2024-04-18T11:42:39Z","last_seen":"2026-01-14T01:06:54.87613Z","times_seen":1260,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-28","alert":"Sinkholed","trigger":"6oszwqmr.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mybiddd.com/popunder/in/click/?mid=3988119599313852734\u0026pid=0\u0026site=\u0026sc=NO\u0026usage_type=DCH\u0026subid=507232629\u0026sid=0\u0026cid=0\u0026price=0\u0026is_cpm=1\u0026cpm=0\u0026ecpm=0\u0026crid=\u0026crtid=\u0026tcid=0\u0026out_id=\u0026ver=\u0026ver_c=\u0026refdom=6oszwqmr.xyz\u0026hostname=auc-popunder-hz-2\u0026site_id=0\u0026spot_id=2004558\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=0\u0026burl=\u0026pop_winurl=\u0026ip=91.90.42.154\u0026testab=\u0026px_id=0\u0026adblock=0\u0026auction_host=\u0026mm=\u0026yc=\u0026render_type=\u0026campaign_type=\u0026uniq=\u0026exp=0\u0026resp_type=\u0026iabcat=IAB25\u0026min_cpm=0.035\u0026placement_type_id=7\u0026skin_test=\u0026verify_hash=b8c407a673f708e814f365357ec07d85\u0026score=515.0593812327122\u0026durl=\u0026ml=\u0026tag_ab=\u0026original_bid=0\u0026user_fp=0\u0026v2=0\u0026pop_type=0\u0026space_id=0\u0026real_bid=\u0026skin_id=\u0026vertical_id=\u0026stratagem=\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026ip_mismatch=false\u0026ua_mismatch=false\u0026ssp=3758\u0026rc=0\u0026v2_track=0\u0026otype=0\u0026mn=0\u0026priority=0\u0026bb=0.035\u0026url=https%3A%2F%2Fpopdemission.com%2Fin%2F849%2F%3Fsource%3D507232629%26site_id%3D%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26idzone%3D%26spot_id%3D2004558%26mo%3D%26ve%3D%26ad_tags%3D%26p%3Dhttps%253A%252F%252F6oszwqmr.xyz%252F%26sid%3D0%26katds_labels%3D%26is_iframe%3D1%26btype%3D0%26score%3D515.0593812327122%26bf%3D0.035%26iabcat%3DIAB25%26allowed_labels%3D\u0026pr=\u0026bid_crid=\u0026bid_cid=\u0026ad_tags=\u0026is_interstitial=0\u0026is_direct=2\u0026label_ids=\u0026site_id64=\u0026sp_cl=0\u0026act_sess=0\u0026sp_scr=0\u0026intes=\u0026izb=\u0026ang=0\u0026act_su=0\u0026interest_vertical_ids=\u0026v_scroll_freq=\u0026time_sess=\u0026ext_campaign_id=\u0026scroll_percent=0\u0026empty_clicks=0\u0026aid=0\u0026high_freq_clicks=0\u0026dev_console_activity=0\u0026topics=\u0026client_price=0\u0026direct_client_price=0\u0026o_d=\u0026is_webview=0\u0026timezone_olson=\u0026timezone_ip=Europe/Oslo\u0026offer_label_ids=\u0026client_payment_model=\u0026auction_time=1730093450\u0026is_in_app=0\u0026delivery_method=js_redirect\u0026user_keywords=\u0026keywords=","fqdn":"mybiddd.com","domain":"mybiddd.com","tld":"com"},"ip":{"addr":"94.130.197.239","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","date":"2024-10-28T05:30:50.890Z","timestamp":1730093450890,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"popunder.infrapu.sh","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Oct 2024 12:06:27 GMT","end":"Tue, 07 Jan 2025 12:06:26 GMT"},"fingerprint":{"sha1":"FD:84:64:F6:1B:6A:2F:EA:21:1E:A5:B8:52:65:15:AA:05:00:21:48","sha256":"09:A3:E8:D6:FA:01:89:E4:88:B1:E5:71:E1:D0:46:51:95:62:AF:08:EF:8F:F7:25:CC:3F:5D:82:EF:CA:BF:7A"}}},"request":{"raw":"GET /popunder/in/click/?mid=3988119599313852734\u0026pid=0\u0026site=\u0026sc=NO\u0026usage_type=DCH\u0026subid=507232629\u0026sid=0\u0026cid=0\u0026price=0\u0026is_cpm=1\u0026cpm=0\u0026ecpm=0\u0026crid=\u0026crtid=\u0026tcid=0\u0026out_id=\u0026ver=\u0026ver_c=\u0026refdom=6oszwqmr.xyz\u0026hostname=auc-popunder-hz-2\u0026site_id=0\u0026spot_id=2004558\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=0\u0026burl=\u0026pop_winurl=\u0026ip=91.90.42.154\u0026testab=\u0026px_id=0\u0026adblock=0\u0026auction_host=\u0026mm=\u0026yc=\u0026render_type=\u0026campaign_type=\u0026uniq=\u0026exp=0\u0026resp_type=\u0026iabcat=IAB25\u0026min_cpm=0.035\u0026placement_type_id=7\u0026skin_test=\u0026verify_hash=b8c407a673f708e814f365357ec07d85\u0026score=515.0593812327122\u0026durl=\u0026ml=\u0026tag_ab=\u0026original_bid=0\u0026user_fp=0\u0026v2=0\u0026pop_type=0\u0026space_id=0\u0026real_bid=\u0026skin_id=\u0026vertical_id=\u0026stratagem=\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026ip_mismatch=false\u0026ua_mismatch=false\u0026ssp=3758\u0026rc=0\u0026v2_track=0\u0026otype=0\u0026mn=0\u0026priority=0\u0026bb=0.035\u0026url=https%3A%2F%2Fpopdemission.com%2Fin%2F849%2F%3Fsource%3D507232629%26site_id%3D%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26idzone%3D%26spot_id%3D2004558%26mo%3D%26ve%3D%26ad_tags%3D%26p%3Dhttps%253A%252F%252F6oszwqmr.xyz%252F%26sid%3D0%26katds_labels%3D%26is_iframe%3D1%26btype%3D0%26score%3D515.0593812327122%26bf%3D0.035%26iabcat%3DIAB25%26allowed_labels%3D\u0026pr=\u0026bid_crid=\u0026bid_cid=\u0026ad_tags=\u0026is_interstitial=0\u0026is_direct=2\u0026label_ids=\u0026site_id64=\u0026sp_cl=0\u0026act_sess=0\u0026sp_scr=0\u0026intes=\u0026izb=\u0026ang=0\u0026act_su=0\u0026interest_vertical_ids=\u0026v_scroll_freq=\u0026time_sess=\u0026ext_campaign_id=\u0026scroll_percent=0\u0026empty_clicks=0\u0026aid=0\u0026high_freq_clicks=0\u0026dev_console_activity=0\u0026topics=\u0026client_price=0\u0026direct_client_price=0\u0026o_d=\u0026is_webview=0\u0026timezone_olson=\u0026timezone_ip=Europe/Oslo\u0026offer_label_ids=\u0026client_payment_model=\u0026auction_time=1730093450\u0026is_in_app=0\u0026delivery_method=js_redirect\u0026user_keywords=\u0026keywords= HTTP/1.1\r\nHost: mybiddd.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mybiddd.com/in/p/?spot_id=2004558\u0026cat=25\u0026sub_id=507232629\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.16.0\r\ndate: Mon, 28 Oct 2024 05:30:50 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nlocation: https://popdemission.com/in/849/?source=507232629\u0026site_id=\u0026utm1=\u0026utm2=\u0026utm3=\u0026utm4=\u0026idzone=\u0026spot_id=2004558\u0026mo=\u0026ve=\u0026ad_tags=\u0026p=https%3A%2F%2F6oszwqmr.xyz%2F\u0026sid=0\u0026katds_labels=\u0026is_iframe=1\u0026btype=0\u0026score=515.0593812327122\u0026bf=0.035\u0026iabcat=IAB25\u0026allowed_labels=\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-29T15:35:16.745016Z","times_seen":14379833,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"popdemission.com/in/849/?source=507232629\u0026site_id=\u0026utm1=\u0026utm2=\u0026utm3=\u0026utm4=\u0026idzone=\u0026spot_id=2004558\u0026mo=\u0026ve=\u0026ad_tags=\u0026p=https%3A%2F%2F6oszwqmr.xyz%2F\u0026sid=0\u0026katds_labels=\u0026is_iframe=1\u0026btype=0\u0026score=515.0593812327122\u0026bf=0.035\u0026iabcat=IAB25\u0026allowed_labels=","fqdn":"popdemission.com","domain":"popdemission.com","tld":"com"},"ip":{"addr":"62.122.168.42","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","date":"2024-10-28T05:30:50.917Z","timestamp":1730093450917,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"popdemission.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Oct 2024 03:17:08 GMT","end":"Sun, 05 Jan 2025 03:17:07 GMT"},"fingerprint":{"sha1":"80:2C:31:34:88:87:CF:EE:D8:90:3E:88:52:D7:C6:D2:DB:BB:9F:D1","sha256":"EC:93:AD:C8:20:FC:B2:1F:CF:04:6B:4C:5A:10:8D:29:EF:7A:AE:EA:52:11:D4:18:04:53:C2:41:34:51:10:83"}}},"request":{"raw":"GET /in/849/?source=507232629\u0026site_id=\u0026utm1=\u0026utm2=\u0026utm3=\u0026utm4=\u0026idzone=\u0026spot_id=2004558\u0026mo=\u0026ve=\u0026ad_tags=\u0026p=https%3A%2F%2F6oszwqmr.xyz%2F\u0026sid=0\u0026katds_labels=\u0026is_iframe=1\u0026btype=0\u0026score=515.0593812327122\u0026bf=0.035\u0026iabcat=IAB25\u0026allowed_labels= HTTP/1.1\r\nHost: popdemission.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mybiddd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.20.1\r\ndate: Mon, 28 Oct 2024 05:30:51 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nlocation: https://kaminari.systems/v1/click?kmnrKey=891498445\u0026sub1=2004558\u0026u=https%3A%2F%2Fpopdemission.com%2Fin%2F849%2F%3Fsource%3D507232629%26spot_id%3D299762%26p%3Dhttps%253A%252F%252Fgloporn.com%252F\r\npragma: no-cache\r\nvary: *\r\ncache-control: no-cache, no-store, must-revalidate\r\nset-cookie: 849.0=1; expires=Tue, 29 Oct 2024 05:30:50 GMT; path=/; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-29T15:35:16.745016Z","times_seen":14379833,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":133,"dns":35,"connect":22,"send":0,"wait":32,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaminari.systems/v1/click?kmnrKey=891498445\u0026sub1=2004558\u0026u=https%3A%2F%2Fpopdemission.com%2Fin%2F849%2F%3Fsource%3D507232629%26spot_id%3D299762%26p%3Dhttps%253A%252F%252Fgloporn.com%252F","fqdn":"kaminari.systems","domain":"kaminari.systems","tld":"systems"},"ip":{"addr":"31.220.27.154","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","date":"2024-10-28T05:30:51.087Z","timestamp":1730093451087,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaminari.systems","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Oct 2024 10:55:28 GMT","end":"Wed, 08 Jan 2025 10:55:27 GMT"},"fingerprint":{"sha1":"EF:8F:6F:19:DA:58:76:ED:5D:28:D1:C8:BC:2E:E5:DE:3C:D1:B5:5E","sha256":"93:98:E3:0E:9B:E2:84:9C:04:F6:93:E7:EF:F5:19:29:22:D7:48:56:12:0B:87:DC:C1:E3:F8:60:49:BB:D0:A1"}}},"request":{"raw":"GET /v1/click?kmnrKey=891498445\u0026sub1=2004558\u0026u=https%3A%2F%2Fpopdemission.com%2Fin%2F849%2F%3Fsource%3D507232629%26spot_id%3D299762%26p%3Dhttps%253A%252F%252Fgloporn.com%252F HTTP/1.1\r\nHost: kaminari.systems\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mybiddd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 28 Oct 2024 05:30:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\naccept-ch: Width, Viewport-Width, DPR, Device-Memory, Downlink, RTT, ECT, Save-Data, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version\r\naccess-control-allow-headers: X-Requested-With, Cache-Control, Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":49585,"size_decoded":49585,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-29T15:35:16.745016Z","times_seen":14379833,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":66,"dns":14,"connect":18,"send":0,"wait":55,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"epededonemile.com/?fmon=1100125","fqdn":"epededonemile.com","domain":"epededonemile.com","tld":"com"},"ip":{"addr":"108.157.229.107","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","date":"2024-10-28T05:30:49.360Z","timestamp":1730093449360,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"epededonemile.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Tue, 08 Oct 2024 00:00:00 GMT","end":"Thu, 06 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"46:83:A9:71:37:5C:CA:E8:CC:04:0A:4C:B6:4D:C4:FF:85:97:F1:1B","sha256":"00:A9:68:FB:3A:24:99:16:F6:A2:0C:0B:97:A2:05:88:A5:56:E9:D0:A7:22:7B:90:23:A8:0C:97:D1:2D:23:A9"}}},"request":{"raw":"GET /?fmon=1100125 HTTP/1.1\r\nHost: epededonemile.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6oszwqmr.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/plain\r\ncontent-length: 0\r\nlocation: https://xml-v4.tri.media/click?i=1CiyxNEEzHs_0\r\ndate: Mon, 28 Oct 2024 05:30:49 GMT\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\nset-cookie: csu=62c4e097-a5dd-42f0-82a3-6199e5999a66\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 17c1b187a3afe016510e55151109cc30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: UGG25Ft-xVhjMBXXlKXWkEyVYwpXYAhNRs8YbU3SBJV2g25rwgB-bg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":1908,"size_decoded":1908,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-29T15:35:16.745016Z","times_seen":14379833,"resource_available":true,"data":null}},"time_used":591,"timings":{"blocked":59,"dns":35,"connect":8,"send":0,"wait":473,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6oszwqmr.xyz/css/main.css?v=4","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","date":"2024-10-28T05:30:39.610Z","timestamp":1730093439610,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6oszwqmr.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Sep 2024 13:41:49 GMT","end":"Thu, 26 Dec 2024 13:41:48 GMT"},"fingerprint":{"sha1":"2A:E1:7C:BD:92:46:C2:FF:11:03:8B:CC:44:03:FF:5D:95:3A:EC:0C","sha256":"C7:A5:3D:4A:5C:F6:2B:DF:02:C3:23:52:68:61:A8:1E:08:33:2C:58:54:DB:BB:F7:ED:84:E4:1C:EB:77:96:9C"}}},"request":{"raw":"GET /css/main.css?v=4 HTTP/1.1\r\nHost: 6oszwqmr.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh\r\nCookie: lang=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 28 Oct 2024 05:30:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Sep 2024 18:06:54 GMT\r\netag: W/\"66f5a2be-c03c\"\r\nexpires: Tue, 29 Oct 2024 12:33:26 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: HIT\r\nage: 493033\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=f0uDA%2FFekphBV7QQjWzr7f4FIv9ARpZonfXIgQKn9aDOvgtIpdcukEI0KzbYn5Bx7F%2FfUp4jWxQLh%2Fn73T%2FyZFvfF7vIbGmq7c22ROMeH8jAj6UePiWnUruiBESxXT0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8d9888fd8cca56c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=19797\u0026sent=22\u0026recv=15\u0026lost=0\u0026retrans=0\u0026sent_bytes=10666\u0026recv_bytes=3181\u0026delivery_rate=2450\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=dc40a57a2fb08041\u0026ts=171\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":49212,"size_decoded":49212,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-29T15:35:16.745016Z","times_seen":14379833,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-28","alert":"Sinkholed","trigger":"6oszwqmr.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ieyri61b.xyz/js/dwarf.js","fqdn":"ieyri61b.xyz","domain":"ieyri61b.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","date":"2024-10-28T05:30:39.617Z","timestamp":1730093439617,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ieyri61b.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Sep 2024 09:41:52 GMT","end":"Sat, 28 Dec 2024 09:41:51 GMT"},"fingerprint":{"sha1":"7C:03:59:1C:CB:57:4A:11:C0:F0:35:06:50:5D:94:B0:83:E1:C7:6A","sha256":"1A:CC:DA:7B:78:8F:7B:38:DE:B6:B6:16:7B:ED:72:EE:CB:E3:5F:AD:F5:2F:23:3D:7F:B4:82:5E:B3:E6:CD:14"}}},"request":{"raw":"GET /js/dwarf.js HTTP/1.1\r\nHost: ieyri61b.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://6oszwqmr.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 28 Oct 2024 05:30:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 08 Oct 2024 07:44:38 GMT\r\netag: W/\"6704e2e6-1154e\"\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 2381\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LwNTprdPpeVeBLSTnUwq0oqh6qSLYkyBeY%2BiJDObxE1PC6Gud3tacU58ujkRauUa7Qm1HjkR7L3DcvydSAdYTMswK02l68fGmSFlPrVKv4J2IyRcyPZLHHz0KVddzxk%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8d9888fe4f7556a8-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=16483\u0026sent=6\u0026recv=9\u0026lost=0\u0026retrans=0\u0026sent_bytes=3279\u0026recv_bytes=1149\u0026delivery_rate=262461\u0026cwnd=252\u0026unsent_bytes=0\u0026cid=b24955fc46842ebb\u0026ts=47\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":70990,"size_decoded":70990,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"645c49c2f4d766a0f53aebc6f39c84be","sha1":"2cf649c9048d567904389d8032e28f9b82e688f8","sha256":"637717a3de6b2f9043510f3c9df0ea404eee6df9d6c99a528b4603c590858811","sha512":"efe08785fd5b22e8d5d52b5b135a666dc825114211f9f6851358f7210dea73768208e001d1072086c993d4bacfeb8c791ffcc2d847c836e1162fd8c7e2136709","ssdeep":"768:eo9zshhRfOHrhbwb8zX1AHpY9l8VseFnvxpHwBBEJKvoQF5LDg2Ktb3RLAkbjaHH:/9zsfUK2AHAuaEGDobhLAknyLj","tlshash":"1b63d75d7193700961c2e9fc007f3a4e6467c840b8aa8c9a77b4d782dc7c46d98979fb","first_seen":"2024-10-23T13:39:03.568923Z","last_seen":"2024-10-28T09:07:36.758824Z","times_seen":94,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":107,"dns":61,"connect":18,"send":0,"wait":28,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6oszwqmr.xyz/player/jw8_26/jwplayer.core.controls.js?v=2","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","date":"2024-10-28T05:30:39.982Z","timestamp":1730093439982,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6oszwqmr.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Sep 2024 13:41:49 GMT","end":"Thu, 26 Dec 2024 13:41:48 GMT"},"fingerprint":{"sha1":"2A:E1:7C:BD:92:46:C2:FF:11:03:8B:CC:44:03:FF:5D:95:3A:EC:0C","sha256":"C7:A5:3D:4A:5C:F6:2B:DF:02:C3:23:52:68:61:A8:1E:08:33:2C:58:54:DB:BB:F7:ED:84:E4:1C:EB:77:96:9C"}}},"request":{"raw":"GET /player/jw8_26/jwplayer.core.controls.js?v=2 HTTP/1.1\r\nHost: 6oszwqmr.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 28 Oct 2024 05:30:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 03 Apr 2024 09:09:34 GMT\r\netag: W/\"660d1cce-4fcf7\"\r\nexpires: Tue, 29 Oct 2024 12:34:09 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: HIT\r\nage: 492990\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UrELQwhUxsNDuL5k4iaJ155%2BUUXqs0LSE8Uw5OeeYCocBXPAvGf3pu%2FbVC6KMwd4%2FdBOdm55gV7r1LbPznz2MuMMqygaprlSPf%2BLRtEEz7cPweQtsHjuGVXLnOs4QYM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8d9888ffdf6356c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=21298\u0026sent=146\u0026recv=27\u0026lost=0\u0026retrans=0\u0026sent_bytes=147828\u0026recv_bytes=4705\u0026delivery_rate=850336\u0026cwnd=93600\u0026unsent_bytes=0\u0026cid=dc40a57a2fb08041\u0026ts=554\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":326903,"size_decoded":326903,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-29T15:35:16.745016Z","times_seen":14379833,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-28","alert":"Sinkholed","trigger":"6oszwqmr.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6oszwqmr.xyz/player/jw8_26/jwplayer.js?v=5.0.2","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","date":"2024-10-28T05:30:39.620Z","timestamp":1730093439620,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6oszwqmr.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Sep 2024 13:41:49 GMT","end":"Thu, 26 Dec 2024 13:41:48 GMT"},"fingerprint":{"sha1":"2A:E1:7C:BD:92:46:C2:FF:11:03:8B:CC:44:03:FF:5D:95:3A:EC:0C","sha256":"C7:A5:3D:4A:5C:F6:2B:DF:02:C3:23:52:68:61:A8:1E:08:33:2C:58:54:DB:BB:F7:ED:84:E4:1C:EB:77:96:9C"}}},"request":{"raw":"GET /player/jw8_26/jwplayer.js?v=5.0.2 HTTP/1.1\r\nHost: 6oszwqmr.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 28 Oct 2024 05:30:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 05 Apr 2024 14:58:43 GMT\r\netag: W/\"661011a3-1b351\"\r\nexpires: Tue, 29 Oct 2024 12:33:26 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: HIT\r\nage: 493033\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=il%2FE05x7Hy%2Bqbko1gqgSSO3Pbf5gmoDlf7kW6U47tW1FJCIewATbp2fYUK7ix7qxOB6EKwvhVQxGY2N%2BIIxA8T9UvchgfIb6VQHEWcO3h%2F%2BCO8t9vRWFZPtNIiiaLeA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8d9888fd9ce056c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=19797\u0026sent=27\u0026recv=15\u0026lost=0\u0026retrans=0\u0026sent_bytes=16149\u0026recv_bytes=3181\u0026delivery_rate=2450\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=dc40a57a2fb08041\u0026ts=181\u0026x=1\", cfExtPri, cfHdrFlush;dur=9\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":111441,"size_decoded":111441,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-29T15:35:16.745016Z","times_seen":14379833,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-28","alert":"Sinkholed","trigger":"6oszwqmr.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6oszwqmr.xyz/player/jw8/vast.js","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","date":"2024-10-28T05:30:39.911Z","timestamp":1730093439911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6oszwqmr.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Sep 2024 13:41:49 GMT","end":"Thu, 26 Dec 2024 13:41:48 GMT"},"fingerprint":{"sha1":"2A:E1:7C:BD:92:46:C2:FF:11:03:8B:CC:44:03:FF:5D:95:3A:EC:0C","sha256":"C7:A5:3D:4A:5C:F6:2B:DF:02:C3:23:52:68:61:A8:1E:08:33:2C:58:54:DB:BB:F7:ED:84:E4:1C:EB:77:96:9C"}}},"request":{"raw":"GET /player/jw8/vast.js HTTP/1.1\r\nHost: 6oszwqmr.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 28 Oct 2024 05:30:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 08 Sep 2022 10:34:42 GMT\r\netag: W/\"6319c542-1a26a\"\r\nexpires: Thu, 31 Oct 2024 23:54:11 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: HIT\r\nage: 279388\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FBGWuht2kZ%2BatXng6FxamWRAOIg0QQSE8nB%2BoQPrir77NIuVj5Khlk%2BfFmVwliV0f7LxE0XoBZH0Pen6Yai7rvNEUGhmbvpKE1YOIj0Q1yQeUg%2Buh%2FbDRoTxGp0pv9M%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8d9888ff7f0156c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=20821\u0026sent=108\u0026recv=23\u0026lost=0\u0026retrans=0\u0026sent_bytes=107935\u0026recv_bytes=3767\u0026delivery_rate=1172532\u0026cwnd=93600\u0026unsent_bytes=0\u0026cid=dc40a57a2fb08041\u0026ts=482\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":107114,"size_decoded":107114,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3cd85ca1814c3fd976764bf6b83b989d","sha1":"90e931622205c6adfbc75cfe681563a127580f05","sha256":"2e4fe3d8b3565a3f8b5ec0ecfe0e5f26a756401b6847dd475327793da41897f5","sha512":"79ef69e9df2dc8184962724bf27bffca5a509c89d5e9a9ae8f350b1f2291a4851b7ce31b2649f2678097e92559cd4f31344b4996f7abf1c0fcd7af71a0a3cc7b","ssdeep":"1536:clcxhF+/+IrkRT+N+uD9CwS65+sDS0VjE3vuV1WuSpimRmmy/k0xeo+egJvLc9gD:cSpuD9CG05Vh6gV5hQfs","tlshash":"8da3a78e7395b52146d2a0b8603f01067337160f680e826cf56aedea5c7da4e727bf74","first_seen":"2023-09-18T06:50:32Z","last_seen":"2026-01-17T22:53:50.787658Z","times_seen":1185,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-28","alert":"Sinkholed","trigger":"6oszwqmr.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6oszwqmr.xyz/player/jw8_26/provider.hlsjs.js?v=2","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","date":"2024-10-28T05:30:39.987Z","timestamp":1730093439987,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6oszwqmr.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Sep 2024 13:41:49 GMT","end":"Thu, 26 Dec 2024 13:41:48 GMT"},"fingerprint":{"sha1":"2A:E1:7C:BD:92:46:C2:FF:11:03:8B:CC:44:03:FF:5D:95:3A:EC:0C","sha256":"C7:A5:3D:4A:5C:F6:2B:DF:02:C3:23:52:68:61:A8:1E:08:33:2C:58:54:DB:BB:F7:ED:84:E4:1C:EB:77:96:9C"}}},"request":{"raw":"GET /player/jw8_26/provider.hlsjs.js?v=2 HTTP/1.1\r\nHost: 6oszwqmr.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 28 Oct 2024 05:30:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 05 Apr 2024 14:57:50 GMT\r\netag: W/\"6610116e-6742f\"\r\nexpires: Tue, 29 Oct 2024 12:34:09 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: HIT\r\nage: 492990\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=HEF3lBzoysJHHtZGU%2F5Ry2TmQ1b43S5bXDLJBN%2BF6EDmHU%2FSiBiekyJqR6icL7uzmH1xv%2F1pqiw2MnwCCoOB78YEqYn7uvPGYdkJL0FcKpOyjCGmiKr8E2zw7DwrH50%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8d9888ffef6c56c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=21298\u0026sent=219\u0026recv=27\u0026lost=0\u0026retrans=0\u0026sent_bytes=235262\u0026recv_bytes=4705\u0026delivery_rate=850336\u0026cwnd=93600\u0026unsent_bytes=0\u0026cid=dc40a57a2fb08041\u0026ts=558\u0026x=1\", cfExtPri, cfHdrFlush;dur=6\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":422959,"size_decoded":422959,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-29T15:35:16.745016Z","times_seen":14379833,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-28","alert":"Sinkholed","trigger":"6oszwqmr.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6oszwqmr.xyz/js/jquery.js","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","date":"2024-10-28T05:30:39.612Z","timestamp":1730093439612,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6oszwqmr.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Sep 2024 13:41:49 GMT","end":"Thu, 26 Dec 2024 13:41:48 GMT"},"fingerprint":{"sha1":"2A:E1:7C:BD:92:46:C2:FF:11:03:8B:CC:44:03:FF:5D:95:3A:EC:0C","sha256":"C7:A5:3D:4A:5C:F6:2B:DF:02:C3:23:52:68:61:A8:1E:08:33:2C:58:54:DB:BB:F7:ED:84:E4:1C:EB:77:96:9C"}}},"request":{"raw":"GET /js/jquery.js HTTP/1.1\r\nHost: 6oszwqmr.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 28 Oct 2024 05:30:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 02 Mar 2021 18:58:36 GMT\r\netag: W/\"603e8adc-15d9d\"\r\nexpires: Tue, 29 Oct 2024 12:33:26 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: HIT\r\nage: 493033\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=h%2BvcSnEvGrEeiU2GL5CMwN4E%2BzbtLJEelabmKvr64Tj72ie0hr1bvoxrsMa0CGkkwC2CgAOAzoW%2F76QRJiwenJgfprwlcWoD8R2GMvTZHoo%2BlXDFNTMFPKwUbIMY6Ns%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8d9888fd8ccd56c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=19797\u0026sent=27\u0026recv=15\u0026lost=0\u0026retrans=0\u0026sent_bytes=16149\u0026recv_bytes=3181\u0026delivery_rate=2450\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=dc40a57a2fb08041\u0026ts=177\u0026x=1\", cfExtPri, cfHdrFlush;dur=11\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":89501,"size_decoded":89501,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-29T15:35:27.032693Z","times_seen":457436,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-28","alert":"Sinkholed","trigger":"6oszwqmr.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6oszwqmr.xyz/js/jquery.cookie.js","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","date":"2024-10-28T05:30:39.614Z","timestamp":1730093439614,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6oszwqmr.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Sep 2024 13:41:49 GMT","end":"Thu, 26 Dec 2024 13:41:48 GMT"},"fingerprint":{"sha1":"2A:E1:7C:BD:92:46:C2:FF:11:03:8B:CC:44:03:FF:5D:95:3A:EC:0C","sha256":"C7:A5:3D:4A:5C:F6:2B:DF:02:C3:23:52:68:61:A8:1E:08:33:2C:58:54:DB:BB:F7:ED:84:E4:1C:EB:77:96:9C"}}},"request":{"raw":"GET /js/jquery.cookie.js HTTP/1.1\r\nHost: 6oszwqmr.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 28 Oct 2024 05:30:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 31 May 2011 12:53:56 GMT\r\netag: W/\"4de4e4e4-10eb\"\r\nexpires: Sun, 03 Nov 2024 07:11:42 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: HIT\r\nage: 80337\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DV2yzFF5a4DkMHaaz2M2xj%2F5FMqeXWu9zfaTgPIVKjjp4HGqkwHPeSrvzeJB17sfhCy1brgfGtqJAv6omjbaGJcITpRGwVXk1x%2FrYk0EcS56JHo%2FfvjhWeBLEGbDRg4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8d9888fd8cd156c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=19797\u0026sent=27\u0026recv=15\u0026lost=0\u0026retrans=0\u0026sent_bytes=16149\u0026recv_bytes=3181\u0026delivery_rate=2450\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=dc40a57a2fb08041\u0026ts=176\u0026x=1\", cfExtPri, cfHdrFlush;dur=14\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4331,"size_decoded":4331,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4427), with no line terminators","md5":"c8a0b7f16c38377537c6ab251cb5bc72","sha1":"528e37de81abf523b92ce0b457cb593983ed347a","sha256":"e31179e4a4fffc7faee4f95d4f67ce056d12a57c451dee1dae3e9062b126a00e","sha512":"6fdbc221f738fff294ed9784b96ae1d5c8f239bc1b62bf84b44272122705379511596acc4be7c620b1ec3e4df9860f3de54aacac096834fa274d644d3a04a2d3","ssdeep":"96:OBZph6UDUtp8cNM7GyBRCUKncj1vXuLLwM/ZW3ObB83O8sKtFdCcn71w9:+vh6SUtHUCUs8dcBB9Kl+9","tlshash":"7791e1273a4c133d299217f57aad10d8aa34b7302155d16c784cf6b62354c13cdfb2ea","first_seen":"2023-04-15T17:22:43Z","last_seen":"2025-04-05T17:24:57.227369Z","times_seen":948,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-28","alert":"Sinkholed","trigger":"6oszwqmr.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6oszwqmr.xyz/js/ls.js","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","date":"2024-10-28T05:30:39.616Z","timestamp":1730093439616,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6oszwqmr.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Sep 2024 13:41:49 GMT","end":"Thu, 26 Dec 2024 13:41:48 GMT"},"fingerprint":{"sha1":"2A:E1:7C:BD:92:46:C2:FF:11:03:8B:CC:44:03:FF:5D:95:3A:EC:0C","sha256":"C7:A5:3D:4A:5C:F6:2B:DF:02:C3:23:52:68:61:A8:1E:08:33:2C:58:54:DB:BB:F7:ED:84:E4:1C:EB:77:96:9C"}}},"request":{"raw":"GET /js/ls.js HTTP/1.1\r\nHost: 6oszwqmr.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 28 Oct 2024 05:30:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 14 Feb 2023 11:28:54 GMT\r\netag: W/\"63eb7076-80f\"\r\nexpires: Tue, 29 Oct 2024 12:33:26 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: HIT\r\nage: 493033\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=W8irpBUmwzMXtWzhupaBTa7U56agydm%2B1MWR1DtJxcF2kPFwaKpkvWJx8d2ULBJyRUbRfGo7Ilogm0g0w07CoCXzcfy0ITgpwIK7w466vllvumx1IbP5ozwyo8VxIds%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8d9888fd8cd256c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=19797\u0026sent=20\u0026recv=15\u0026lost=0\u0026retrans=0\u0026sent_bytes=9030\u0026recv_bytes=3181\u0026delivery_rate=2450\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=dc40a57a2fb08041\u0026ts=171\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2063,"size_decoded":2063,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2079), with no line terminators","md5":"66b63b5fefbe179c0fd09e63c11b7e12","sha1":"e657b7d46921bec0bcbd746339ccc03ef4690036","sha256":"52eb05218aa889bcc3b78062d496c747a04db5126648bd3a57cf8c43e3039bf2","sha512":"7bc38e1d824eb5af837b681fd9a7a562630add2e4fba170406e7fbee02526680ff551e50ed285e068d1d14ad5986d238e1c3bd8eb3253ef187aa35001160ce35","ssdeep":"","tlshash":"9e4101c275e1d9904be004e728b1c001e638992e705d62e0f7a7de817c9949bcfb57fa","first_seen":"2023-04-15T20:05:47Z","last_seen":"2025-04-05T17:24:57.20931Z","times_seen":376,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-28","alert":"Sinkholed","trigger":"6oszwqmr.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mybiddd.com/in/p/?spot_id=2004558\u0026cat=25\u0026sub_id=507232629","fqdn":"mybiddd.com","domain":"mybiddd.com","tld":"com"},"ip":{"addr":"94.130.197.239","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","date":"2024-10-28T05:30:50.391Z","timestamp":1730093450391,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"popunder.infrapu.sh","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Oct 2024 12:06:27 GMT","end":"Tue, 07 Jan 2025 12:06:26 GMT"},"fingerprint":{"sha1":"FD:84:64:F6:1B:6A:2F:EA:21:1E:A5:B8:52:65:15:AA:05:00:21:48","sha256":"09:A3:E8:D6:FA:01:89:E4:88:B1:E5:71:E1:D0:46:51:95:62:AF:08:EF:8F:F7:25:CC:3F:5D:82:EF:CA:BF:7A"}}},"request":{"raw":"GET /in/p/?spot_id=2004558\u0026cat=25\u0026sub_id=507232629 HTTP/1.1\r\nHost: mybiddd.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6oszwqmr.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.16.0\r\ndate: Mon, 28 Oct 2024 05:30:50 GMT\r\ncontent-type: text/html\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1908,"size_decoded":1908,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1916), with no line terminators","md5":"02916fbf0d178377efa266f26d027e87","sha1":"dbbebc4248539809d40266e8a96be9866a4dbc8f","sha256":"6fd3f126251bd89274594debf63aeee520e490d7b3114b5f6b788d98a6fbd90c","sha512":"8e5517543565c342ef9635c68b0666a919d687d250830c2ffb463bfb434d0b49792837d10d4950827074d6ae53274ba089e081e426d5292546b3e195e32f4304","ssdeep":"","tlshash":"1341d7492cb3ec6214daca02a211e26c5691fbd77eca4d65f730c73a90a137202acf0d","first_seen":"2024-10-28T05:31:14.556643Z","last_seen":"2024-10-28T05:31:14.556643Z","times_seen":1,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":117,"dns":35,"connect":24,"send":0,"wait":173,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kts.cvastico.com/in/885/?subid=2044015014\u0026domain=nodomain\u0026target_id=0","fqdn":"kts.cvastico.com","domain":"cvastico.com","tld":"com"},"ip":{"addr":"62.122.173.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","date":"2024-10-28T05:30:51.440Z","timestamp":1730093451440,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kts.cvastico.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Oct 2024 03:11:26 GMT","end":"Sun, 05 Jan 2025 03:11:25 GMT"},"fingerprint":{"sha1":"76:43:00:29:CE:A6:FD:0F:74:6C:44:63:DE:72:67:0F:B9:14:94:32","sha256":"DA:FC:6B:CA:13:F8:A9:9B:E7:76:55:77:88:00:70:A2:CB:9A:81:7E:A4:E9:6C:9B:6D:38:0A:D6:FF:C7:5C:D9"}}},"request":{"raw":"GET /in/885/?subid=2044015014\u0026domain=nodomain\u0026target_id=0 HTTP/1.1\r\nHost: kts.cvastico.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kaminari.systems/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Mon, 28 Oct 2024 05:30:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-origin: *\r\nset-cookie: 885.0=1; expires=Tue, 29 Oct 2024 05:30:51 GMT; path=/; secure; SameSite=None\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1202,"size_decoded":1202,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1227), with no line terminators","md5":"9d699eebc042fcdc6b1e2cdf612f7b46","sha1":"3f3bd553e5d614d2641395b303db2064b8cf16c2","sha256":"3cd1f2c6c1147d36768fbc8a412347d3d76fd0c4451d39ec74aadb0b8219b97d","sha512":"e2514ce5cd47bb54d469061e1e18e03956ee3c526253e23b27b8b23f1c1458d4b3b0643494f5058a8d2a1e049b699a3c49442d032fe17a576977748f8afbd92f","ssdeep":"","tlshash":"792121ff2138282f4dc81866187ba31a6cb6256d3e92ca50488cd427d4fdf424c3f60d","first_seen":"2024-10-28T05:31:14.559882Z","last_seen":"2024-10-28T05:31:14.559882Z","times_seen":1,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":103,"dns":34,"connect":21,"send":0,"wait":23,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-10-28T05:30:39.146Z","timestamp":1730093439146,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6oszwqmr.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Sep 2024 13:41:49 GMT","end":"Thu, 26 Dec 2024 13:41:48 GMT"},"fingerprint":{"sha1":"2A:E1:7C:BD:92:46:C2:FF:11:03:8B:CC:44:03:FF:5D:95:3A:EC:0C","sha256":"C7:A5:3D:4A:5C:F6:2B:DF:02:C3:23:52:68:61:A8:1E:08:33:2C:58:54:DB:BB:F7:ED:84:E4:1C:EB:77:96:9C"}}},"request":{"raw":"GET /cwns/72p1shtbayoc?referer=bflix.sh HTTP/1.1\r\nHost: 6oszwqmr.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 28 Oct 2024 05:30:39 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Sun, 27 Oct 2024 05:30:39 GMT\r\nset-cookie: lang=1; domain=.6oszwqmr.xyz; path=/; HttpOnly\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=NC0b3wOkI3lkhxu8giXYbroJ2ObJMxorrl%2Fq%2F3KMuat84zmeRLVKYSRCO%2FBUtyD9CiVGi8NqefjcIlVEc4TMAoEAFnIIXZPK4rILed93syXdpyyEsXN%2FftT336MRG0c%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8d9888fb2bea7130-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=21855\u0026sent=7\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3199\u0026recv_bytes=1141\u0026delivery_rate=262382\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=cb6a4edd3f65af56\u0026ts=234\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15543,"size_decoded":15543,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6495), with CRLF, LF line terminators","md5":"8ebc2093dce2ff5ada2e271396042368","sha1":"ae30f2e962e0bedf1cbc52032ee2e79893c5fd00","sha256":"ad15134afdd9a7568ca364eef655e2fb0e3837fad063fc8777cbf047fae8c04e","sha512":"88aa51febbf5557407b9bbdb75cf1590885bb723337cecedc86099727e179a1277d0afdc3e3aabcf7906c69c7b6da633c55686841355302ecdbc3c85c11d0047","ssdeep":"384:knqSl+drvxqRwZKYjC130amN7Rs0FY7yTLjD+IRkQ:knqSl+dr8dYKINtFPj6WH","tlshash":"9262e8df3d5ae007579c079bdc3e926ae22e9751b505e802b3acb5893a50f50f0e668c","first_seen":"2024-10-28T05:31:14.562794Z","last_seen":"2024-10-28T05:31:14.562794Z","times_seen":1,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":74,"dns":21,"connect":17,"send":0,"wait":218,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-28","alert":"Sinkholed","trigger":"6oszwqmr.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6oszwqmr.xyz/js/xupload.js","fqdn":"6oszwqmr.xyz","domain":"6oszwqmr.xyz","tld":"xyz"},"ip":{"addr":"104.21.29.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","date":"2024-10-28T05:30:39.613Z","timestamp":1730093439613,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6oszwqmr.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Sep 2024 13:41:49 GMT","end":"Thu, 26 Dec 2024 13:41:48 GMT"},"fingerprint":{"sha1":"2A:E1:7C:BD:92:46:C2:FF:11:03:8B:CC:44:03:FF:5D:95:3A:EC:0C","sha256":"C7:A5:3D:4A:5C:F6:2B:DF:02:C3:23:52:68:61:A8:1E:08:33:2C:58:54:DB:BB:F7:ED:84:E4:1C:EB:77:96:9C"}}},"request":{"raw":"GET /js/xupload.js HTTP/1.1\r\nHost: 6oszwqmr.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 28 Oct 2024 05:30:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 04 Aug 2021 13:41:52 GMT\r\netag: W/\"610a9920-2a73\"\r\nexpires: Mon, 04 Nov 2024 01:10:13 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: HIT\r\nage: 15626\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=y%2BzzZPTAn0GUUdE31mfmTzn%2Fh9C4wgVJYv1LATsVTHwKaGnOP5QynfZh7mxB6Y93G04rg9bYHhQnYXZo4SbdSC4PMCgiSvWTjGGh5JIMlmgVK3KfnHQILewB%2FTqgXJU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8d9888fd8cce56c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=19797\u0026sent=15\u0026recv=15\u0026lost=0\u0026retrans=0\u0026sent_bytes=4149\u0026recv_bytes=3181\u0026delivery_rate=2450\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=dc40a57a2fb08041\u0026ts=170\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10867,"size_decoded":10867,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"2609e3a9490dcfe748407d3af317c472","sha1":"af55b2b16e9190e09407f67ffae4ca705ea6f112","sha256":"c3c7c3de97ef15965def93fc9317e82854b979aa1a7980fde49b873a04aab85d","sha512":"b91625f27e505e5b1aa63aaa948174ce18e7b53c6e30179e483b59695a8b9b6be605ada835214e833720d536a79819b102459c3d97be28cd1e401f6ba5e74990","ssdeep":"192:INTUEE9YGs1axsrl6IsZWnrbll621w+4UWdRebMQ4WdReDyYQaQv7OsaaFg+Bnqv:aTfy+tBlV9GRebVReDyYS7OsaaF10fWe","tlshash":"3822664abaa339912a7730390bbf52043b398407104aca54bd5cd6c4af8452897ffbfd","first_seen":"2023-03-07T01:24:29Z","last_seen":"2026-01-04T16:13:34.876893Z","times_seen":501,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-28","alert":"Sinkholed","trigger":"6oszwqmr.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/CheckCookie?continue=https%3A%2F%2Fwww.google.com%2Fintl%2Fen%2Fimages%2Flogos%2Faccounts_logo.png\u0026followup=https%3A%2F%2Fwww.google.com%2Fintl%2Fen%2Fimages%2Flogos%2Faccounts_logo.png\u0026chtml=LoginDoneHtml\u0026checkedDomains=youtube\u0026checkConnection=youtube%3A291%3A1","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"64.233.162.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kts.cvastico.com/in/885/?subid=2044015014\u0026domain=nodomain\u0026target_id=0","date":"2024-10-28T05:30:51.640Z","timestamp":1730093451640,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Oct 2024 08:26:37 GMT","end":"Mon, 30 Dec 2024 08:26:36 GMT"},"fingerprint":{"sha1":"55:5D:8B:B6:E4:3E:24:63:E6:9D:7A:AA:44:56:92:9C:22:7E:CD:5A","sha256":"16:CE:F0:51:CF:7D:02:1B:2A:9E:90:83:4C:A2:2D:89:CE:45:7B:BE:AD:04:F6:D1:65:05:32:8F:A6:2E:18:5F"}}},"request":{"raw":"GET /CheckCookie?continue=https%3A%2F%2Fwww.google.com%2Fintl%2Fen%2Fimages%2Flogos%2Faccounts_logo.png\u0026followup=https%3A%2F%2Fwww.google.com%2Fintl%2Fen%2Fimages%2Flogos%2Faccounts_logo.png\u0026chtml=LoginDoneHtml\u0026checkedDomains=youtube\u0026checkConnection=youtube%3A291%3A1 HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kts.cvastico.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ncontent-type: text/html; charset=UTF-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nset-cookie: __Host-GAPS=1:S87_ioMZTiZC6kfkZywvyIxtmpX49w:UeEf79C8ZN6226Q_;Path=/;Expires=Wed, 28-Oct-2026 05:30:51 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncontent-security-policy: script-src 'nonce-U-nm1lsLnneCETk-65LpRg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\nexpires: Mon, 01-Jan-1990 00:00:00 GMT\r\ncontent-encoding: gzip\r\ndate: Mon, 28 Oct 2024 05:30:51 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-29T15:35:16.745016Z","times_seen":14379833,"resource_available":true,"data":null}},"time_used":490,"timings":{"blocked":222,"dns":35,"connect":30,"send":0,"wait":41,"receive":4,"ssl":155},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kts.cvastico.com/in/2669/?subid=2044015014\u0026target_id=0\u0026domain=nodomain\u0026tt={{tt}}\u0026sid={{sid}}\u0026cid={{cid}}\u0026soi={{soi}}\u0026ts={{ts}}\u0026ad_tags=\u0026click_id=cca11d88-90b2-4473-af27-725479f8a4c9\u0026sub_utm_1={{sub_utm_1}}\u0026sub_utm_2={{sub_utm_2}}\u0026\u0026goo=0","fqdn":"kts.cvastico.com","domain":"cvastico.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://6oszwqmr.xyz/cwns/72p1shtbayoc?referer=bflix.sh","date":"2024-10-28T05:30:51.972Z","timestamp":1730093451972,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kts.cvastico.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Oct 2024 03:11:26 GMT","end":"Sun, 05 Jan 2025 03:11:25 GMT"},"fingerprint":{"sha1":"76:43:00:29:CE:A6:FD:0F:74:6C:44:63:DE:72:67:0F:B9:14:94:32","sha256":"DA:FC:6B:CA:13:F8:A9:9B:E7:76:55:77:88:00:70:A2:CB:9A:81:7E:A4:E9:6C:9B:6D:38:0A:D6:FF:C7:5C:D9"}}},"request":{"raw":"GET /in/2669/?subid=2044015014\u0026target_id=0\u0026domain=nodomain\u0026tt={{tt}}\u0026sid={{sid}}\u0026cid={{cid}}\u0026soi={{soi}}\u0026ts={{ts}}\u0026ad_tags=\u0026click_id=cca11d88-90b2-4473-af27-725479f8a4c9\u0026sub_utm_1={{sub_utm_1}}\u0026sub_utm_2={{sub_utm_2}}\u0026\u0026goo=0 HTTP/1.1\r\nHost: kts.cvastico.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kts.cvastico.com/in/885/?subid=2044015014\u0026domain=nodomain\u0026target_id=0\r\nCookie: 885.0=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-29T15:35:16.745016Z","times_seen":14379833,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}