{"report_id":"a251c952-42b0-480e-b413-80d8b0f137d5","version":6,"status":"done","tags":[],"date":"2025-09-24T22:11:05Z","url":{"schema":"http","addr":"banflix.top","fqdn":"banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.banflix.top/","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"title":"BanFlix - Unscripted Scandal Amateur Porn. Incest, Rape \u0026 more"},"submit":{"url":{"schema":"http","addr":"banflix.top","fqdn":"banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-29T22:11:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":3}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:10:42Z","timestamp":1758751842,"ip_dst":{"addr":"172.67.146.10","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":42484,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-24T22:10:42.188477+0000\",\"flow_id\":1869044884092138,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":42484,\"dest_ip\":\"172.67.146.10\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.banflix.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.banflix.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":672,\"bytes_toclient\":858,\"start\":\"2025-09-24T22:10:42.177386+0000\"}}"}],"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"29312530-32879-ex.uncocleypercha.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"32879.weligillysies.com","ip":{"addr":"88.208.22.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-06-19","domain_rank":0,"first_seen":"2025-07-31T22:44:52.164317Z","last_seen":"2025-09-22T17:52:33.468038Z","alert_count":0,"request_count":1,"received_data":32113,"sent_data":423,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"29312530-32879-ex.uncocleypercha.com","ip":{"addr":"88.208.22.3","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":2486,"sent_data":1437,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"banflix.top","ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-21","domain_rank":1438169,"first_seen":"2025-08-20T22:50:27.39801Z","last_seen":"2025-08-20T22:50:27.39801Z","alert_count":1,"request_count":1,"received_data":69572,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-21T22:11:31.798564Z","alert_count":0,"request_count":6,"received_data":11689,"sent_data":2740,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ads.google.com","ip":{"addr":"142.250.178.46","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":2062,"first_seen":"2013-08-25T13:03:13Z","last_seen":"2025-09-22T17:33:48.191767Z","alert_count":0,"request_count":1,"received_data":208,"sent_data":403,"comment":"","tags":null,"fingerprints":null},{"fqdn":"e.dtscout.com","ip":{"addr":"104.26.11.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-11-01","domain_rank":62244,"first_seen":"2015-09-03T15:34:00Z","last_seen":"2025-09-22T06:35:39.956209Z","alert_count":0,"request_count":2,"received_data":1464,"sent_data":986,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-09-21T22:11:36.895165Z","alert_count":0,"request_count":1,"received_data":285906,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn77.aj2532.bid","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2022-06-30","domain_rank":1901709,"first_seen":"2022-06-30T15:13:43Z","last_seen":"2025-09-22T06:35:39.538027Z","alert_count":0,"request_count":4,"received_data":152732,"sent_data":1798,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"aj2532.bid","ip":{"addr":"49.12.122.118","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2022-06-30","domain_rank":52730,"first_seen":"2022-06-30T15:12:00Z","last_seen":"2025-09-22T06:35:40.432706Z","alert_count":0,"request_count":16,"received_data":59203,"sent_data":14006,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.banflix.top","ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-21","domain_rank":2606035,"first_seen":"2025-08-20T22:50:27.401121Z","last_seen":"2025-09-22T17:52:34.358788Z","alert_count":38,"request_count":36,"received_data":10583809,"sent_data":17879,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-09-21T22:12:58.070161Z","alert_count":0,"request_count":2,"received_data":208518,"sent_data":1003,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-09-21T22:13:28.585612Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":508,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-21T22:11:31.014241Z","alert_count":0,"request_count":3,"received_data":57737,"sent_data":1633,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"172.66.155.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2025-09-21T22:12:37.870013Z","alert_count":0,"request_count":2,"received_data":815356,"sent_data":822,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:10:42Z","timestamp":1758751842,"ip_dst":{"addr":"172.67.146.10","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":42484,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-24T22:10:42.188477+0000\",\"flow_id\":1869044884092138,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":42484,\"dest_ip\":\"172.67.146.10\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.banflix.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.banflix.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":672,\"bytes_toclient\":858,\"start\":\"2025-09-24T22:10:42.177386+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-05-05T08:08:45.92432Z","times_seen":334828,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn77.aj2532.bid/95316cff.js","fqdn":"cdn77.aj2532.bid","domain":"aj2532.bid","tld":"bid"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"74b35dc7991243baca07a67e8ca916c3","sha1":"7e71f533b462e4a5f851c1afd389c668da1f12ca","sha256":"e4387b709bbba29d4e2fe5e5849b4dfbe9124f373102e90ec4aaaed8a959f118","sha512":"83bba7ecd94de3a64e308596e1e1d3c34876c7b7c19cc40e0a301eeb19ffaa660ebacb48ace208ddd7c63406693bab2b2d386e17accba98d5487b5fa64580e00","ssdeep":"768:WoLAHdpDHAC1NgldS3u3iaCDo/asO8bi/Pu8L2UcJfxxDY1n:GDHAC1Ngld4u3ia5/af/PiRYZ","tlshash":"860308debaa5b13487e685ba417f410bb17659354a2880a4f264d4e03c78a7d733bf3c","size":37797,"data":"","first_seen":"2025-09-17T18:43:27.968063Z","last_seen":"2025-10-29T06:09:40.758765Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn77.aj2532.bid/95316cff.js","fqdn":"cdn77.aj2532.bid","domain":"aj2532.bid","tld":"bid"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"74b35dc7991243baca07a67e8ca916c3","sha1":"7e71f533b462e4a5f851c1afd389c668da1f12ca","sha256":"e4387b709bbba29d4e2fe5e5849b4dfbe9124f373102e90ec4aaaed8a959f118","sha512":"83bba7ecd94de3a64e308596e1e1d3c34876c7b7c19cc40e0a301eeb19ffaa660ebacb48ace208ddd7c63406693bab2b2d386e17accba98d5487b5fa64580e00","ssdeep":"768:WoLAHdpDHAC1NgldS3u3iaCDo/asO8bi/Pu8L2UcJfxxDY1n:GDHAC1Ngld4u3ia5/af/PiRYZ","tlshash":"860308debaa5b13487e685ba417f410bb17659354a2880a4f264d4e03c78a7d733bf3c","size":37797,"data":"","first_seen":"2025-09-17T18:43:27.968063Z","last_seen":"2025-10-29T06:09:40.758765Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn77.aj2532.bid/95316cff.js","fqdn":"cdn77.aj2532.bid","domain":"aj2532.bid","tld":"bid"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"74b35dc7991243baca07a67e8ca916c3","sha1":"7e71f533b462e4a5f851c1afd389c668da1f12ca","sha256":"e4387b709bbba29d4e2fe5e5849b4dfbe9124f373102e90ec4aaaed8a959f118","sha512":"83bba7ecd94de3a64e308596e1e1d3c34876c7b7c19cc40e0a301eeb19ffaa660ebacb48ace208ddd7c63406693bab2b2d386e17accba98d5487b5fa64580e00","ssdeep":"768:WoLAHdpDHAC1NgldS3u3iaCDo/asO8bi/Pu8L2UcJfxxDY1n:GDHAC1Ngld4u3ia5/af/PiRYZ","tlshash":"860308debaa5b13487e685ba417f410bb17659354a2880a4f264d4e03c78a7d733bf3c","size":37797,"data":"","first_seen":"2025-09-17T18:43:27.968063Z","last_seen":"2025-10-29T06:09:40.758765Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.66.155.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-05-05T08:02:16.498949Z","times_seen":34620,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"12e87d2f3a4c8b347ab13a0764d420a3","sha1":"4be715e11048c057fdf2ee0fbbfad4dbf3504c55","sha256":"78a85aca2f0b110c29e0d2b137e09f0a1fb7a8e554b499f740d6744dc8962cfe","sha512":"fa4d699e582de05d47f0beeddf3f79a37fca3bea3bf083447174db9e8250fc5d95a835615a86a256697f3841eff47b1583151a556f886e264f50941f17f63167","ssdeep":"6144:gwsmYhct1SS+TC1lmhTzeKRYcYmD2zK8USJsdZQ/coLGVFyy/RgL/uiOgeNTIPfz:FuYcYmD4/cZQ/coLGVFyCJTiPf7AqqAV","tlshash":"e954a3d8f78d112e423231aaad2e12cdbb7dd171561454aefd4d497c24a083c83baf7a","size":285314,"data":"","first_seen":"2023-09-15T16:51:13Z","last_seen":"2026-05-05T08:44:39.458618Z","times_seen":16622,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"22f21666e8f90524283567b34ece603e","sha1":"1107f79ccff3fc60f500fe858251f2c7887036ef","sha256":"e2238e45a75e0e17671893a3808569c17d6d3c29023c29161457ac63e73a6f1f","sha512":"9965b20d00cb3def639529438d295d8fb7c46a2887867bd2b983e1f795dc43ace32f319951900633a663191fb75ece9b035803fedb39504e30cf8fca2076c1de","ssdeep":"","tlshash":"52f0d4951b0e094e380af192ecb53e0678a2876435970711f59049447d40d918ea9539","size":463,"data":"","first_seen":"2025-09-24T22:11:23.23999Z","last_seen":"2025-09-24T22:11:23.23999Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-09-24T22:10:42Z","timestamp":1758751842,"ip_dst":{"addr":"172.67.146.10","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":42484,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-24T22:10:42.188477+0000\",\"flow_id\":1869044884092138,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":42484,\"dest_ip\":\"172.67.146.10\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.banflix.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.banflix.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":672,\"bytes_toclient\":858,\"start\":\"2025-09-24T22:10:42.177386+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2141c0e51be725f8f8e027a3f66e6875","sha1":"3cff44b72befc2cb406c63af3db21366312f824c","sha256":"05fb0fb7bd0763c0d87b71056425063dcbe04ad5153eee99739afbc48aa7bf34","sha512":"b1cad69d36f24b6daa2e3869a45c28a9f0b089def47ce8c4e86624d5075afc91aead5d6ef76df565b7c843af9e8d4f59a3b84a1368d9e43df7efe9a2dbdb0fd1","ssdeep":"","tlshash":"ece02baa681145611ecd0466a27fa60eb49622248d7a98458c4e4c947b14f928d0daf8","size":392,"data":"","first_seen":"2025-02-06T21:32:11.172389Z","last_seen":"2026-05-05T02:28:46.357991Z","times_seen":129,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-09-24T22:10:42Z","timestamp":1758751842,"ip_dst":{"addr":"172.67.146.10","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":42484,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-24T22:10:42.188477+0000\",\"flow_id\":1869044884092138,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":42484,\"dest_ip\":\"172.67.146.10\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.banflix.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.banflix.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":672,\"bytes_toclient\":858,\"start\":\"2025-09-24T22:10:42.177386+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a57c72c3300521af04e8d2bb61512118","sha1":"3b886faf58a30e3f9d1b3fc2873df1b54f540445","sha256":"9f1180a771eb0c34f4853af2af15526a67ca528bcada745ab41d0d34362f0349","sha512":"b962196ffbaff25b2a80c63f01e944bf4f992117a3c00b55fcd197aa07b7ebab40b3af4bf8666c2c879667cd4482cc2d5d013026892322ebb7311b8eb9178809","ssdeep":"","tlshash":"eb51a404e6f4558442e004ff2c112e39e4f7f139896cf5931c52e5a22878a5f62aebae","size":2765,"data":"","first_seen":"2025-09-24T22:11:23.242038Z","last_seen":"2025-09-24T22:11:23.242038Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-09-24T22:10:42Z","timestamp":1758751842,"ip_dst":{"addr":"172.67.146.10","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":42484,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-24T22:10:42.188477+0000\",\"flow_id\":1869044884092138,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":42484,\"dest_ip\":\"172.67.146.10\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.banflix.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.banflix.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":672,\"bytes_toclient\":858,\"start\":\"2025-09-24T22:10:42.177386+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b12b271a11517fec1245f754c7fff9f6","sha1":"3da061c30b3f8e423e79828fe3637bd331e473ae","sha256":"0ad1c9143546ab2d71d532927c0fe92a971a384c3ed69d79e9806aa20b7579c6","sha512":"ecef051426cbae833f3ac9f62dcfff0963515ac9012a2d6fff91fd583e5076d920a2da3a9cfc3f54c041162c55e6a4e53da7101ee5637577defa9d2e17e75c32","ssdeep":"","tlshash":"6bf054450a1076a90a02d8f5b18ea05c17d54f3758bb3f0e4ec68d0218475b62005f28","size":463,"data":"","first_seen":"2025-09-24T22:11:23.243947Z","last_seen":"2025-09-24T22:11:23.243947Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-09-24T22:10:42Z","timestamp":1758751842,"ip_dst":{"addr":"172.67.146.10","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":42484,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-24T22:10:42.188477+0000\",\"flow_id\":1869044884092138,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":42484,\"dest_ip\":\"172.67.146.10\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.banflix.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.banflix.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":672,\"bytes_toclient\":858,\"start\":\"2025-09-24T22:10:42.177386+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn77.aj2532.bid/95316cff.js","fqdn":"cdn77.aj2532.bid","domain":"aj2532.bid","tld":"bid"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"74b35dc7991243baca07a67e8ca916c3","sha1":"7e71f533b462e4a5f851c1afd389c668da1f12ca","sha256":"e4387b709bbba29d4e2fe5e5849b4dfbe9124f373102e90ec4aaaed8a959f118","sha512":"83bba7ecd94de3a64e308596e1e1d3c34876c7b7c19cc40e0a301eeb19ffaa660ebacb48ace208ddd7c63406693bab2b2d386e17accba98d5487b5fa64580e00","ssdeep":"768:WoLAHdpDHAC1NgldS3u3iaCDo/asO8bi/Pu8L2UcJfxxDY1n:GDHAC1Ngld4u3ia5/af/PiRYZ","tlshash":"860308debaa5b13487e685ba417f410bb17659354a2880a4f264d4e03c78a7d733bf3c","size":37797,"data":"","first_seen":"2025-09-17T18:43:27.968063Z","last_seen":"2025-10-29T06:09:40.758765Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d5434f243a622be6ee31c43cae056b0","sha1":"24a6018147ae2c17791acd00b221a0e96e012cab","sha256":"0710b77bfe14cc23e215130fbfb4c0b8e40909898ea3ea6a2ebc2c78f3b90e5c","sha512":"e0ada9a226051714005e9f2606a873b15a874706b5c8ad4348bd8fc19b29f9475ae9fcc6e254a7e970b8e4b0c72ac71649226bfdc5e3da7b0d89da27622f28d2","ssdeep":"","tlshash":"b4d017a7b4a10a3a04af69917387994c3a288446a54098073b6c8a440f63a5088e71ed","size":251,"data":"","first_seen":"2024-01-26T19:51:29Z","last_seen":"2026-04-12T02:47:54.429449Z","times_seen":16,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-09-24T22:10:42Z","timestamp":1758751842,"ip_dst":{"addr":"172.67.146.10","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":42484,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-24T22:10:42.188477+0000\",\"flow_id\":1869044884092138,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":42484,\"dest_ip\":\"172.67.146.10\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.banflix.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.banflix.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":672,\"bytes_toclient\":858,\"start\":\"2025-09-24T22:10:42.177386+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3924116793dfdeee1ea5991730e8bc71","sha1":"84823456a1de209323377704595613f5ad799abb","sha256":"eef917c5c3a23a716e655a0bdbc1c0efffa011d5f00deaf6acac3eaa7f229e86","sha512":"f86cf4b2afc3a53b874bcb0be0db4efba31c2b98dfe650f7e5f78be6fbf25f5a82efa9ba911d73f0c01d6d98129d0658e383daa5000c5a228af552862a4f92a5","ssdeep":"","tlshash":"73f0d46b416eb485b510eec81406d384c9370c7e355579dc3601ce0d1a5d55750b37a6","size":463,"data":"","first_seen":"2025-09-24T22:11:23.246474Z","last_seen":"2025-09-24T22:11:23.246474Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-09-24T22:10:42Z","timestamp":1758751842,"ip_dst":{"addr":"172.67.146.10","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":42484,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-24T22:10:42.188477+0000\",\"flow_id\":1869044884092138,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":42484,\"dest_ip\":\"172.67.146.10\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.banflix.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.banflix.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":672,\"bytes_toclient\":858,\"start\":\"2025-09-24T22:10:42.177386+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"32879.weligillysies.com/4/js/233465","fqdn":"32879.weligillysies.com","domain":"weligillysies.com","tld":"com"},"ip":{"addr":"88.208.22.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"6eb9084821471d443817fe43f8ba168f","sha1":"01984c56a979f23963b3dd1eff5e9cccfded63da","sha256":"171f1d9210ad2c2b646b5337bd301c04a893b7010dcab4fcc00a814a6cd6da51","sha512":"8e37d57d4fcab02844b479bac662f03ffdd59388b78d49f7fe7c626ff1946b3104930dd799008e8736c9886e99549f2f1297d52c03af26bf6c65a79b2efec93c","ssdeep":"768:Humbr/4nqZVnyTPxVC2/R3hMwsZwJmvnDY87bBZzBPZvzXRb7iGqj:XyxnufF3qj","tlshash":"d6e22995f992703043f7187a403f521af3361a94789e8460da2b95822c66fcb837bf7d","size":31409,"data":"","first_seen":"2025-09-24T22:11:23.166638Z","last_seen":"2025-09-24T22:11:23.166638Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"72f5a9b3eb33b47fc434d9ffd3c3ce84","sha1":"b6372ef6dd450bb98ca8784a88c4e5080659931e","sha256":"ef19287d1ce0a31db2f4bbc437e9972ae20fc0d0f0bc39bcec189971f29a1d8c","sha512":"c500c00ff200e3de0e36f43281b8458b9901cf6a6cc79af2496f57815b26844bc650adc6649e52b8d3f8c570e7221f39456d3de23b361343d35b01d2abe63ab1","ssdeep":"","tlshash":"eff0dc9a81b80d01024191e21941c1b0eb9b498c4f19d5d21b81fdabf24dbbb0524a1c","size":463,"data":"","first_seen":"2025-09-24T22:11:23.247757Z","last_seen":"2025-09-24T22:11:23.247757Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-09-24T22:10:42Z","timestamp":1758751842,"ip_dst":{"addr":"172.67.146.10","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":42484,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-24T22:10:42.188477+0000\",\"flow_id\":1869044884092138,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":42484,\"dest_ip\":\"172.67.146.10\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.banflix.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.banflix.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":672,\"bytes_toclient\":858,\"start\":\"2025-09-24T22:10:42.177386+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"abd3eda1d5f4b0fe7f9c99f43eb150b1","sha1":"284cfcd4d397568f57e7119072af359d0e9690a0","sha256":"fa9aeea174a0931635c6509c1484d92671e2adbd83146b79ddce59040cc32760","sha512":"e57f418fd4f9d7e6127e41ef63946e3e51b47a3168ae9065abbd1af936e257e2443486182a1c2e992e23e9475ddf982031490952357b062ece221159be394e43","ssdeep":"","tlshash":"6ab092de10500d6adfba21908a4723a4382b60632e0e2710b5d45905a93ea17c32cb85","size":109,"data":"","first_seen":"2024-01-26T19:51:30Z","last_seen":"2025-11-19T09:31:42.370534Z","times_seen":94,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-09-24T22:10:42Z","timestamp":1758751842,"ip_dst":{"addr":"172.67.146.10","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":42484,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-24T22:10:42.188477+0000\",\"flow_id\":1869044884092138,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":42484,\"dest_ip\":\"172.67.146.10\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.banflix.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.banflix.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":672,\"bytes_toclient\":858,\"start\":\"2025-09-24T22:10:42.177386+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2141c0e51be725f8f8e027a3f66e6875","sha1":"3cff44b72befc2cb406c63af3db21366312f824c","sha256":"05fb0fb7bd0763c0d87b71056425063dcbe04ad5153eee99739afbc48aa7bf34","sha512":"b1cad69d36f24b6daa2e3869a45c28a9f0b089def47ce8c4e86624d5075afc91aead5d6ef76df565b7c843af9e8d4f59a3b84a1368d9e43df7efe9a2dbdb0fd1","ssdeep":"","tlshash":"ece02baa681145611ecd0466a27fa60eb49622248d7a98458c4e4c947b14f928d0daf8","size":392,"data":"","first_seen":"2025-02-06T21:32:11.172389Z","last_seen":"2026-05-05T02:28:46.357991Z","times_seen":129,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-09-24T22:10:42Z","timestamp":1758751842,"ip_dst":{"addr":"172.67.146.10","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":42484,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-24T22:10:42.188477+0000\",\"flow_id\":1869044884092138,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":42484,\"dest_ip\":\"172.67.146.10\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.banflix.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.banflix.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":672,\"bytes_toclient\":858,\"start\":\"2025-09-24T22:10:42.177386+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a1fb06a5cedc166bfaf109f2cc1d4bb","sha1":"386cc3d544c67ee251b6a792657f0175a39a7f94","sha256":"f161c34cd829c3d936caf019cfc6df2c0bdcff5eef81a0af944d549ad231a237","sha512":"a3d6b988575da9f606b03fa96ffe6840f921873081c3f578548e80d7c7de61b9bc7dabbbf879c9e5ffe56a1ac72b72b2525ae3b2fb1cdfbedc918a8d612d9222","ssdeep":"","tlshash":"edf05c23bece0a9b5b398c386001128028298f351ce3af33c6e58a06332833700b1a00","size":463,"data":"","first_seen":"2025-09-24T22:11:23.25056Z","last_seen":"2025-09-24T22:11:23.25056Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-09-24T22:10:42Z","timestamp":1758751842,"ip_dst":{"addr":"172.67.146.10","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":42484,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-24T22:10:42.188477+0000\",\"flow_id\":1869044884092138,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":42484,\"dest_ip\":\"172.67.146.10\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.banflix.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.banflix.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":672,\"bytes_toclient\":858,\"start\":\"2025-09-24T22:10:42.177386+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6908c6bbbe586f5ad589fc40b253747b","sha1":"f7b1c8a1b4e24dc74d7490117befa426fda50fcf","sha256":"c6862336b1992bd4ca74f782ff36481f9bc91361043c61a9c216e6485adb3cc5","sha512":"1a309c2c461102b57255886308e0ff89db5d2836e9e1690b6b0c75191e086684b34117ae085b7a47a08eb6810a1b2875fa94ec6f9d93182138bbdb818b6f1221","ssdeep":"96:chZcNf0mapQRX1G9VRXNLi4mjwRqI9pfcl61e///0ne2/RCoK/p31:EZcJyGBuVBNLi4mjwRqCfcl6Y///KBJi","tlshash":"eba1ad643af2047545b780df1377cab97610235f64d2de04baacca0c5f56fa0d1a6be8","size":4752,"data":"","first_seen":"2025-09-22T17:52:45.654796Z","last_seen":"2025-09-24T22:11:23.251795Z","times_seen":3,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-09-24T22:10:42Z","timestamp":1758751842,"ip_dst":{"addr":"172.67.146.10","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":42484,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-24T22:10:42.188477+0000\",\"flow_id\":1869044884092138,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":42484,\"dest_ip\":\"172.67.146.10\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.banflix.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.banflix.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":672,\"bytes_toclient\":858,\"start\":\"2025-09-24T22:10:42.177386+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"176e0e3c35731fbec977d4f016bfbecd","sha1":"f26d0a0c13bb638b484aaf26552204693433ac51","sha256":"388aa64ba16dd7a795b395d9af80fda8b0a96e41b9f1426cac3a87711e0c4417","sha512":"d301043c4543b21916ddb08f5e933d350cfeeaf1f90d89adec07e2b54615448918e3a2e187447e4bfffbaa03e31cb9eac7f1eb109153fb49c0cd6624b937706a","ssdeep":"384:CKbPmfwTxO5I/mbBKxLRAwiOSaV0WT6FaMfHGy8qFDeS3QU7Gwuu:lTs4RcraFY+mQKGwuu","tlshash":"6982d8a831d6707083eb3276206f5509f23bc8726d0b4494f649e9687cb8d8e453bfad","size":18063,"data":"","first_seen":"2025-09-24T22:11:23.252649Z","last_seen":"2025-09-24T22:11:23.252649Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-09-24T22:10:42Z","timestamp":1758751842,"ip_dst":{"addr":"172.67.146.10","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":42484,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-24T22:10:42.188477+0000\",\"flow_id\":1869044884092138,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":42484,\"dest_ip\":\"172.67.146.10\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.banflix.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.banflix.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":672,\"bytes_toclient\":858,\"start\":\"2025-09-24T22:10:42.177386+0000\"}}"}],"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"32879.weligillysies.com/4/js/233465","fqdn":"32879.weligillysies.com","domain":"weligillysies.com","tld":"com"},"ip":{"addr":"88.208.22.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.weligillysies.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Sep 2025 14:38:28 GMT","end":"Tue, 02 Dec 2025 14:38:27 GMT"},"fingerprint":{"sha1":"9B:58:CA:C2:7E:17:D5:17:44:BE:AD:A2:92:FA:33:D4:84:DA:FA:C1","sha256":"D5:DE:D5:5C:64:AC:34:3A:C9:B0:99:43:6D:38:89:00:52:28:BC:F6:60:18:91:99:17:0A:40:59:08:BF:2E:B1"}}},"request":{"raw":"GET /4/js/233465 HTTP/1.1\r\nHost: 32879.weligillysies.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 11322\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nreferrer-policy: unsafe-url\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory\r\naccept-ch-lifetime: 31536000\r\nset-cookie: _ccid=8588312658116111453; expires=Sun, 24 Sep 2028 22:10:42 GMT; domain=weligillysies.com; path=/; HttpOnly; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31409,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31409), with no line terminators","md5":"6eb9084821471d443817fe43f8ba168f","sha1":"01984c56a979f23963b3dd1eff5e9cccfded63da","sha256":"171f1d9210ad2c2b646b5337bd301c04a893b7010dcab4fcc00a814a6cd6da51","sha512":"8e37d57d4fcab02844b479bac662f03ffdd59388b78d49f7fe7c626ff1946b3104930dd799008e8736c9886e99549f2f1297d52c03af26bf6c65a79b2efec93c","ssdeep":"768:Humbr/4nqZVnyTPxVC2/R3hMwsZwJmvnDY87bBZzBPZvzXRb7iGqj:XyxnufF3qj","tlshash":"d6e22995f992703043f7187a403f521af3361a94789e8460da2b95822c66fcb837bf7d","first_seen":"2025-09-24T22:11:23.166638Z","last_seen":"2025-09-24T22:11:23.166638Z","times_seen":1,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":47,"dns":3,"connect":21,"send":0,"wait":21,"receive":1,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn77.aj2532.bid/95316cff.js","fqdn":"cdn77.aj2532.bid","domain":"aj2532.bid","tld":"bid"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:43.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1666364575.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 06:31:52 GMT","end":"Sat, 25 Oct 2025 06:31:51 GMT"},"fingerprint":{"sha1":"08:98:C7:6D:4C:4B:44:F2:C9:A3:0C:FF:7D:A0:CD:0C:2A:07:85:ED","sha256":"3C:75:6B:52:C0:28:D6:23:40:68:D9:46:2F:07:82:59:C3:B0:26:90:B5:EB:9D:F0:35:BD:43:B4:3C:28:0A:D5"}}},"request":{"raw":"GET /95316cff.js HTTP/1.1\r\nHost: cdn77.aj2532.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: UUID=8b765359-edd1-5c8a-9867-ae225b688f1a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:10:43 GMT\r\ncontent-type: text/javascript\r\netag: W/\"074b35dc7991243baca07a67e8ca916c3\"\r\nx-77-nzt: EwwBuUwJGwH3uMYKAAwBuUwKCQH3/hsAAAwBJRPCLgG3AAAAAA\r\nx-77-nzt-ray: fdb541230bd30345636cd4689e7b322a\r\nx-77-cache: HIT\r\nx-77-age: 706232\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":37797,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (37797), with no line terminators","md5":"74b35dc7991243baca07a67e8ca916c3","sha1":"7e71f533b462e4a5f851c1afd389c668da1f12ca","sha256":"e4387b709bbba29d4e2fe5e5849b4dfbe9124f373102e90ec4aaaed8a959f118","sha512":"83bba7ecd94de3a64e308596e1e1d3c34876c7b7c19cc40e0a301eeb19ffaa660ebacb48ace208ddd7c63406693bab2b2d386e17accba98d5487b5fa64580e00","ssdeep":"768:WoLAHdpDHAC1NgldS3u3iaCDo/asO8bi/Pu8L2UcJfxxDY1n:GDHAC1Ngld4u3ia5/af/PiRYZ","tlshash":"860308debaa5b13487e685ba417f410bb17659354a2880a4f264d4e03c78a7d733bf3c","first_seen":"2025-09-17T18:43:27.968063Z","last_seen":"2025-10-29T06:09:40.758765Z","times_seen":33,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"29312530-32879-ex.uncocleypercha.com/hiJACYI5OgnpZtczvVjGLSJOltk7qIvcL_RfPsKUGZsXMJmcot9X9MuOVtNgbZHeztkLK6Qiha69FenlHea5aULCk6eXuLnWeAARGO8ke3phtcxwxrWpRx9cxbMzl4bw5ds_0pAjPPIDmN4Gr8SZsORev8ZQAzrk?kws=banflix%2Cunscripted%2Cscandal%2Camateur%2Cporn%2Cincest%2Crape%2Cmore\u0026pageUri=https%3A%2F%2Fwww.banflix.top%2F\u0026referer=\u0026bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Win32%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Wed%20Sep%2024%202025%2022%3A10%3A43%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%222%22%2C%22false%22%2C%22%5B%5D%22%5D\u0026btdb=0\u0026prsl=1","fqdn":"29312530-32879-ex.uncocleypercha.com","domain":"uncocleypercha.com","tld":"com"},"ip":{"addr":"88.208.22.3","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:46.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.uncocleypercha.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 Aug 2025 13:23:39 GMT","end":"Wed, 26 Nov 2025 13:23:38 GMT"},"fingerprint":{"sha1":"22:8A:CB:BF:F6:C8:BB:63:3B:40:60:50:E5:68:99:7F:9B:12:0F:74","sha256":"D1:A4:E0:CC:A1:89:9F:AB:A7:F6:82:AB:E0:1A:43:E1:74:3B:AA:F3:D3:9C:2F:D7:6A:20:6D:23:3C:ED:D7:6A"}}},"request":{"raw":"GET /hiJACYI5OgnpZtczvVjGLSJOltk7qIvcL_RfPsKUGZsXMJmcot9X9MuOVtNgbZHeztkLK6Qiha69FenlHea5aULCk6eXuLnWeAARGO8ke3phtcxwxrWpRx9cxbMzl4bw5ds_0pAjPPIDmN4Gr8SZsORev8ZQAzrk?kws=banflix%2Cunscripted%2Cscandal%2Camateur%2Cporn%2Cincest%2Crape%2Cmore\u0026pageUri=https%3A%2F%2Fwww.banflix.top%2F\u0026referer=\u0026bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Win32%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Wed%20Sep%2024%202025%2022%3A10%3A43%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%222%22%2C%22false%22%2C%22%5B%5D%22%5D\u0026btdb=0\u0026prsl=1 HTTP/1.1\r\nHost: 29312530-32879-ex.uncocleypercha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.banflix.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 24 Sep 2025 22:10:46 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://www.banflix.top\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nreferrer-policy: unsafe-url\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory\r\naccept-ch-lifetime: 31536000\r\np3p: CP=\"NOI DEVa TAIa OUR BUS UNI STA\"\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nlast-modified: Wed, 24 Sep 2025 22:10:46 UTC\r\nexpires: Wed, 24 Sep 2025 22:10:46 UTC\r\nset-cookie: _ccid=8588312658116111453; expires=Sun, 24 Sep 2028 22:10:46 GMT; domain=uncocleypercha.com; path=/; HttpOnly; secure; SameSite=None\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1554,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (1554), with no line terminators","md5":"e3a6055896aaaf170aa5d25b396e739c","sha1":"1e218b13619d7c651163c7644463d93956488afa","sha256":"f1a23411f939a99b8f990b2b73bf051114164ece97af60d5352fc00cc7dc86a4","sha512":"68a17aac4110237d690f75d61ac23a8d317f4934655dfacb5d1a4ceadc855a667f8cfe389e4a0ae1dae6facd0f6307b061eff8dc7b238636c5eb30a2cbb7e427","ssdeep":"","tlshash":"cc312c330c6de5b475796e2e83c1f88b613574c7004ec28a557020978b54d6100d6af7","first_seen":"2025-09-24T22:11:23.169535Z","last_seen":"2025-09-24T22:11:23.169535Z","times_seen":1,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":60,"dns":5,"connect":17,"send":0,"wait":137,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"29312530-32879-ex.uncocleypercha.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aj2532.bid/zFSNQXG4vqpHa3Hqjuixoe1BkMd3dKPPtbyfZJzMMIvf4Zo4I4spbqH2Xj5mkpxvtikJwu06kvf9C3AbDo3mtxgYYhQDzJdDWs4fkjn0uBPyLzk8PpBA3TQdPIZ1bpzjHMs6_QnIkzyDXXXIo84qOloYiAB_uFO7Ps-_4hJW2bLr-8bxqsmPaA0xQdrrOW6KhhqZJaaItHBXEiCciM0sAn8sqZYS3x_MOwma35B8CUKZRFD7w6t6lC_Jn7BtxfI_e1ldi5Ydz5tFXs5e_XCwjqIftml4-6_6xPqr7OQpmlbRiU4QsOHlMV8dbgRVvlNKoyjInJuNx1w3JlH6vGVmI6s1-PH26CRcnx9nIl7y-DC8CRER5TW3GbPYpnejR4hDWH9hLWg?DC=HZ","fqdn":"aj2532.bid","domain":"aj2532.bid","tld":"bid"},"ip":{"addr":"49.12.122.118","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:54.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aj2532.bid","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 08:05:17 GMT","end":"Wed, 12 Nov 2025 08:05:16 GMT"},"fingerprint":{"sha1":"79:27:08:6A:FC:70:65:84:CB:6B:5F:A4:8C:A6:B2:24:A7:78:15:DF","sha256":"F2:C5:AD:F7:F5:F4:1A:6A:7D:97:E7:B0:2F:94:E2:78:D0:BF:25:10:A4:A2:85:1A:1F:6F:F4:53:AA:66:EE:A5"}}},"request":{"raw":"GET /zFSNQXG4vqpHa3Hqjuixoe1BkMd3dKPPtbyfZJzMMIvf4Zo4I4spbqH2Xj5mkpxvtikJwu06kvf9C3AbDo3mtxgYYhQDzJdDWs4fkjn0uBPyLzk8PpBA3TQdPIZ1bpzjHMs6_QnIkzyDXXXIo84qOloYiAB_uFO7Ps-_4hJW2bLr-8bxqsmPaA0xQdrrOW6KhhqZJaaItHBXEiCciM0sAn8sqZYS3x_MOwma35B8CUKZRFD7w6t6lC_Jn7BtxfI_e1ldi5Ydz5tFXs5e_XCwjqIftml4-6_6xPqr7OQpmlbRiU4QsOHlMV8dbgRVvlNKoyjInJuNx1w3JlH6vGVmI6s1-PH26CRcnx9nIl7y-DC8CRER5TW3GbPYpnejR4hDWH9hLWg?DC=HZ HTTP/1.1\r\nHost: aj2532.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: UUID=8b765359-edd1-5c8a-9867-ae225b688f1a; ucv=1223-NO-1758838243714-24--\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\naccept-ch: Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\npermissions-policy: *\r\np3p: CP=\"CAO PSA OUR\"\r\naccept-ranges: bytes\r\netag: W/\"49-1754471702000\"\r\nlast-modified: Wed, 06 Aug 2025 09:15:02 GMT\r\ncontent-type: image/gif\r\ncontent-length: 49\r\ndate: Wed, 24 Sep 2025 22:10:53 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":49,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"56398e76be6355ad5999b262208a17c9","sha1":"a1fdee122b95748d81cee426d717c05b5174fe96","sha256":"2f561b02a49376e3679acd5975e3790abdff09ecbadfa1e1858c7ba26e3ffcef","sha512":"fd8b021f0236e487bfee13bf8f0ae98760abc492f7ca3023e292631979e135cb4ccb0c89b6234971b060ad72c0ca4474cbb5092c6c7a3255d81a54a36277b486","ssdeep":"","tlshash":"609002438585c491d151c1304814935011b5a5614505134ea6a836adac551a1c800408","first_seen":"2023-04-05T11:29:19Z","last_seen":"2026-05-05T08:48:59.613609Z","times_seen":10168,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/thumbnails/68ceb169cfa04.png","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET /thumbnails/68ceb169cfa04.png HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 304839\r\nlast-modified: Sat, 20 Sep 2025 13:51:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68ceb169-4a6c7\"\r\naccept-ranges: bytes\r\nage: 6410\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PujeT0oZnHf1oXduKTFWd332r6i53apqU3a9dtBmJUio%2FUDLwZkN33vKM8r%2BjLoXSWAtBVRMDifgIvuTv%2BN3iFvMhP2DiR1w%2BLEET1DtXw%3D%3D\"}]}\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98459d0a3869783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":304839,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1013 x 605, 8-bit/color RGBA, non-interlaced","md5":"1e665592d7fb248e3410c3ca29ec5b7c","sha1":"0d578d6445b679deecb0db0008bdc0fd8f520ca0","sha256":"1abf85e35f26a029a4fdee1125907c61bde0599fb25006a7ef5c9b80ef798289","sha512":"0d23170f0df1d9e585eeef8cd9f86678338992b6661d74fad7feecbd17118719790f1cdd751b4b878f511347a91931922a6cb804f5394bf01732e158c34833d2","ssdeep":"6144:epsnL7fUFDplp7MnFV2pwfGD7U8Wcl/44jiKGqPMqiCwJKaQqm8N9nREIQ:GsnL7Mnlp7MFVUwfYPttGqPMnJhmO9nY","tlshash":"235423afc91b7ac02508bd0d14e5e0ca0b1d45e9e4af7936a3ef984f611a51f368609b","first_seen":"2025-09-22T18:14:28.476894Z","last_seen":"2025-09-24T22:11:23.171232Z","times_seen":2,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":136,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/thumbnails/68ce17c022cb4.png","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET /thumbnails/68ce17c022cb4.png HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 174660\r\nlast-modified: Sat, 20 Sep 2025 02:55:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68ce17bf-2aa44\"\r\naccept-ranges: bytes\r\nage: 6409\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GejBUUNKxJwLKcio3%2BmMVWGcoX79oEC3Sg5nRL3%2FLJm9%2BXlT82fm%2Fb3AP0xngaOazloS47v2ngDsQv%2FQ0KKMhsjrpNFvI8L6eCIzquP64w%3D%3D\"}]}\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98459d0a386d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":174660,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 741 x 493, 8-bit/color RGBA, non-interlaced","md5":"7b620729e4941f49d1f25fab99b556c1","sha1":"77afda8edbd2f39c9952936e89c3f519d1de623f","sha256":"a5f7c8c83c146dfc9fde5769a4b8af42c65ecac32f16b214bebc1687d9b4be78","sha512":"7dcd51818ce870c084e36e0f74f5675c9fd9b40a8d9b4929e3bf4fd2b9d44b26c73948c9b0d8364de3c40b0613ffce94196d4d898a87ae981b540992cb1248c6","ssdeep":"3072:DsaMg0sGa2AhTQuYCMke+uTpkuFPE9uqgPSDS6LsN2NoQpKmc1TyuTo:DJ92yTh3MkKTp7PE9PS6sN2NfpKmcd3o","tlshash":"d90413246460ecf46f6da7da63f7c86d452cd64582c478a2c06dd4b4830fbab1ee3e19","first_seen":"2025-09-22T18:14:28.478415Z","last_seen":"2025-09-24T22:11:23.172952Z","times_seen":2,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/thumbnails/681817b124845.jpg","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET /thumbnails/681817b124845.jpg HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 653237\r\nlast-modified: Mon, 05 May 2025 01:43:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"681817b1-9f7b5\"\r\naccept-ranges: bytes\r\nage: 3634\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MvAHjuTRSx%2Bc0O23qaMrjOlIs8uLX74buqjZAYCV%2FYmatqsrC1WbiRUIkleUESwShZOIl2rsk4y0gbMEBCpv%2BRN8W%2F8d4vZnMIcuks2anA%3D%3D\"}]}\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98459d0a4873783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":653237,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=5, height=2400, software=Android DN2101_11_F.55, orientation=[*0*], width=1080], baseline, precision 8, 1080x2400, components 3","md5":"b7a3961c274d4c58ccfc9d33aa7bf5df","sha1":"7b69c8a8b0e5c997db0df13b680ef2c935c942ae","sha256":"81dd416b1f00da33c80ce43a079d019c304a5517f0f7d59a55708e23c991381d","sha512":"205ddefd7054949729d12d45c69d5bad81f69c746cf463570651f0fc86001b083afc84b1bb405903a7fb2f1af5f4e47ab0796c8b0d258a2d649215f531c58554","ssdeep":"12288:h7AnForPSB4blONgLYEXEX82hNzPeM7nx6lHbIS4:tAnForqmpogkEX1MLx6l7IS4","tlshash":"56d423cb5279edcbcd18b03b82ab86a17ffca014fad01de51449ca5706b72a31d9d253","first_seen":"2025-09-24T22:11:23.174345Z","last_seen":"2025-09-24T22:11:23.174345Z","times_seen":1,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":282,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aj2532.bid/zTY9oc4G2LQUYgr8zKyNuE76_QCtOgUUOMqQNLAUm6NA4YtrvpFvy8eHTguqdFnG3HGZ1am1QhWzgIqvSTGhTCn_65e5oDD7Ogla8Q4TlLzmSPCqGz5IcWeetR4B8Kcjo5KzyksCLPbh26QNYw8D3nzUi87lXnyc4b8VnpDUr318bIK2sMwfSWagUBHZtwCz-v8sZcPkeMHc8e7XxCRjcIjr2MXK5sxEq_mCXsPE85RpU2OIeo4vvrGNcb3jTfj_WjuFtSsVAb4vtpmouHR8gvtuR5kHbnM6uF19Kn-6QQo6BscZ5MU5QsJYDp-e3JrZiKufE0a14ybMKj35mgOPsAwkx8BgNF6YAnYot7kTymgsmCskb_FRPRwscF2wvAH41f1vqiLY1oI0Qy7Ke21NB_DL9jfRbed6v?DC=HZ","fqdn":"aj2532.bid","domain":"aj2532.bid","tld":"bid"},"ip":{"addr":"49.12.122.118","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:44.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aj2532.bid","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 08:05:17 GMT","end":"Wed, 12 Nov 2025 08:05:16 GMT"},"fingerprint":{"sha1":"79:27:08:6A:FC:70:65:84:CB:6B:5F:A4:8C:A6:B2:24:A7:78:15:DF","sha256":"F2:C5:AD:F7:F5:F4:1A:6A:7D:97:E7:B0:2F:94:E2:78:D0:BF:25:10:A4:A2:85:1A:1F:6F:F4:53:AA:66:EE:A5"}}},"request":{"raw":"GET /zTY9oc4G2LQUYgr8zKyNuE76_QCtOgUUOMqQNLAUm6NA4YtrvpFvy8eHTguqdFnG3HGZ1am1QhWzgIqvSTGhTCn_65e5oDD7Ogla8Q4TlLzmSPCqGz5IcWeetR4B8Kcjo5KzyksCLPbh26QNYw8D3nzUi87lXnyc4b8VnpDUr318bIK2sMwfSWagUBHZtwCz-v8sZcPkeMHc8e7XxCRjcIjr2MXK5sxEq_mCXsPE85RpU2OIeo4vvrGNcb3jTfj_WjuFtSsVAb4vtpmouHR8gvtuR5kHbnM6uF19Kn-6QQo6BscZ5MU5QsJYDp-e3JrZiKufE0a14ybMKj35mgOPsAwkx8BgNF6YAnYot7kTymgsmCskb_FRPRwscF2wvAH41f1vqiLY1oI0Qy7Ke21NB_DL9jfRbed6v?DC=HZ HTTP/1.1\r\nHost: aj2532.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: UUID=8b765359-edd1-5c8a-9867-ae225b688f1a; ucv=1223-NO-1758838243714-24--\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\naccept-ch: Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\npermissions-policy: *\r\np3p: CP=\"CAO PSA OUR\"\r\nset-cookie: ucv=1223-NO-1758838243714-24--; Domain=aj2532.bid; Expires=Thu, 24 Sep 2026 22:10:44 GMT; Path=/; Secure; SameSite=None\r\naccept-ranges: bytes\r\netag: W/\"43-1754471702000\"\r\nlast-modified: Wed, 06 Aug 2025 09:15:02 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\ndate: Wed, 24 Sep 2025 22:10:43 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-05-05T07:26:39.839403Z","times_seen":98978,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/thumbnails/68cb40d2d0fbb.JPG","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET /thumbnails/68cb40d2d0fbb.JPG HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:10:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 36526\r\nlast-modified: Wed, 17 Sep 2025 23:14:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb40d2-8eae\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eTiNJSJTPjaFCPyvpMq9NnbxzeLqhXuYPDhWtCz3dkrqCPvLcEm45WGGS1y6XwtUgXNQDF9scfo5mXixQU%2Ba%2FF0TwQVWaZmEcIhvh0leNA%3D%3D\"}]}\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98459d0a587f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36526,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4], baseline, precision 8, 432x765, components 3","md5":"263c4ca8da42199a6ec69aa9a0be392f","sha1":"22827b2c775ad56e42635099505142c9bde003c5","sha256":"a83d5f660b01eec0f00f64c66cc7f58e823b50def98bcbe49dc95800b196da69","sha512":"fca916b4be269b54335dda4e9d07ecfafb317cfaed886cd6c4ae568ac72096bab7389f9e6a48439a314af3ff66cea138539f0b7267af5aa71730abd06464f5bb","ssdeep":"768:0tbbD2fA8yf6q3sQANG/MmVvj1sjdXoEJgTlmQ+:0tb2fA8yiq3sRG0Bh5t","tlshash":"f5f2f135d8c2dd81d88f71b1334425e560bd12753bc2eac93b7dbaa6574cf810aa6d8c","first_seen":"2025-09-24T22:11:23.177121Z","last_seen":"2025-09-24T22:11:23.177121Z","times_seen":1,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/thumbnails/68cdffcf82ed7.png","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET /thumbnails/68cdffcf82ed7.png HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 586276\r\nlast-modified: Sat, 20 Sep 2025 01:13:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cdffcf-8f224\"\r\naccept-ranges: bytes\r\nage: 6409\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DCpR6E%2B3XGIHTlpnXQlpj2ltZWNEjSoLFp%2FTjXAynNto2sj0X3UYaD2qyomCKmWFi15ynPOmrBWkFCayu3aaaavKztr8OC6nrCpbJdW2cQ%3D%3D\"}]}\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98459d0a3870783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":586276,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1087 x 590, 8-bit/color RGBA, non-interlaced","md5":"1b2845c1b147fe0b148f7b4cd2941955","sha1":"b9052349d9e8b9bb60c679a817f93425b93b1234","sha256":"5aafe21f7262a476734282fdfee7517fdbe404a525325d2809e5074089be6aab","sha512":"40082161ccabaeab059d22070bd54172f38a5f15a59f9133e1e2634b9bd293903d9ca1f554154e5765b99f348cfbf08f01268472a7b3308300afc583101594f4","ssdeep":"12288:ifnLXzeNTzuegN0P+Lev6PA0XEaUVKfL1Q+7N3bpBZB0n3RHhpcXaZC6vn:ifnbzeNTzdg2NojLUyL1bpBZW3RBSgn","tlshash":"5fc4238dc032226a1b4b7ac0a51a0c345f6d8c44967d6d98353f9667c96ebf93ce383d","first_seen":"2025-09-22T18:14:28.511425Z","last_seen":"2025-09-24T22:11:23.178196Z","times_seen":2,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":219,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aj2532.bid/zDzHYnE0oy5Atxgev9piEtO0mNMIG8ZcX8nuyuu0hekJlMgFE64lzPu0XRY2k09vOs1-bHmFZrnHLr2UCbsD4ifUQ5-0-EZpvfgolC0VGy82YHbLAjRw1khd3UvSd-P_RCa3WW2ljnHopmFyIlIHIn36PM9A_-52FsVMkVG3hBrWF08NKBNFC333POpq6bd1KIwx2xkavqSlDL-fYVVHl_j5kslTYFdmQOE6a1iRKtYI7V8lM1RmAogNx3jiRhOViZS8ePUGRYFSX_bsWykeBJSyvzKwFWMhiLPPWdmUfZEIazsnImTiXRsE97kSxMT_E-6ExEVI0tnE4V83BDoEQWPiAmDJhA1PtysAhxbFylLJtcniPnxLjs94_OVHCMc5P7D-eD_YE4DDBmP_oACdsjvghnrCIW-zlb0teDP0jUIfSN6uxrZEz6rqu?","fqdn":"aj2532.bid","domain":"aj2532.bid","tld":"bid"},"ip":{"addr":"49.12.122.118","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:44.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aj2532.bid","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 08:05:17 GMT","end":"Wed, 12 Nov 2025 08:05:16 GMT"},"fingerprint":{"sha1":"79:27:08:6A:FC:70:65:84:CB:6B:5F:A4:8C:A6:B2:24:A7:78:15:DF","sha256":"F2:C5:AD:F7:F5:F4:1A:6A:7D:97:E7:B0:2F:94:E2:78:D0:BF:25:10:A4:A2:85:1A:1F:6F:F4:53:AA:66:EE:A5"}}},"request":{"raw":"POST /zDzHYnE0oy5Atxgev9piEtO0mNMIG8ZcX8nuyuu0hekJlMgFE64lzPu0XRY2k09vOs1-bHmFZrnHLr2UCbsD4ifUQ5-0-EZpvfgolC0VGy82YHbLAjRw1khd3UvSd-P_RCa3WW2ljnHopmFyIlIHIn36PM9A_-52FsVMkVG3hBrWF08NKBNFC333POpq6bd1KIwx2xkavqSlDL-fYVVHl_j5kslTYFdmQOE6a1iRKtYI7V8lM1RmAogNx3jiRhOViZS8ePUGRYFSX_bsWykeBJSyvzKwFWMhiLPPWdmUfZEIazsnImTiXRsE97kSxMT_E-6ExEVI0tnE4V83BDoEQWPiAmDJhA1PtysAhxbFylLJtcniPnxLjs94_OVHCMc5P7D-eD_YE4DDBmP_oACdsjvghnrCIW-zlb0teDP0jUIfSN6uxrZEz6rqu? HTTP/1.1\r\nHost: aj2532.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.banflix.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: UUID=8b765359-edd1-5c8a-9867-ae225b688f1a; ucv=1223-NO-1758838243714-24--\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\naccept-ch: Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\npermissions-policy: *\r\np3p: CP=\"CAO PSA OUR\"\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.banflix.top\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1062\r\ndate: Wed, 24 Sep 2025 22:10:43 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1062,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e7d786144db3fb4c0a36419c9cdf8ba7","sha1":"a122e0ab7a23b90adb6013b8f2177afc3a4fd383","sha256":"e84221848fb60d77d9c058dd1bb2bb94ad97400fba1cc7c1a7cb8975d254d16a","sha512":"cd5f0b8e240ade185a767fe629123d29984115c78d364732990f0fd69214e49efeb66488fc92228e3abf83b6bda12702b0c611a745c142b6514cae4040adc515","ssdeep":"","tlshash":"911179ea2d06c5486c0d9051f43bbb0d7d665311ae6a8646e4894c9c3f00fc14f2d57d","first_seen":"2025-09-24T22:11:23.179473Z","last_seen":"2025-09-24T22:11:23.179473Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/thumbnails/6822a4b3c29ac.jpg","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET /thumbnails/6822a4b3c29ac.jpg HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 180501\r\nlast-modified: Tue, 13 May 2025 01:47:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6822a4b3-2c115\"\r\naccept-ranges: bytes\r\nage: 3633\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i7jYvCycIiKa0Bnes3rsEzSbqgztizd%2BUOtM8RZ2OH24b5c5QKEBbkmWOccrezIwgilvNv2D1jvsPNmcolKfaFj8BEaVYcM6ab3IUtT0%2FQ%3D%3D\"}]}\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98459d0a487c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":180501,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x1085, components 3","md5":"73b0c1a120a5ab0f4d49516d4972bcc1","sha1":"00da212916191d5c931e1b1259ec18a2b4268d1a","sha256":"318591688adf00130ff1eb306858fe78b2448e3bcd4952281bb381e86b178032","sha512":"d6b3a4313e40c50c90ca18bd003d60c643c649248ca1bc89841afd97596dfd84e3b5ab86617371aa6b0d7a302c96e7f1046578230a4ca8d9f040cbb30a3dc85e","ssdeep":"3072:FzoJXUfqahphq/hax9ufKp+LWWCw7n9X8LcJPPDaeyEvW3MJDwfjg96OxV+2fw:FokfqiPq/gxwfKk698cCtyq/Dwfjg96V","tlshash":"df0412c2a1349b7ae7eba854234006dba3c758354f1bf1bf8f23d795290d0a836b6535","first_seen":"2025-09-24T22:11:23.180953Z","last_seen":"2025-09-24T22:11:23.180953Z","times_seen":1,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/remixicon@2.2.0/fonts/remixicon.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/remixicon@2.2.0/fonts/remixicon.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:10:43 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 11987\r\ncf-ray: 98459d0bae28dfec-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 2.2.0\r\nx-jsd-version-type: version\r\netag: W/\"17737-lLwxw2ibD5git74Src5/cbdbmiM\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230153-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 1327313\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TBwn9zBOm5LfyjEJXzMSg56UJfwC%2FXcpq5Z9LkIQMvKEIV99cvtvU%2FBz4iW%2FEkE6SQAiCs%2FzUbUksuo3dM0hauGb0XWObV7IkNrV56DIIW7J4j8oaHsKKuERCcVPnQn3ahw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96055,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1939459b72b0ceaf936b3fe4bb93dbcd","sha1":"94bc31c3689b0f9822b7be12adce7f71b75b9a23","sha256":"f26c326343b9e44c1c900f270c2689b2ab2df25f8ba6f817ef8bd48cfe8a471b","sha512":"b2e57b7839dc2d60146a92609d5b6e6f514f4b0bf36639865d59295132464ccec280dc37be178413663f24d5223078407eea4e2f091e7ad1857ac649def7ffb9","ssdeep":"768:qDcej3rbzgdt+VpH5PSo0N07z80C/MJbdkvr11oVrRy7nCiiS9P27pzQicoZHgeg:qDcePgdt+Q077bdkvr11otQoSNN","tlshash":"0593b5beea4f44841702e8d66367274163b9b7b98d807c7ad413788df3c766883862dc","first_seen":"2023-05-18T03:45:25Z","last_seen":"2026-05-05T09:01:00.520797Z","times_seen":117,"resource_available":false,"data":null}},"time_used":463,"timings":{"blocked":210,"dns":0,"connect":4,"send":0,"wait":12,"receive":2,"ssl":230},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/thumbnails/68b3b451435cb.jpg","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET /thumbnails/68b3b451435cb.jpg HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 458810\r\nlast-modified: Sun, 31 Aug 2025 02:32:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b3b451-7003a\"\r\naccept-ranges: bytes\r\nage: 3634\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5wzOXWbmD2wF46WRw2tFJgZWU7UeSDq43VXgqSVIR6nE8Xc7TTTCCDEoYco2g1A1gH0KjP9m%2Bvn5IJzblv4Zrhto2es15m1sTrFT3%2FpHLw%3D%3D\"}]}\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98459d0a5881783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":458810,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=5, height=1791, orientation=upper-left, datetime=2025:08:31 07:08:15, width=1080], baseline, precision 8, 1080x1791, components 3","md5":"2f18c82796bdc0a2c4d821184af10f7b","sha1":"5aab959a0c532d6cfe92451a240bd23d2fe08ec0","sha256":"fe75cc2b847399212711e501d1daec7f6e90f3b0d81dda938adcc47d1df25d62","sha512":"58b5ab753014affe192150dcef0c0f6e9e1d914e59e0da494f118b6a20832e2f63e2748e46df9c4bbbedeec44efbf15c2dacc63397b1ebdb6675d82c29c3fbcb","ssdeep":"6144:l/icsFM15SCaslLLRLDrOu3dR+mppr+Vi5fQylJAJVeFporUwMFYSXReFHmsNTV5:l/ijG15SCaU3VZnlSiiyDAa7ysAlms1","tlshash":"63a423db70a9d8ace358babbf4ea910cfbc3446076523543a20d928ed7a354fbb51405","first_seen":"2025-09-24T22:11:23.182986Z","last_seen":"2025-09-24T22:11:23.182986Z","times_seen":1,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":433,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"banflix.top/","fqdn":"banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-24T22:10:41.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\ncontent-type: text/html\r\nlocation: http://www.banflix.top/\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=6,cfOrigin;dur=383\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wKf%2BoYUEFtlA4FS9kNRtazbjzgpvZSyVBiPfdD1bnUh4MNXL8g6YTYJFgAlL71QzGFLxuCIpGs9awAvOZNntFevB57oco4hx495R\"}]}\r\ncf-ray: 98459d030b1435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68913,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-05T08:09:51.362598Z","times_seen":14678067,"resource_available":true,"data":null}},"time_used":744,"timings":{"blocked":176,"dns":0,"connect":1,"send":0,"wait":392,"receive":0,"ssl":172},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/thumbnails/6828e68ab3a27.jpg","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET /thumbnails/6828e68ab3a27.jpg HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 274635\r\nlast-modified: Sat, 17 May 2025 19:42:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6828e68a-430cb\"\r\naccept-ranges: bytes\r\nage: 3633\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4xJUgFIXFzaM35r9jWOZiXPkPdIxmQwDkuVQ%2F0W3elT674Q4TZjfp3weOFDTH2Vui6sSYOZ3ZfiPrfVn8MWrSHotWseY89gv%2BlA8by6eSQ%3D%3D\"}]}\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98459d0a4874783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":274635,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=5, height=1604, software=Android CPH2641_14.0.1.1408(EX01), orientation=[*0*], width=720], baseline, precision 8, 720x1604, components 3","md5":"7b06fc980d952fc0c3d622cd49f744a9","sha1":"d092ae19ddb142d85f1a4c02e5a84c49122c1ab1","sha256":"aee28cad514d3397469f1e162cd59451020672da855f26e4282fe60d677dd7b3","sha512":"b1fdddefc6eaad31117544d54c326f404195ad3c77b4b0bb26c2de530bd3038adc04b2635ba4a2ee59e476ab479efa418f2659c68da64710f3da9a6754e224b1","ssdeep":"6144:Ru/wDMLqNZD/wUgbtw1o9CEVHGwTIcuThrjfpub:0eMLqjD/w3bW1oNHGSl0cb","tlshash":"734401eaf7d3cd46e51149ac97902301d5a6fd86695e0bc6d2ed91c49aa308ff34cc0e","first_seen":"2025-09-24T22:11:23.185225Z","last_seen":"2025-09-24T22:11:23.185225Z","times_seen":1,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/thumbnails/680f19bfcddb7.jpg","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET /thumbnails/680f19bfcddb7.jpg HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 385189\r\nlast-modified: Mon, 28 Apr 2025 06:01:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"680f19bf-5e0a5\"\r\naccept-ranges: bytes\r\nage: 3633\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1nGsL3gAOBZq4URgGqIXyz6K8dHPJ4E%2BFZuKjj33ZTRAUF6R%2Fsre%2BK496nPK3WWIs9ctPWfQNBBxf7GrE4cl5Uj3nwYfOFaSbM%2BTcKHK5A%3D%3D\"}]}\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98459d0a4879783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":385189,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=5, height=2780, software=Android RMX3851_15.0.0.710(EX01), orientation=[*0*], width=1264], baseline, precision 8, 1264x2780, components 3","md5":"8ffaff8a6bbea63802a35525b7f6fcf9","sha1":"36db10ffe639d5e4f0f08cc8a522d287acf04253","sha256":"46a0d789b9824821a384719533f56257dd48b34916a8d70c48133975c2b29cff","sha512":"f8476531c174dee8bef1961e3bebe15d5846c4122693cbcfa513daee58f17a8b577830559111251b6b0c4ace93bc97d943d241d283cb6417c9905a9dabbda2ac","ssdeep":"6144:YoT9tkT6hAhgYvCgzu+TffGBtICBtsutveOiBhVppCqT:YoT9tkOINvCgzu+TfMBUXhVpcq","tlshash":"d08423057d6128b6f54e9fb43419bfb20b42bfa60b8bc1d76e743070e45269bb748436","first_seen":"2025-09-24T22:11:23.186633Z","last_seen":"2025-09-24T22:11:23.186633Z","times_seen":1,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":401,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn77.aj2532.bid/95316cff.js","fqdn":"cdn77.aj2532.bid","domain":"aj2532.bid","tld":"bid"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1666364575.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 06:31:52 GMT","end":"Sat, 25 Oct 2025 06:31:51 GMT"},"fingerprint":{"sha1":"08:98:C7:6D:4C:4B:44:F2:C9:A3:0C:FF:7D:A0:CD:0C:2A:07:85:ED","sha256":"3C:75:6B:52:C0:28:D6:23:40:68:D9:46:2F:07:82:59:C3:B0:26:90:B5:EB:9D:F0:35:BD:43:B4:3C:28:0A:D5"}}},"request":{"raw":"GET /95316cff.js HTTP/1.1\r\nHost: cdn77.aj2532.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:10:43 GMT\r\ncontent-type: text/javascript\r\netag: W/\"074b35dc7991243baca07a67e8ca916c3\"\r\nx-77-nzt: EwwBuUwJGwH3uMYKAAwBuUwKCQH3/hsAAAwBJRPCLgG3AAAAAA\r\nx-77-nzt-ray: fdb541230bd30345636cd46879942e01\r\nx-77-cache: HIT\r\nx-77-age: 706232\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":37797,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (37797), with no line terminators","md5":"74b35dc7991243baca07a67e8ca916c3","sha1":"7e71f533b462e4a5f851c1afd389c668da1f12ca","sha256":"e4387b709bbba29d4e2fe5e5849b4dfbe9124f373102e90ec4aaaed8a959f118","sha512":"83bba7ecd94de3a64e308596e1e1d3c34876c7b7c19cc40e0a301eeb19ffaa660ebacb48ace208ddd7c63406693bab2b2d386e17accba98d5487b5fa64580e00","ssdeep":"768:WoLAHdpDHAC1NgldS3u3iaCDo/asO8bi/Pu8L2UcJfxxDY1n:GDHAC1Ngld4u3ia5/af/PiRYZ","tlshash":"860308debaa5b13487e685ba417f410bb17659354a2880a4f264d4e03c78a7d733bf3c","first_seen":"2025-09-17T18:43:27.968063Z","last_seen":"2025-10-29T06:09:40.758765Z","times_seen":33,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":34,"dns":52,"connect":8,"send":0,"wait":16,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aj2532.bid/zcKnaviJNL8d5jJW0SMmZGHcjkDGQhY7TG70EnpYonMe8WmVZFeispsyI6CgwKynQaiV7YgLJFXotMQ1_OywVBMj9xQAR3dXbWg826vcKJPU2TBDlEaflVbr0QTD2gGY-DsEQG_lpti-qeXwF7E-OHlL0wDhf3jE6dWHncvFJev18tHI7KNTn2JSU8Z63_ccUuN3EtVmIxN2fk5fvoXI5rcq_Ms3W_lbEDiFYNwlbfGKAnuDtu_V4b4qx1ZjUtc2zUsetxCyfVAH_AePbTs9kr0ozvzG7daOmgoONYrJhArH2JTl55JFn4ntR8kD4zrfFhp0A17RcNXK-phT-qbw9MWxg1kD7uiRPVDCABOb4SgYwcsQ_sQbG93q0gbFjFlEjCLLadEPbC8nBT08A4Z0kcmOIZKqKD072ZdOXTuKwIJGPz6jhpJZp6Oym?","fqdn":"aj2532.bid","domain":"aj2532.bid","tld":"bid"},"ip":{"addr":"49.12.122.118","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:44.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aj2532.bid","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 08:05:17 GMT","end":"Wed, 12 Nov 2025 08:05:16 GMT"},"fingerprint":{"sha1":"79:27:08:6A:FC:70:65:84:CB:6B:5F:A4:8C:A6:B2:24:A7:78:15:DF","sha256":"F2:C5:AD:F7:F5:F4:1A:6A:7D:97:E7:B0:2F:94:E2:78:D0:BF:25:10:A4:A2:85:1A:1F:6F:F4:53:AA:66:EE:A5"}}},"request":{"raw":"POST /zcKnaviJNL8d5jJW0SMmZGHcjkDGQhY7TG70EnpYonMe8WmVZFeispsyI6CgwKynQaiV7YgLJFXotMQ1_OywVBMj9xQAR3dXbWg826vcKJPU2TBDlEaflVbr0QTD2gGY-DsEQG_lpti-qeXwF7E-OHlL0wDhf3jE6dWHncvFJev18tHI7KNTn2JSU8Z63_ccUuN3EtVmIxN2fk5fvoXI5rcq_Ms3W_lbEDiFYNwlbfGKAnuDtu_V4b4qx1ZjUtc2zUsetxCyfVAH_AePbTs9kr0ozvzG7daOmgoONYrJhArH2JTl55JFn4ntR8kD4zrfFhp0A17RcNXK-phT-qbw9MWxg1kD7uiRPVDCABOb4SgYwcsQ_sQbG93q0gbFjFlEjCLLadEPbC8nBT08A4Z0kcmOIZKqKD072ZdOXTuKwIJGPz6jhpJZp6Oym? HTTP/1.1\r\nHost: aj2532.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.banflix.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: UUID=8b765359-edd1-5c8a-9867-ae225b688f1a; ucv=1223-NO-1758838243714-24--\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\naccept-ch: Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\npermissions-policy: *\r\np3p: CP=\"CAO PSA OUR\"\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.banflix.top\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\ncontent-type: application/json;charset=UTF-8\r\ntransfer-encoding: chunked\r\ndate: Wed, 24 Sep 2025 22:10:43 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":21656,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"dc03403f19d10a128b272922c7b7ea3f","sha1":"2feb4211ab3dd2646f884b259ac3253f812b7049","sha256":"e9d13cb6a19e6fe7d1446f81d15a9fb1ee4d4d3eb4e28f35d76eb4ff368fa36d","sha512":"aaa094197266965958c5c6743f7c8155a4a80535cd02619b3d756d6fe8c64e7bcee8b686e7137181bb0f538525d965ad96f381c00f1b15cae1d6cc92b5967889","ssdeep":"384:YyrSbHSX+LmC0IhVobBKBQOd2wzZDrw6T6FaM9Z16EacfVhXTz7EwKwI3HI3g:YZrBNIJOdTlu1TTvEwK/","tlshash":"0da208a8b1d1f07083d625ba213f2909b176e4326d0a4090f685dd6c7cbce9e463bf9d","first_seen":"2025-09-24T22:11:23.187744Z","last_seen":"2025-09-24T22:11:23.187744Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aj2532.bid/zwRfV4JwlIOUiQLwyleuU_swj1axWNDyUpnUsocCtsTOp01l5AbUdmEHVASnNmYMCxo-KiC-aeOvenNdMHj-EQQUEUKGD2jjDJ0VAOnqUrmOvF8AQk0nstx2piLFF8fk9wNxWxOm19JuCz7P6nPopI2r-lMVcYhfxFni58ppgDNMFrpCllIEfKeKyWdJ2zAUn7RvsD6KiqezDXtdM_3NWnsLTvvyBnf-rEBfol5rit69HclTfrkyzKM3A-tZvw3jhVI1NKCgHQd7DInoNK2k3LfMRggM1289SaWQNzEDX-C6vZNFKpNIzQohATLb90tvn0a1Sp_xZ_D2X-ZxcYwe_bNxU_v-GR_j0PUWIYgdN7qM7Qk72cAnwIiPL8_3DcUlf6_idiZbIkOLRmyh8I8cFbbRUglCNtjyS?DC=HZ","fqdn":"aj2532.bid","domain":"aj2532.bid","tld":"bid"},"ip":{"addr":"49.12.122.118","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:44.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aj2532.bid","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 08:05:17 GMT","end":"Wed, 12 Nov 2025 08:05:16 GMT"},"fingerprint":{"sha1":"79:27:08:6A:FC:70:65:84:CB:6B:5F:A4:8C:A6:B2:24:A7:78:15:DF","sha256":"F2:C5:AD:F7:F5:F4:1A:6A:7D:97:E7:B0:2F:94:E2:78:D0:BF:25:10:A4:A2:85:1A:1F:6F:F4:53:AA:66:EE:A5"}}},"request":{"raw":"GET /zwRfV4JwlIOUiQLwyleuU_swj1axWNDyUpnUsocCtsTOp01l5AbUdmEHVASnNmYMCxo-KiC-aeOvenNdMHj-EQQUEUKGD2jjDJ0VAOnqUrmOvF8AQk0nstx2piLFF8fk9wNxWxOm19JuCz7P6nPopI2r-lMVcYhfxFni58ppgDNMFrpCllIEfKeKyWdJ2zAUn7RvsD6KiqezDXtdM_3NWnsLTvvyBnf-rEBfol5rit69HclTfrkyzKM3A-tZvw3jhVI1NKCgHQd7DInoNK2k3LfMRggM1289SaWQNzEDX-C6vZNFKpNIzQohATLb90tvn0a1Sp_xZ_D2X-ZxcYwe_bNxU_v-GR_j0PUWIYgdN7qM7Qk72cAnwIiPL8_3DcUlf6_idiZbIkOLRmyh8I8cFbbRUglCNtjyS?DC=HZ HTTP/1.1\r\nHost: aj2532.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: UUID=8b765359-edd1-5c8a-9867-ae225b688f1a; ucv=1223-NO-1758838243714-24--\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\naccept-ch: Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\npermissions-policy: *\r\np3p: CP=\"CAO PSA OUR\"\r\nset-cookie: ucv=1223-NO-1758838243714-24--; Domain=aj2532.bid; Expires=Thu, 24 Sep 2026 22:10:44 GMT; Path=/; Secure; SameSite=None\r\naccept-ranges: bytes\r\netag: W/\"43-1754471702000\"\r\nlast-modified: Wed, 06 Aug 2025 09:15:02 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\ndate: Wed, 24 Sep 2025 22:10:43 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-05-05T07:26:39.839403Z","times_seen":98978,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/profile_img/user.png","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET /profile_img/user.png HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 616411\r\nlast-modified: Thu, 31 Aug 2023 15:47:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"64f0b61c-967db\"\r\naccept-ranges: bytes\r\nage: 228\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=az4xGPx%2F3db9SkXJCu84J%2FfZ7N17%2BqEa8jSB8McWZJq%2FLd%2FtvixRsJC5a5jZHZvRGa4p%2FV65Anoig7y%2B0zx5p36oy3yUmj5n3FHEQDNNuw%3D%3D\"}]}\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98459d0a2865783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":616411,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 720 x 900, 8-bit/color RGBA, non-interlaced","md5":"fcd2a3fa6850ae66c6dcdfa3b8ac5229","sha1":"3461040ede3955aa08bc921b3bd4ba591191ca51","sha256":"66821cd96de49c32eda39bb08aca255cd7091d833e8e898fcf5233de599a6e9e","sha512":"d1c3ebf548d79f0da2542ee48fc3e2f7b855c8431d7ec9fbc3a42c29cdc85497f0ced0bad5aa0e2241265b4c34837de1d05ce159870c0bb52418b2e0279a63c2","ssdeep":"12288:dC5urO/+ilsnL53ZmxTniHjJo/X+toP0OHWjXlywpVoWvT6jIW0/k:dC5pp6d3ZeiHtLj4wp9T6jIU","tlshash":"b0d423ec2165015a87a254cce30d350eb42fbeee165a187163f62a65c4bf6dec0f42e7","first_seen":"2025-04-21T07:59:38.695718Z","last_seen":"2025-11-19T09:31:42.301743Z","times_seen":16,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/thumbnails/68a5a056dc88c.jpg","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET /thumbnails/68a5a056dc88c.jpg HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 470043\r\nlast-modified: Wed, 20 Aug 2025 10:15:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68a5a056-72c1b\"\r\naccept-ranges: bytes\r\nage: 3633\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=25CP87DFd8jzcROnN8lTj04PzQHuoh55RLRApwyiYYLywIQ9bMzFRroHVDq4IDKs%2BS1F%2FEYyXxaRsQBEwlKC90ebIeGzH4J3HHDoyLuvZw%3D%3D\"}]}\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98459d0a5882783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":470043,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=4, height=1907, orientation=upper-left, width=1080], baseline, precision 8, 1080x1907, components 3","md5":"7b88d7d256cd213627209426c6ce7257","sha1":"f2ccd4ec4e91ecd5d24d1278ac30d7cc44b5838f","sha256":"71d2b3f604efe3c9a1b1a5fd20d6fb380c2ee52676a993df73966ba36a38f555","sha512":"431ca10e1f197ddc99f76f43f74b4e1f122756db136cc98a41ff90bf8a7e0840eeeb010917329fbb2764cb5022749148e4e19bcd61c5e25fba3f3a8c2fa5d1ef","ssdeep":"12288:kPNHajFDMVS02B2GcPC3GrQUSnXLb2yhep:kPpAFDAn0lYGsSXLjhep","tlshash":"33a423f8d911ed54d3048eb08e6902db9059ac7518c867ccd798aa07deb8f28eb745ce","first_seen":"2025-09-22T18:14:28.453467Z","last_seen":"2025-09-24T22:11:23.190504Z","times_seen":2,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 02:39:12 GMT","end":"Sat, 22 Nov 2025 03:39:06 GMT"},"fingerprint":{"sha1":"B4:6C:D2:16:CA:52:EE:BD:22:D7:B4:2C:64:FF:A5:EF:67:D8:E1:F8","sha256":"FF:3A:23:84:D6:B2:73:DF:50:6E:1A:45:A4:AB:03:37:0B:C4:4A:8E:82:12:99:10:80:A2:F7:FC:71:E3:BA:1D"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.banflix.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:10:43 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 98459d0bb8074e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-05-05T08:08:45.92432Z","times_seen":334828,"resource_available":true,"data":null}},"time_used":404,"timings":{"blocked":170,"dns":3,"connect":1,"send":0,"wait":21,"receive":0,"ssl":201},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aj2532.bid/zKKCYRrSo-DaUylGhR-pD-nLLGBTfRIc_HIK8i09ZRWZRzE8RkZc6Sh7zA1UU4soXuE7WkFoMxUTCE020j-HdTTvF0zkQc9HUrrNQ7jBPa_JOtCNJ_91nFmkYx4luQrciPe48LJxJoxniVwboo9JtCCAkKQmDFEii1i2X3lKxfr8PzTAkQKAC_RNuZ2dEN830nw0CZCzxXGtZw7ZjgsY198iLJ8FlwWS_xmMi2u1LezoVjfziXZ4CNq-ZRzTIxLbOmZBaB5sLXsMYUJorvCoCm-ppwpc5TXWjJCAFwLSXEhy5CGP3lIR8GPM3eydWExNXTQMUXMyAkf6EMlMH1Qr9J1kdj8M607cwVh3iCXbBSNY9qRDPW2rASE2CFZK3ofgcEis0Mzz_GrosCz3FMbSU1kQxoflbQdLGeiwHKvgJTXYaGKqwoZEz4bj_?","fqdn":"aj2532.bid","domain":"aj2532.bid","tld":"bid"},"ip":{"addr":"49.12.122.118","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:44.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aj2532.bid","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 08:05:17 GMT","end":"Wed, 12 Nov 2025 08:05:16 GMT"},"fingerprint":{"sha1":"79:27:08:6A:FC:70:65:84:CB:6B:5F:A4:8C:A6:B2:24:A7:78:15:DF","sha256":"F2:C5:AD:F7:F5:F4:1A:6A:7D:97:E7:B0:2F:94:E2:78:D0:BF:25:10:A4:A2:85:1A:1F:6F:F4:53:AA:66:EE:A5"}}},"request":{"raw":"POST /zKKCYRrSo-DaUylGhR-pD-nLLGBTfRIc_HIK8i09ZRWZRzE8RkZc6Sh7zA1UU4soXuE7WkFoMxUTCE020j-HdTTvF0zkQc9HUrrNQ7jBPa_JOtCNJ_91nFmkYx4luQrciPe48LJxJoxniVwboo9JtCCAkKQmDFEii1i2X3lKxfr8PzTAkQKAC_RNuZ2dEN830nw0CZCzxXGtZw7ZjgsY198iLJ8FlwWS_xmMi2u1LezoVjfziXZ4CNq-ZRzTIxLbOmZBaB5sLXsMYUJorvCoCm-ppwpc5TXWjJCAFwLSXEhy5CGP3lIR8GPM3eydWExNXTQMUXMyAkf6EMlMH1Qr9J1kdj8M607cwVh3iCXbBSNY9qRDPW2rASE2CFZK3ofgcEis0Mzz_GrosCz3FMbSU1kQxoflbQdLGeiwHKvgJTXYaGKqwoZEz4bj_? HTTP/1.1\r\nHost: aj2532.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.banflix.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: UUID=8b765359-edd1-5c8a-9867-ae225b688f1a; ucv=1223-NO-1758838243714-24--\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\naccept-ch: Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\npermissions-policy: *\r\np3p: CP=\"CAO PSA OUR\"\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.banflix.top\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1062\r\ndate: Wed, 24 Sep 2025 22:10:43 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1062,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"93b8d58e359de06195a2bf48c804c3da","sha1":"22bdc9c40d9f19ed2c47675babdd0ce3f249beef","sha256":"de066217afbbf2f152e249d0af570923161e864be4a72a44894a2eec1f1a1fe7","sha512":"8b3000c2a1fe55396c77b40f2513358e4dc0b2cf2fa07c11ca0f9b9eaccdc5eae856beb67f51d93f49ef6c4dc45f05bb1d2116ba7b30baef3d311b55cc1da307","ssdeep":"","tlshash":"de11b9bf0c06c0547e444880203be30ca92b1535ad24f98cf4498c5c3704fc20d2a7b5","first_seen":"2025-09-24T22:11:23.191979Z","last_seen":"2025-09-24T22:11:23.191979Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aj2532.bid/z3pVHUlLtYOcy0wostD2Uu3S3ZD4Tf9UtbTLddHC-IGjRC0S_DBtcO9uZej7AGzXhDkcFhjqAfrxYgNcCKcA36AfV6jEoqGcqhmGa5k2Oob43c8jUdqyuWtSjPysEN2-FCjOelKD9PcRHNfjRgDDkl2Zmn8ykHBHDzEpeNul-vy6wzcsOPWJ6MxMwvh2-42mfDxRaAI8WgbiQTsTEhhaV9k3Fd6-jw9uquAtfMfdtdmtjL3ZcQRGkmYK1uWSuqQsa9bhAHr8v_ePfx92zim3UjIDTJ6PzU1l7C2LFjAkACbg_2eLmB9h73dENgiWNIkQsJCO565ZWjXcq6PK0L_1reYiYvQCWJl88OwLcaiS105YbaX2JcjLbLm4OplR5aXR2Ci-EMVLYJRyJ2hs50oImiVbYf08DKU6y?DC=HZ","fqdn":"aj2532.bid","domain":"aj2532.bid","tld":"bid"},"ip":{"addr":"49.12.122.118","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:44.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aj2532.bid","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 08:05:17 GMT","end":"Wed, 12 Nov 2025 08:05:16 GMT"},"fingerprint":{"sha1":"79:27:08:6A:FC:70:65:84:CB:6B:5F:A4:8C:A6:B2:24:A7:78:15:DF","sha256":"F2:C5:AD:F7:F5:F4:1A:6A:7D:97:E7:B0:2F:94:E2:78:D0:BF:25:10:A4:A2:85:1A:1F:6F:F4:53:AA:66:EE:A5"}}},"request":{"raw":"GET /z3pVHUlLtYOcy0wostD2Uu3S3ZD4Tf9UtbTLddHC-IGjRC0S_DBtcO9uZej7AGzXhDkcFhjqAfrxYgNcCKcA36AfV6jEoqGcqhmGa5k2Oob43c8jUdqyuWtSjPysEN2-FCjOelKD9PcRHNfjRgDDkl2Zmn8ykHBHDzEpeNul-vy6wzcsOPWJ6MxMwvh2-42mfDxRaAI8WgbiQTsTEhhaV9k3Fd6-jw9uquAtfMfdtdmtjL3ZcQRGkmYK1uWSuqQsa9bhAHr8v_ePfx92zim3UjIDTJ6PzU1l7C2LFjAkACbg_2eLmB9h73dENgiWNIkQsJCO565ZWjXcq6PK0L_1reYiYvQCWJl88OwLcaiS105YbaX2JcjLbLm4OplR5aXR2Ci-EMVLYJRyJ2hs50oImiVbYf08DKU6y?DC=HZ HTTP/1.1\r\nHost: aj2532.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: UUID=8b765359-edd1-5c8a-9867-ae225b688f1a; ucv=1223-NO-1758838243714-24--\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\naccept-ch: Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\npermissions-policy: *\r\np3p: CP=\"CAO PSA OUR\"\r\nset-cookie: ucv=1223-NO-1758838243714-24--; Domain=aj2532.bid; Expires=Thu, 24 Sep 2026 22:10:44 GMT; Path=/; Secure; SameSite=None\r\naccept-ranges: bytes\r\netag: W/\"43-1754471702000\"\r\nlast-modified: Wed, 06 Aug 2025 09:15:02 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\ndate: Wed, 24 Sep 2025 22:10:43 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-05-05T07:26:39.839403Z","times_seen":98978,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aj2532.bid/ads-api-native?key=d6d99a243edbfe47441e3b6937ed6b11\u0026o=https://www.banflix.top","fqdn":"aj2532.bid","domain":"aj2532.bid","tld":"bid"},"ip":{"addr":"49.12.122.118","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:49.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aj2532.bid","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 08:05:17 GMT","end":"Wed, 12 Nov 2025 08:05:16 GMT"},"fingerprint":{"sha1":"79:27:08:6A:FC:70:65:84:CB:6B:5F:A4:8C:A6:B2:24:A7:78:15:DF","sha256":"F2:C5:AD:F7:F5:F4:1A:6A:7D:97:E7:B0:2F:94:E2:78:D0:BF:25:10:A4:A2:85:1A:1F:6F:F4:53:AA:66:EE:A5"}}},"request":{"raw":"GET /ads-api-native?key=d6d99a243edbfe47441e3b6937ed6b11\u0026o=https://www.banflix.top HTTP/1.1\r\nHost: aj2532.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.banflix.top/\r\nOrigin: https://www.banflix.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\naccess-control-allow-origin: https://www.banflix.top\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\naccept-ch: Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\npermissions-policy: *\r\np3p: CP=\"CAO PSA OUR\"\r\nset-cookie: UUID=b4f2f56a-512f-5a07-b380-4d0cc67350d0; Domain=aj2532.bid; Expires=Thu, 29 Oct 2026 22:10:49 GMT; Path=/; Secure; SameSite=None\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 568\r\ndate: Wed, 24 Sep 2025 22:10:48 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":568,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e19aca84e4b226995b0f2a5f96119fd3","sha1":"8ea898557b074eec31418b568395eef50a2388f4","sha256":"c80dc7effe8f363f127fc4d44e9c1f4e0241a2b5802dfe3a2db3b6a6d5933e4e","sha512":"c4ffb473f2b84fccc4c126b9d1a04489e3e5269cfb7ef57f49b4a526fe363060dff3801c6febd4db4edc184a98ac5b0ed5bc7fb616a7623944d692887938913e","ssdeep":"","tlshash":"faf096483749ef7d4f0f13e60462a80f5105344441cd160017aecf48ee7043605abb4d","first_seen":"2025-09-24T22:11:23.193075Z","last_seen":"2025-09-24T22:11:23.193075Z","times_seen":1,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":57,"dns":1,"connect":24,"send":0,"wait":46,"receive":1,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Alatsi\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:43.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css2?family=Alatsi\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 24 Sep 2025 22:10:43 GMT\r\ndate: Wed, 24 Sep 2025 22:10:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1532,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d26877f3d27917f2080a2ba359bf2f77","sha1":"e3b5aef8d3967829497ac0a2ea2dbf1e210a21b6","sha256":"e578d93c88f081c4d95f305b2261f929179d927cfa07a6a49470a9a58969856a","sha512":"d1428ec0520091b1461fcbb0de9af41ec2184d8191455b992276af97f8f684d4adb08a1b3ae512e456b9b7aed0896d169f8a14ef5cbdf7d4b508ee1a9dc6c403","ssdeep":"","tlshash":"7d31db91046a9880ab432cc527ce3d22ae6ea1917014947abffe18999c9ac315374f0d","first_seen":"2025-09-19T20:26:53.493686Z","last_seen":"2026-05-05T05:36:15.38147Z","times_seen":108,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":150,"dns":11,"connect":30,"send":0,"wait":18,"receive":0,"ssl":170},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/thumbnails/68ceccf53c74e.png","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET /thumbnails/68ceccf53c74e.png HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 332097\r\nlast-modified: Sat, 20 Sep 2025 15:49:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68ceccf5-51141\"\r\naccept-ranges: bytes\r\nage: 6410\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hjo6lAyWaBoVNQu%2BYkhVPzcq4LUjDfn35ETv3Dn7URT5crvd5a6ZkQ%2FDUuabbnmWRYLp1wKuecNU%2BVH7j34o0ekzi4%2BnEiWAEZPS%2FyR0%2Bw%3D%3D\"}]}\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98459d0a2868783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":332097,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 480, 8-bit/color RGBA, non-interlaced","md5":"e0f8d589558ec8a2a4e2d2fa3dd1eb55","sha1":"11c10066076ed9fc457d86a51883353dd7bffa8e","sha256":"96a31341138a91cf5b36541d3a94fa6d346901e340782ee9846f091594adf9fc","sha512":"a5e8fbdd7e91c07eb8b00eefd621d52288355172757a1ccdb48b6d4595c6417a521076134fb5aaeec281c336ea0ea9c794f0f007a0fdbe687481b362ec1ebee9","ssdeep":"6144:WXsOLoZMgCHULrtg74THAwrK+ejnkFqIjR0mV35:WcTMlHULpgMVrINMRx35","tlshash":"b76423acf8e17b0dd9e8f07217b431fc1b56680704abaad9d3697864314f8a105d7b3a","first_seen":"2025-09-22T18:14:28.483158Z","last_seen":"2025-09-24T22:11:23.194915Z","times_seen":2,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/thumbnails/68ce1905849a3.png","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET /thumbnails/68ce1905849a3.png HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 141739\r\nlast-modified: Sat, 20 Sep 2025 03:01:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68ce1905-229ab\"\r\naccept-ranges: bytes\r\nage: 227\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=boyf5bAqQ4FsG55kBgmCZpAOu%2F3AytT0gtcWh6GZrnLZSBlSRIxEeg8MjUHzDuHRgH7QyuUzn10i0dtMJM8bmTsBkMK4HTR7AuinAshV7w%3D%3D\"}]}\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98459d0a386e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141739,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 808 x 540, 8-bit/color RGBA, non-interlaced","md5":"e06137cb07142fc17dc880edd867da81","sha1":"909e89ca7215e6248e9777ef48d1dfce4950aad1","sha256":"711785f74510ca70052f7bc4b46273bf91643b6aea1c93966083e5acd4892eb8","sha512":"5f6afbff4a64af90dc52df4346e1a2dfd22bac4d5b82998dae6d3d2e251b50dd28d7a221625750d74d1e87bcf3f0d2bb1a41e0fd42a0d7c91d35afbbe6edd82d","ssdeep":"3072:sawnGfNNkGW+UMbbkZaSQoA6hIn/S6OXLa9Vxkai2FJs0oTUKIxIDtLyH1BJ:AnGfTQ+3cZrQoZQSbX+JkaFzUULISJ","tlshash":"d7d312bc24d1439784b775b4999c1ad518d32787103ac83d3cbef07482ca879ad5ba97","first_seen":"2025-09-22T18:14:28.545634Z","last_seen":"2025-09-24T22:11:23.196389Z","times_seen":2,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":152,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/thumbnails/68b0f93c70e47.jpg","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET /thumbnails/68b0f93c70e47.jpg HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 231859\r\nlast-modified: Fri, 29 Aug 2025 00:50:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b0f93c-389b3\"\r\naccept-ranges: bytes\r\nage: 3634\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jn5woo3ZtwptSxVv6kcKrT5Ibo6hRyUgTgU60slAvFS%2FgOp928Oah%2FcQEsu8v3tbR1l6yr4U7%2FQDlp80p4U5BrtuZhID84hfM%2B%2B%2F07b2Dg%3D%3D\"}]}\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98459d0a4877783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231859,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=5, height=533, orientation=upper-left, datetime=2025:08:29 05:21:25, width=1080], baseline, precision 8, 1080x533, components 3","md5":"6519a8bdcac459176537e110b46ff084","sha1":"cee18db1c6463871bfc1868a352b09eb5dc538f6","sha256":"ebb64a87b869e219680446f828c56d846582bb2e9578d4c270709a9bd120d4d6","sha512":"2262276daec0caeab653eff80765e4f6eda7d4c22a72e78f785a316a1369bcdb305cd54ad9fe050f7707d63df18fc88b9ba58053a7439296d63d1a72903f3baf","ssdeep":"6144:cAan6409sqe47yODsf+d8f4/h3ng1nCXRmynVhuXz:cAOc9sqeXf4/peCXEYhcz","tlshash":"4c342370dc8bb4f1ec76583cf2270c33bb666baf07818d2cc16697724a575d2a09652b","first_seen":"2025-09-24T22:11:23.197713Z","last_seen":"2025-09-24T22:11:23.197713Z","times_seen":1,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":352,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/thumbnails/68ce6c2d57605.jpg","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET /thumbnails/68ce6c2d57605.jpg HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 392612\r\nlast-modified: Sat, 20 Sep 2025 08:56:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68ce6c2d-5fda4\"\r\naccept-ranges: bytes\r\nage: 6410\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D%2B%2FgVDsYn1t6Liybz62FR8TlfS0vjrmZiNlfkhWsMpxJP%2FHB0eDS5Jyk9u89JMMnKKclVH0JQpYSevFol0cPidlDAp0UHCJZpu8ZpyQ2Uw%3D%3D\"}]}\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98459d0a386a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":392612,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=5, height=2048, orientation=upper-left, datetime=2025:09:20 01:30:34, width=2048], baseline, precision 8, 1826x1784, components 3","md5":"1a2f02a10cae7e1cd20033f493990c6e","sha1":"17f2bd12f3cc6825dba7bf1668c65818c65fa0ac","sha256":"4f0978a8d4e288b15ce2f3eb0b22c9eefe5a9443e3f385f72ace9da7ff7dedd0","sha512":"12bfac629891677fe1dfba70f81ac1c836bbb6f6669b9f2d021bbc7e382bdc07051513c5fd4fbfc0164d81ee52e4e3846ea979de07eed12d11cb1983038bd391","ssdeep":"6144:IgR0cxnSyWL3cRi2q78dOtxXNGhnqjOL1Yq0Yfp+Qj0Rzjcvn1oes8kTS:IgnSy0OiR8Ix9GhqjOxCYf0Y0RfK1y/e","tlshash":"4e84231e5baa6e35c4bf987efa05ef0d53a31f5427eec495460a254e733c286730920e","first_seen":"2025-09-22T18:14:28.499128Z","last_seen":"2025-09-24T22:11:23.198997Z","times_seen":2,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/thumbnails/67ff315b576f5.png","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET /thumbnails/67ff315b576f5.png HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 108406\r\nlast-modified: Wed, 16 Apr 2025 04:26:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67ff315b-1a776\"\r\naccept-ranges: bytes\r\nage: 3633\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WF%2Bk46c%2Bi4cZIfLrBMegT7FOKcnXegFcCHVuqkfVfK77ikQbjWKlK5mJ59YG8%2F%2FU0GYKteTV7OCrjzI3%2BOcZGFjVTvQscN5xQZ1hWW7%2FrQ%3D%3D\"}]}\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98459d0a487b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108406,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 244 x 432, 8-bit/color RGB, non-interlaced","md5":"3a21ebfee99c50e69526b68ec1f21f03","sha1":"3bb2e1e24ff238e6c98a33e79d580eda2315f4a9","sha256":"4d5a3da074b83b0e115a38c48b2fa3b66c82195230efd92669aeeec52718354e","sha512":"07ace18e4b9ffd297740dabc63de47bd76aa14014babf82b3afd405803d81dbe00f54fd4d6341aced2a4d90e8c454eeba0dc2a7624b2cd9ef2b5d3a15b9916f7","ssdeep":"1536:nfDlv8fAGDtodeT5m3NhiVz3u5EikgKoonM0yKbYvFiou8Jj/39fUhfuvb:bGOeT5o8+xkg4xyKbYvFiR/mvb","tlshash":"b7b30285baca8f40ab841a5d1c6b1784f8f4166d1fbab19c08530cf79a431e44eb3b07","first_seen":"2025-09-24T22:11:23.200094Z","last_seen":"2025-09-24T22:11:23.200094Z","times_seen":1,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aj2532.bid/zEFPcGG6JJyA7D8ddH0m81UWGfk35c2GFX1f33uw5-mmTMAeekvgjYjAUwtaSlnicIowCcdGBwN6goGD_qfcplDMIpAlAEcWAqCpaAIBOMnxBoaJ0NoI__Z8S3CxdjFEuEWjDS2iW5yw2Rqq7Ic_DoUfamIbIl93fm9Wn3LdaI1cnn0hyNtbJGKGosASAHOchxj9uhgnCZW4AehQzv9Xqino20eV-v1dJOXNuE91x3-LYpVPkUwoIBhJ3lOJMKVNlBj6TNCZ_F-gDbZryGJi7ap_a9y0AN0vgGtRlWHx8dedVp6gjRrwrnQ2WwzsJehglssrs1-4Nw05xhlvY578teJj7iBgWslBWOembPFjktdjcZJb2izhJFAGzxF2KusxBw6WihVWVeB8FvpJIVgNZ0X5v9OnJfGsT?DC=HZ","fqdn":"aj2532.bid","domain":"aj2532.bid","tld":"bid"},"ip":{"addr":"49.12.122.118","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:44.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aj2532.bid","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 08:05:17 GMT","end":"Wed, 12 Nov 2025 08:05:16 GMT"},"fingerprint":{"sha1":"79:27:08:6A:FC:70:65:84:CB:6B:5F:A4:8C:A6:B2:24:A7:78:15:DF","sha256":"F2:C5:AD:F7:F5:F4:1A:6A:7D:97:E7:B0:2F:94:E2:78:D0:BF:25:10:A4:A2:85:1A:1F:6F:F4:53:AA:66:EE:A5"}}},"request":{"raw":"GET /zEFPcGG6JJyA7D8ddH0m81UWGfk35c2GFX1f33uw5-mmTMAeekvgjYjAUwtaSlnicIowCcdGBwN6goGD_qfcplDMIpAlAEcWAqCpaAIBOMnxBoaJ0NoI__Z8S3CxdjFEuEWjDS2iW5yw2Rqq7Ic_DoUfamIbIl93fm9Wn3LdaI1cnn0hyNtbJGKGosASAHOchxj9uhgnCZW4AehQzv9Xqino20eV-v1dJOXNuE91x3-LYpVPkUwoIBhJ3lOJMKVNlBj6TNCZ_F-gDbZryGJi7ap_a9y0AN0vgGtRlWHx8dedVp6gjRrwrnQ2WwzsJehglssrs1-4Nw05xhlvY578teJj7iBgWslBWOembPFjktdjcZJb2izhJFAGzxF2KusxBw6WihVWVeB8FvpJIVgNZ0X5v9OnJfGsT?DC=HZ HTTP/1.1\r\nHost: aj2532.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: UUID=8b765359-edd1-5c8a-9867-ae225b688f1a; ucv=1223-NO-1758838243714-24--\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\naccept-ch: Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\npermissions-policy: *\r\np3p: CP=\"CAO PSA OUR\"\r\nset-cookie: ucv=1223-NO-1758838243714-24--; Domain=aj2532.bid; Expires=Thu, 24 Sep 2026 22:10:44 GMT; Path=/; Secure; SameSite=None\r\naccept-ranges: bytes\r\netag: W/\"43-1754471702000\"\r\nlast-modified: Wed, 06 Aug 2025 09:15:02 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\ndate: Wed, 24 Sep 2025 22:10:43 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-05-05T07:26:39.839403Z","times_seen":98978,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/thumbnails/68cdd463edb54.jpg","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET /thumbnails/68cdd463edb54.jpg HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 455746\r\nlast-modified: Fri, 19 Sep 2025 22:08:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cdd463-6f442\"\r\naccept-ranges: bytes\r\nage: 6409\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LddrO7GAPJfVZXl5O7U8QsY2ELb0EQoSLE67p7yhmaKp0reTl8BlX1%2FGkP9yG2ClRMYnzLl2gJALLJ5z5gnVvL7XmYcZukohJwsXoZsM0Q%3D%3D\"}]}\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98459d0a3871783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":455746,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=4, height=0, orientation=upper-left, width=0], baseline, precision 8, 1080x2400, components 3","md5":"b6d28846f75d10329fbdb055c6c2f395","sha1":"e717ef561ac421469e901a593b2527fe92fa783b","sha256":"a3976e505a72a6dff50c650a1780c44b86629cdb42387231a82e920ae03b6bab","sha512":"3880d5411521f502cc0cad0b956f51c19742f9e2aeb6c58863e98475635d267bb66d79c8174685916d058928a031565189e20949eaccebe198736ae99faeb763","ssdeep":"12288:BsslZ+Su70mI/p6ZFji+2CerVuNmx08s6NXO:KS/r8DjlEINmhs6dO","tlshash":"70a4ab54ea73c9dd8318d761279c7bc4acaafd4c3a0643585c9f642da29ff847e7800a","first_seen":"2025-09-24T22:11:23.201395Z","last_seen":"2025-09-24T22:11:23.201395Z","times_seen":1,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":226,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/thumbnails/6809319992e51.jpg","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET /thumbnails/6809319992e51.jpg HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:10:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 451930\r\nlast-modified: Wed, 23 Apr 2025 18:29:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68093199-6e55a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M%2FLd7J7rQ0JMLi6TWXkeHQ6oZuWGQsyYF3ykal7l6b2idaqunsjDj0BmM%2FqSIq4oyiReRGECgUt4aA0PE%2BJVad3ERffqh5GVm4hXCG7P6w%3D%3D\"}]}\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98459d0a5880783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":451930,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=5, height=2780, software=Android RMX3851_15.0.0.620(EX01), orientation=[*0*], width=1264], baseline, precision 8, 1264x2780, components 3","md5":"ab475dfe354ebfb17d3362d4d3bde4f7","sha1":"45fef89cbad6746036f1ccfdff614492d8dcb84d","sha256":"5b7351db5c2642a1ca298cd60e7559638dcd26ea5c365edd9194f64efd161dde","sha512":"8e1dce690d9e205bc2e9b0cfff5083b83e988d5d35b64984bbdcb62b9af933c03b460b4da25aa3435502fa33a9aefbcc04a7d634e0a50573b9e0dfa4291ab192","ssdeep":"12288:4JRO3E2mA+I1ErYjlCusVGdbRZSXEUWGaWopC:mRx20I1bMuuG80URaY","tlshash":"f6a40129f0a69ee49fbf0ff01202ea83e1292405ddc9f5352d170af87069f5ee696351","first_seen":"2025-09-22T18:14:28.443965Z","last_seen":"2025-09-24T22:11:23.202615Z","times_seen":2,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Comic+Neue\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:43.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css2?family=Comic+Neue\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 24 Sep 2025 22:10:43 GMT\r\ndate: Wed, 24 Sep 2025 22:10:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":412,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"064c8eed720489dd6a463c22e00c1aad","sha1":"b641be0f7824988fffce4603215e14768369bba6","sha256":"b4cb10939d3be9faeb6bb507be2ad55f760d436f95d3cd7f7ad69df1aa6f0182","sha512":"5e419005c7d8a4988048b71d7f11d2ae3a5b434b3d42febaa39f4b8588e35052bae0e2981ddbdd4cf66b0f6fc80b348c4f4e1dee113aa52cd39ae648afa1ecce","ssdeep":"","tlshash":"a6e061414826a900e7631cc113debd32ef0ea255245199389ff914d4bd57d175356b1c","first_seen":"2025-09-21T16:42:47.399272Z","last_seen":"2026-04-30T21:53:41.528982Z","times_seen":32,"resource_available":false,"data":null}},"time_used":469,"timings":{"blocked":195,"dns":1,"connect":30,"send":0,"wait":21,"receive":0,"ssl":216},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.google.com/","fqdn":"ads.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.46","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:44.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adwords.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:35 GMT","end":"Mon, 01 Dec 2025 08:36:34 GMT"},"fingerprint":{"sha1":"6E:74:C6:B1:CA:0F:F6:4C:66:86:D6:C4:6C:A1:9B:A3:E3:B8:88:52","sha256":"82:5D:E7:E6:AD:57:67:9E:38:9E:23:00:58:31:0E:7A:EE:49:55:28:7B:7D:F3:5A:73:4C:D4:31:38:D8:B4:1B"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: ads.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.banflix.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 429 Too Many Requests\r\ncontent-length: 1103\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Wed, 24 Sep 2025 22:10:44 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-05T08:09:51.362598Z","times_seen":14678067,"resource_available":true,"data":null}},"time_used":647,"timings":{"blocked":78,"dns":0,"connect":15,"send":0,"wait":488,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn77.aj2532.bid/95316cff.js","fqdn":"cdn77.aj2532.bid","domain":"aj2532.bid","tld":"bid"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1666364575.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 06:31:52 GMT","end":"Sat, 25 Oct 2025 06:31:51 GMT"},"fingerprint":{"sha1":"08:98:C7:6D:4C:4B:44:F2:C9:A3:0C:FF:7D:A0:CD:0C:2A:07:85:ED","sha256":"3C:75:6B:52:C0:28:D6:23:40:68:D9:46:2F:07:82:59:C3:B0:26:90:B5:EB:9D:F0:35:BD:43:B4:3C:28:0A:D5"}}},"request":{"raw":"GET /95316cff.js HTTP/1.1\r\nHost: cdn77.aj2532.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:10:43 GMT\r\ncontent-type: text/javascript\r\netag: W/\"074b35dc7991243baca07a67e8ca916c3\"\r\nx-77-nzt: EwwBuUwJGwH3uMYKAAwBuUwKCQH3/hsAAAwBJRPCLgG3AAAAAA\r\nx-77-nzt-ray: fdb541230bd30345636cd468ff6b9700\r\nx-77-cache: HIT\r\nx-77-age: 706232\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":37797,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (37797), with no line terminators","md5":"74b35dc7991243baca07a67e8ca916c3","sha1":"7e71f533b462e4a5f851c1afd389c668da1f12ca","sha256":"e4387b709bbba29d4e2fe5e5849b4dfbe9124f373102e90ec4aaaed8a959f118","sha512":"83bba7ecd94de3a64e308596e1e1d3c34876c7b7c19cc40e0a301eeb19ffaa660ebacb48ace208ddd7c63406693bab2b2d386e17accba98d5487b5fa64580e00","ssdeep":"768:WoLAHdpDHAC1NgldS3u3iaCDo/asO8bi/Pu8L2UcJfxxDY1n:GDHAC1Ngld4u3ia5/af/PiRYZ","tlshash":"860308debaa5b13487e685ba417f410bb17659354a2880a4f264d4e03c78a7d733bf3c","first_seen":"2025-09-17T18:43:27.968063Z","last_seen":"2025-10-29T06:09:40.758765Z","times_seen":33,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":78,"dns":18,"connect":8,"send":0,"wait":26,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aj2532.bid/z5PBHix11cnlw61NL1iHm3o1MGuT04q5ATWpEqmIJyt6ktUf1t9K3UadbVa91sotYqI5hefg2F-bmgQ7zDMWplGIKbgCRnBv9y7TVf1WIwyWaRcEWvMECOEWAkpl8NFFzFJSdVCBZjB10-vR-_EHnWGMru8tYFoXNCP2pLD3NmpreWJLSQpj_o4ZX6sxtVeZvgWjP7Nny8543JCvWQpaDiJYmbPBtQ3yToz4BLfAJHJu4qgf8lVZUe7CG7xjwB8Y9mSHTa4C0JGMLF_xMfnEOfXyE4T3ByQuPqRtT5XansKWHLbxasLc4YsV0yShPVWlJfE3ECne2J3VRuFo2XiAnGDUi6gwIlGoxGXapWDe-Rm34OBouRZPdKEkCbBDNkDjDjI7EWVSVcHeHPVt0orKJzHSZtGfsn28njcKE3R2_1Mfn1fvl8Jc36Oau?","fqdn":"aj2532.bid","domain":"aj2532.bid","tld":"bid"},"ip":{"addr":"49.12.122.118","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:44.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aj2532.bid","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 08:05:17 GMT","end":"Wed, 12 Nov 2025 08:05:16 GMT"},"fingerprint":{"sha1":"79:27:08:6A:FC:70:65:84:CB:6B:5F:A4:8C:A6:B2:24:A7:78:15:DF","sha256":"F2:C5:AD:F7:F5:F4:1A:6A:7D:97:E7:B0:2F:94:E2:78:D0:BF:25:10:A4:A2:85:1A:1F:6F:F4:53:AA:66:EE:A5"}}},"request":{"raw":"POST /z5PBHix11cnlw61NL1iHm3o1MGuT04q5ATWpEqmIJyt6ktUf1t9K3UadbVa91sotYqI5hefg2F-bmgQ7zDMWplGIKbgCRnBv9y7TVf1WIwyWaRcEWvMECOEWAkpl8NFFzFJSdVCBZjB10-vR-_EHnWGMru8tYFoXNCP2pLD3NmpreWJLSQpj_o4ZX6sxtVeZvgWjP7Nny8543JCvWQpaDiJYmbPBtQ3yToz4BLfAJHJu4qgf8lVZUe7CG7xjwB8Y9mSHTa4C0JGMLF_xMfnEOfXyE4T3ByQuPqRtT5XansKWHLbxasLc4YsV0yShPVWlJfE3ECne2J3VRuFo2XiAnGDUi6gwIlGoxGXapWDe-Rm34OBouRZPdKEkCbBDNkDjDjI7EWVSVcHeHPVt0orKJzHSZtGfsn28njcKE3R2_1Mfn1fvl8Jc36Oau? HTTP/1.1\r\nHost: aj2532.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.banflix.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: UUID=8b765359-edd1-5c8a-9867-ae225b688f1a; ucv=1223-NO-1758838243714-24--\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\naccept-ch: Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\npermissions-policy: *\r\np3p: CP=\"CAO PSA OUR\"\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.banflix.top\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\ncontent-type: application/json;charset=UTF-8\r\ntransfer-encoding: chunked\r\ndate: Wed, 24 Sep 2025 22:10:43 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":23051,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"024a00a92e18a1f7a3786711fd91aea9","sha1":"aa8b0c2a9fb1f56efba96208cd261292876b65fc","sha256":"05e22f0a12b326192bad81ab7a4c3453dd970bd6e4cbbf8422830e90a53c4a1d","sha512":"37e0be421d144e6acb57309b430812c153d6d10727867dfd44dc8c560776e508986233950a20436d5890ce8a5304292d1475cfd05783150a5db392845d283da7","ssdeep":"192:YqY+jttE+B3DuIyXQR+22SPSlX1MEGoGPiQr9+22SPSlX1MEGoGPb7Y5z5J8afnn:Y23R+bSPSneDx+bSPSneU20E/l/+P31","tlshash":"dba253665e88307553355f8fe2f60219a03afae16c626b9cbd5c8f0203ddb6439876dc","first_seen":"2025-09-24T22:11:23.204828Z","last_seen":"2025-09-24T22:11:23.204828Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/thumbnails/68ce1aa1509a8.png","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET /thumbnails/68ce1aa1509a8.png HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 241720\r\nlast-modified: Sat, 20 Sep 2025 03:08:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68ce1aa1-3b038\"\r\naccept-ranges: bytes\r\nage: 6409\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tddruw%2F%2BOt5wcPfq7uxKq6u5bswuS0%2FRFULeNITwAlt1GB%2F8dXRqYgqUSuXRM9%2BgOAyb8msOpZFC8W%2F4ozMNAojyMPlUFZN9sIucFkPvAQ%3D%3D\"}]}\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98459d0a386b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":241720,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 845 x 402, 8-bit/color RGBA, non-interlaced","md5":"cff1eb99f72ef00692055d46e226733e","sha1":"fd4d0b8ae86b6cd0d63e3fafcef9f9d4b406e3d9","sha256":"f42885208ac29ac34eabcaab1c0d7d9a18936a93c0bbb1d60df8140045472405","sha512":"9fbb063e3f9e5c3517fe14aeb06f63a845ed60e50f897402e051a8bf1f956e8cdee84a3de03657c8b7439a424a6c8b31a145c559c4e66aa68a6647b288996a2c","ssdeep":"6144:0yIOrFUCF2TN+muVR8Z7V/bu0UmST4MYFvL4tHbO:0dk2TN+b30p/loT4MYu7O","tlshash":"893423037ac575afaf0246f551a1df210054ef47304cfb61a49760bba22bbd7f2e5258","first_seen":"2025-09-22T18:14:28.44193Z","last_seen":"2025-09-24T22:11:23.206736Z","times_seen":2,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Ubuntu:wght@700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:43.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css2?family=Ubuntu:wght@700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 24 Sep 2025 22:10:43 GMT\r\ndate: Wed, 24 Sep 2025 22:10:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2007,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1ebe13383f9b57c418f3ebd601315dd3","sha1":"b6d2c371081c6913096ec507b33559b5a38f92a2","sha256":"2abeb1a612a809ad4965fa4744381df3614f7ee3acdd4fa5d1141c5e742a306a","sha512":"ee8a1096084b7c6592be86d23b3c660079c4f74bc9df0c72f0a4d1451aec43e653640865b30e24146e2d1cbb9e758e106bf222bf0c0ae7b1fcef9f2abace7a4e","ssdeep":"","tlshash":"ec41c293145b9404ea474cd223cfbf269d8f50957455c1b6affe18c8ace6c394326b4d","first_seen":"2025-09-05T07:34:40.5773Z","last_seen":"2026-05-03T07:34:04.652199Z","times_seen":211,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":218,"dns":3,"connect":17,"send":0,"wait":20,"receive":0,"ssl":224},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e.dtscout.com/725/?sub=917\u0026l=https%3A%2F%2Fwww.banflix.top%2F\u0026j=\u0026uid=8b765359-edd1-5c8a-9867-ae225b688f1a","fqdn":"e.dtscout.com","domain":"dtscout.com","tld":"com"},"ip":{"addr":"104.26.11.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:44.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtscout.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 12:11:28 GMT","end":"Sat, 29 Nov 2025 13:05:40 GMT"},"fingerprint":{"sha1":"8C:1A:8B:5A:0D:05:D0:E1:27:9B:25:7F:4F:AD:2F:0D:B4:F7:E5:14","sha256":"6E:3E:4E:99:17:89:21:6A:AA:63:31:A7:CE:8D:C6:4C:29:96:63:AE:64:9F:42:19:D7:28:92:10:03:EE:8D:75"}}},"request":{"raw":"GET /725/?sub=917\u0026l=https%3A%2F%2Fwww.banflix.top%2F\u0026j=\u0026uid=8b765359-edd1-5c8a-9867-ae225b688f1a HTTP/1.1\r\nHost: e.dtscout.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:10:44 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-s: mtl2\r\nx-t: 0.449\r\nexpires: Wed, 24 Sep 2025 22:10:43 GMT\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YxL6QxSPkPKs5koWEeFugYKrFzdDXGZT8NBCCnO%2F0zcsUVP8n%2B%2BNw1t7K5dRPop8tx1U27Ac0J9WsBA6HV%2BqJiKgjM4ZoS5pU%2BiP%2Fw%3D%3D\"}]}\r\ncontent-encoding: br\r\nset-cookie: df=1758751844; SameSite=None; Secure; Path=/; Domain=dtscout.com; Max-Age=8640000; Expires=Fri, 02 Jan 2026 22:10:44 GMT\r\ncf-ray: 98459d142c601a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-05T08:09:51.362598Z","times_seen":14678067,"resource_available":true,"data":null}},"time_used":358,"timings":{"blocked":70,"dns":1,"connect":1,"send":0,"wait":215,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/css/root.css","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET /css/root.css HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\ncontent-type: text/css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Tue, 07 Nov 2023 01:01:58 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UWB4l558kjkUjc09xIi5p8r7gLpP6G%2BkZVpbnTPmarshOD50lPwb3%2F%2B0Vjla5TOU092RQJJxAjiFcTXMH5JKPdPduHo2rCHBVFFZG9VJmg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 228\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"65498c86-1197\"\r\nvary: accept-encoding\r\ncf-ray: 98459d0a2864783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4503,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"9c460336a8ebcabb26df92e24e6b71f5","sha1":"a0b9051772b0fb290d0eca958b32a78ef46fecd2","sha256":"2d5d2c914bc9cae43aae672ed0ab8953aaeb03e7064509e2c9490bd811686816","sha512":"6b1b952fe5968fbfdcc4c472cb7ef48b70e56dfb52ce10800fb17031433b5bf83cb1127af6a50ddaf2f835ccbb98aaad92422f8b93dea039eda5da85e3213ae2","ssdeep":"96:Xz4jSPcOzP+LwIqwvBqwVukCfPrQ6fzMGyKsVX:sWmI9MGyhN","tlshash":"3c91ac47aa446032e27287d1b28157747f9b103c0f5272eafde092a47ead9d0d63c5ce","first_seen":"2025-04-21T07:59:38.753654Z","last_seen":"2025-11-19T09:31:42.321978Z","times_seen":17,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.7.1.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.banflix.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-45a82\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\nage: 3288039\r\nx-served-by: cache-lga21929-LGA, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 14, 154271\r\nx-timer: S1758751843.981013,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 83619\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":285314,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"12e87d2f3a4c8b347ab13a0764d420a3","sha1":"4be715e11048c057fdf2ee0fbbfad4dbf3504c55","sha256":"78a85aca2f0b110c29e0d2b137e09f0a1fb7a8e554b499f740d6744dc8962cfe","sha512":"fa4d699e582de05d47f0beeddf3f79a37fca3bea3bf083447174db9e8250fc5d95a835615a86a256697f3841eff47b1583151a556f886e264f50941f17f63167","ssdeep":"6144:gwsmYhct1SS+TC1lmhTzeKRYcYmD2zK8USJsdZQ/coLGVFyy/RgL/uiOgeNTIPfz:FuYcYmD4/cZQ/coLGVFyCJTiPf7AqqAV","tlshash":"e954a3d8f78d112e423231aaad2e12cdbb7dd171561454aefd4d497c24a083c83baf7a","first_seen":"2023-09-15T16:51:13Z","last_seen":"2026-05-05T08:44:39.458618Z","times_seen":16622,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":36,"dns":5,"connect":14,"send":0,"wait":16,"receive":21,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aj2532.bid/zXSm4iRWPBUA1o_3UWLBsDcs5UmOmSmFdEtBQjy31nFEM7EEsXdqSNaV2YMq968pFdpGHj-ILn-jzcLlBpMV3M2ta5Bx5SQ8CLKMxT-IrjhGc1HxM4bgIh2ABTi7m32PmAbMtNNcc8aKNtW_mw6bkrYlrLPVOouaApbj-9cXZBWCx_zkKqxmb7S-6iR2dQn2SQ_i1s-QU4mg6YC6gtb5x7ZevpezeXbIF36m0djUWHQZaMIimGoidMpi7M4DsNkt_2MT7kiDbD9Kh5oU4j1EZ2jCskL73quLdRP0uNK-gEjWpwOa78FFAcDH7tXjtDCp7i_gfM1twoOg11JhBwEjlH2hZh3ZlTMl45drS1xR3MGmK1dLvG9--zJYf78WHsZnGcd4kGnPeBy7LR-tgB9oaAGVtVFtx-WgTa_uGBBIlKD-lff-xrZNgu7yq?","fqdn":"aj2532.bid","domain":"aj2532.bid","tld":"bid"},"ip":{"addr":"49.12.122.118","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:43.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aj2532.bid","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 08:05:17 GMT","end":"Wed, 12 Nov 2025 08:05:16 GMT"},"fingerprint":{"sha1":"79:27:08:6A:FC:70:65:84:CB:6B:5F:A4:8C:A6:B2:24:A7:78:15:DF","sha256":"F2:C5:AD:F7:F5:F4:1A:6A:7D:97:E7:B0:2F:94:E2:78:D0:BF:25:10:A4:A2:85:1A:1F:6F:F4:53:AA:66:EE:A5"}}},"request":{"raw":"POST /zXSm4iRWPBUA1o_3UWLBsDcs5UmOmSmFdEtBQjy31nFEM7EEsXdqSNaV2YMq968pFdpGHj-ILn-jzcLlBpMV3M2ta5Bx5SQ8CLKMxT-IrjhGc1HxM4bgIh2ABTi7m32PmAbMtNNcc8aKNtW_mw6bkrYlrLPVOouaApbj-9cXZBWCx_zkKqxmb7S-6iR2dQn2SQ_i1s-QU4mg6YC6gtb5x7ZevpezeXbIF36m0djUWHQZaMIimGoidMpi7M4DsNkt_2MT7kiDbD9Kh5oU4j1EZ2jCskL73quLdRP0uNK-gEjWpwOa78FFAcDH7tXjtDCp7i_gfM1twoOg11JhBwEjlH2hZh3ZlTMl45drS1xR3MGmK1dLvG9--zJYf78WHsZnGcd4kGnPeBy7LR-tgB9oaAGVtVFtx-WgTa_uGBBIlKD-lff-xrZNgu7yq? HTTP/1.1\r\nHost: aj2532.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.banflix.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\naccept-ch: Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\npermissions-policy: *\r\np3p: CP=\"CAO PSA OUR\"\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.banflix.top\r\nset-cookie: UUID=8b765359-edd1-5c8a-9867-ae225b688f1a; Domain=aj2532.bid; Expires=Thu, 29 Oct 2026 22:10:43 GMT; Path=/; Secure; SameSite=None\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 877\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":877,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"13827b7d6c24c6b4dea5ed11733f234b","sha1":"822044b355359926960a951d1a5f13f2ce33e2db","sha256":"b75bc1e8483ae31d38d4aa843aa796bd03ce90e1d36776103c37a9ec779eddb3","sha512":"9e867db3605a7e627dbe4618727ac3de166327ae416ab11f280c62d8b1c19cfb5c1a08fc215c075c136514a80866b6cf6ca3f7cc3cdef2e736f498b0a1af3bd9","ssdeep":"","tlshash":"c81156aade69cd05421285c15662c3a4af0e4d4edf08d5c7e394dd9cf144be51934619","first_seen":"2025-09-24T22:11:23.211072Z","last_seen":"2025-09-24T22:11:23.211072Z","times_seen":1,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":13,"connect":24,"send":0,"wait":32,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:44.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.banflix.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29844\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Sep 2025 09:57:27 GMT\r\nexpires: Fri, 18 Sep 2026 09:57:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 562397\r\nlast-modified: Wed, 27 Aug 2025 19:19:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29844,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29844, version 1.0","md5":"9418887ae687a640730a62da6d5cef56","sha1":"c82ce6b645275be73a81d3c9027f540c0add912f","sha256":"3658a0717e347c1db8d80dd565584b9dc56769fbf87909c50a4a7740206ec5f7","sha512":"c700f698292446c2f7b8c6ab8d44eedc78ef1a0053faec159ef3f67d321bc5c9b0c24b8860ca15dcd02b24da947a32f2640bd00b4ba2c6729f3a7810ba441487","ssdeep":"768:8K/8hhK5wKRT6RxuABYd47Sm56257a/1MePoWvV6:88Sh3eTzABYdkR5b5SPoEI","tlshash":"bad2f160971a7d67dfe1de267811eb4f43aa36df0f515a4918da35cc231e38920b43e4","first_seen":"2025-09-02T19:57:23.466991Z","last_seen":"2026-05-05T06:32:57.219415Z","times_seen":12141,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/media/favicon-16x16.png","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:44.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET /media/favicon-16x16.png HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:10:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 254\r\nlast-modified: Thu, 09 Nov 2023 16:43:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"654d0c48-fe\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d6aSrgRieh%2BmNmxCsTiR4YOFpufLheiNFofDIeDUeWd3c%2ByofbeW1AJyIO%2B4JlirmFLbrV25zhMRhtvPE%2FZdPC0WNU6tBzA8%2BsnRPbGdlw%3D%3D\"}]}\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98459d132928783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":254,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"6673c2cce2340d9d96a5cc9ff0aaceac","sha1":"0f7bfaa47459edec0b89b081b919216ee1d62817","sha256":"b7f61108b041fd22c89fb2e6d4389b6016fffe138ac9c21faa532ac49813b91c","sha512":"cbb31cce2a785f3d85b9dc09551fb8dddaf4476e199a7cd79eab4d9e65d1848a1a4d72b495d4dc465436ec8c19348391a5993d0a054c3c13b8756b3a675af866","ssdeep":"","tlshash":"2ad095c17c951c7c55cd4e27c707b5a06926300162c6d31eb9d7c6b86d4014045dd567","first_seen":"2024-01-26T19:51:32Z","last_seen":"2025-11-09T20:40:42.71593Z","times_seen":11,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aj2532.bid/zUV5XgfpOK79HRpSsjmvPcQ3FExk5wAiVFvHtfAMwE8OdKxVMjshPqie9S1fENObErw94BfiZ0sSLFsG4pRRTnILUXtRx_uHT9IVJiZEIUoarT8ZzwKFz9gcJMoYHgy1WGVSv6scnd96i01Anr6WKGWYDXvqMWP-boE5dODFhfNabS328b1jhSBE-iq0iUynWV_EzuDPNsitxus92vTaDTOEvRLw7RkwVxt7s-Q9ahZ5ggkovVDRa3Ilw31z4YSHhIukDWOObkMM2bD421PdKlh0Cfs97J9KsbUGeBTD4V1kl3yNxPAn832QYa4tjNm46g4pB6adpzP-s_RaRfhXa7HhghEYtIFRe24jBCS3Nn91skf_BL3gNmtDvG6tIYpJ4u_AE47IWh3zdYBC2Hhfs3HGRjuJV7j81GBtsMFRMDPmafq3l8ZY1u-ap?","fqdn":"aj2532.bid","domain":"aj2532.bid","tld":"bid"},"ip":{"addr":"49.12.122.118","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:43.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aj2532.bid","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 08:05:17 GMT","end":"Wed, 12 Nov 2025 08:05:16 GMT"},"fingerprint":{"sha1":"79:27:08:6A:FC:70:65:84:CB:6B:5F:A4:8C:A6:B2:24:A7:78:15:DF","sha256":"F2:C5:AD:F7:F5:F4:1A:6A:7D:97:E7:B0:2F:94:E2:78:D0:BF:25:10:A4:A2:85:1A:1F:6F:F4:53:AA:66:EE:A5"}}},"request":{"raw":"POST /zUV5XgfpOK79HRpSsjmvPcQ3FExk5wAiVFvHtfAMwE8OdKxVMjshPqie9S1fENObErw94BfiZ0sSLFsG4pRRTnILUXtRx_uHT9IVJiZEIUoarT8ZzwKFz9gcJMoYHgy1WGVSv6scnd96i01Anr6WKGWYDXvqMWP-boE5dODFhfNabS328b1jhSBE-iq0iUynWV_EzuDPNsitxus92vTaDTOEvRLw7RkwVxt7s-Q9ahZ5ggkovVDRa3Ilw31z4YSHhIukDWOObkMM2bD421PdKlh0Cfs97J9KsbUGeBTD4V1kl3yNxPAn832QYa4tjNm46g4pB6adpzP-s_RaRfhXa7HhghEYtIFRe24jBCS3Nn91skf_BL3gNmtDvG6tIYpJ4u_AE47IWh3zdYBC2Hhfs3HGRjuJV7j81GBtsMFRMDPmafq3l8ZY1u-ap? HTTP/1.1\r\nHost: aj2532.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.banflix.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\naccept-ch: Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\npermissions-policy: *\r\np3p: CP=\"CAO PSA OUR\"\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.banflix.top\r\nset-cookie: UUID=8b765359-edd1-5c8a-9867-ae225b688f1a; Domain=aj2532.bid; Expires=Thu, 29 Oct 2026 22:10:43 GMT; Path=/; Secure; SameSite=None\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 877\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":877,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"9bc85bce8eaa68b4c97e15d32820f695","sha1":"179091599564158b02d10f79972144c9c901b78a","sha256":"3de617e7edabd0e79e8740daeda77105442b1d6aaa5b0605e5b8403ceed8f8ab","sha512":"398defed0bfda924ba1e1a0a0190ee246f31f7cf539ae4999e1fb51fdef6865641a23566b6430928ba108ee6828ec6145c983baeb585dc513ce356bdad0231fc","ssdeep":"","tlshash":"1b1196a50f05e2884713c8e4b7bba44c279c9fa7ae5aaf07c2ca4a982041be51611b15","first_seen":"2025-09-24T22:11:23.214636Z","last_seen":"2025-09-24T22:11:23.214636Z","times_seen":1,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":8,"connect":24,"send":0,"wait":29,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-24T22:10:42.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i6ZnAm9PsAKUYracQw%2Bqo1B8XDH2A7LcfbWuhf8eHVPhjZgPPVfOzoufDY1J%2FGu6fIfZ2ynsEOXDM1XLLuNud5bWB%2B4zYOShvLWR15e0zg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=5,cfOrigin;dur=475\r\ncontent-encoding: br\r\nset-cookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98; Path=/\r\ncf-ray: 98459d05aeda35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68913,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (714), with CRLF, LF line terminators","md5":"4d79c2b9d6739d1b4686b22b87bfe1d0","sha1":"75a9aa9c7ed12c05961865205911c85bcb4cd6c0","sha256":"8f9c3e8f810fc9a8c2b5c4418b5ca53ffd25445fb0c6045f0b16f0307609df39","sha512":"9a723ac6f9bfbe2c7107e9c247b1bb9e49f21d42a8b5e89c38984f68a98a44a452c9afd05fb3b552162c7153d65c87831b273f375029ae2b78f772e9f2f8bec2","ssdeep":"1536:wOQVhbZRw5jOjVhbZRw5jOy9VhbZRw5jOO2:OVhbZRw5jOjVhbZRw5jOy9VhbZRw5jOV","tlshash":"3763977122c118b701b7cae86a745fbafa29834bca57d545b3ee0b979fb6c01cc13191","first_seen":"2025-09-24T22:11:23.215923Z","last_seen":"2025-09-24T22:11:23.215923Z","times_seen":1,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":494,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:10:42Z","timestamp":1758751842,"ip_dst":{"addr":"172.67.146.10","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":42484,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-24T22:10:42.188477+0000\",\"flow_id\":1869044884092138,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":42484,\"dest_ip\":\"172.67.146.10\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.banflix.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.banflix.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":672,\"bytes_toclient\":858,\"start\":\"2025-09-24T22:10:42.177386+0000\"}}"}],"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.66.155.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Jul 2025 04:42:37 GMT","end":"Sun, 26 Oct 2025 05:42:34 GMT"},"fingerprint":{"sha1":"A9:2C:36:C2:5B:79:EB:33:93:88:54:08:DE:EC:77:65:7B:80:68:B3","sha256":"18:96:B7:DD:E9:B4:31:CC:9A:C7:1C:44:AF:F5:7E:C1:6C:25:F1:75:D6:6E:9A:7E:86:AC:B9:F8:49:97:6D:B4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 24 Sep 2025 22:10:43 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::lnfrf-1758751543364-3eed5b109119\r\nvary: accept-encoding\r\nage: 232\r\ncf-cache-status: HIT\r\ncf-ray: 98459d0b4cd9a0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-05T08:09:51.362598Z","times_seen":14678067,"resource_available":true,"data":null}},"time_used":352,"timings":{"blocked":156,"dns":1,"connect":1,"send":0,"wait":14,"receive":0,"ssl":177},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/thumbnails/68ced6b40cb6b.png","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET /thumbnails/68ced6b40cb6b.png HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 558357\r\nlast-modified: Sat, 20 Sep 2025 16:30:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68ced6b3-88515\"\r\naccept-ranges: bytes\r\nage: 6410\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=05R4DU%2B7j%2Fl1MlvXjhe9yeAFngPcV3xjMBOAxCYsPQeNhXNnI83jotOoe9oIBHRbRWxGbPReBSYmZFBRwPlCA0AUF1qGSAh6Z2%2Bj5zjR%2Fw%3D%3D\"}]}\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98459d0a2867783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":558357,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 592, 8-bit/color RGBA, non-interlaced","md5":"0c316dd3cf16b02c65b0feebdd479922","sha1":"8aeee7881a48ecaa4aa71a30a61201b630cd5670","sha256":"36ddc6410c99f487f9a5df7138f708a975c7265754e6d10fe730f5f01e004ed5","sha512":"674fc284e947505a7e1488d75b5b65d24cb98d535ca321c56961f7dba716e8d07a9fe2dcefd83b950592f32951b3dca9216b7542fe64b5e129c21a9fc5841790","ssdeep":"12288:jt7ezSwPHWpyGxGeHrva6EhQpSZkmX3TOwAHUGN4v:BazSN4Gri68QgamX3TOwAHUGN4v","tlshash":"1ac4235fea0626b710edcad947de922b73c24e308ddb0ab6450a167e93b58b3304d717","first_seen":"2025-09-22T18:14:28.527623Z","last_seen":"2025-09-24T22:11:23.217314Z","times_seen":2,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.66.155.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:43.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Jul 2025 04:42:37 GMT","end":"Sun, 26 Oct 2025 05:42:34 GMT"},"fingerprint":{"sha1":"A9:2C:36:C2:5B:79:EB:33:93:88:54:08:DE:EC:77:65:7B:80:68:B3","sha256":"18:96:B7:DD:E9:B4:31:CC:9A:C7:1C:44:AF:F5:7E:C1:6C:25:F1:75:D6:6E:9A:7E:86:AC:B9:F8:49:97:6D:B4"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.banflix.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:10:43 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::f7qtx-1754703953616-47530b9ea371\r\nlast-modified: Sat, 09 Aug 2025 01:45:54 GMT\r\nvary: accept-encoding\r\nage: 2227019\r\ncf-cache-status: HIT\r\ncf-ray: 98459d0e8a5da0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-05-05T08:02:16.498949Z","times_seen":34620,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e.dtscout.com/725/?sub=917\u0026l=https%3A%2F%2Fwww.banflix.top%2F\u0026j=\u0026uid=8b765359-edd1-5c8a-9867-ae225b688f1a","fqdn":"e.dtscout.com","domain":"dtscout.com","tld":"com"},"ip":{"addr":"104.26.11.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:44.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtscout.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 12:11:28 GMT","end":"Sat, 29 Nov 2025 13:05:40 GMT"},"fingerprint":{"sha1":"8C:1A:8B:5A:0D:05:D0:E1:27:9B:25:7F:4F:AD:2F:0D:B4:F7:E5:14","sha256":"6E:3E:4E:99:17:89:21:6A:AA:63:31:A7:CE:8D:C6:4C:29:96:63:AE:64:9F:42:19:D7:28:92:10:03:EE:8D:75"}}},"request":{"raw":"GET /725/?sub=917\u0026l=https%3A%2F%2Fwww.banflix.top%2F\u0026j=\u0026uid=8b765359-edd1-5c8a-9867-ae225b688f1a HTTP/1.1\r\nHost: e.dtscout.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:10:44 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-s: mtl2\r\nx-t: 0.472\r\nexpires: Wed, 24 Sep 2025 22:10:43 GMT\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KxHMnCWtKuvermCmXobmrAChAnhesP2EHxXKFhFlaB6CwAIgCqWnMHLROqYmcf6N%2Fm2pk7gchyRFr1GKg9NpG6tUNKDSbS%2FEAa7%2FHg%3D%3D\"}]}\r\ncontent-encoding: br\r\nset-cookie: df=1758751844; SameSite=None; Secure; Path=/; Domain=dtscout.com; Max-Age=8640000; Expires=Fri, 02 Jan 2026 22:10:44 GMT\r\ncf-ray: 98459d141c3a1a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-05T08:09:51.362598Z","times_seen":14678067,"resource_available":true,"data":null}},"time_used":403,"timings":{"blocked":59,"dns":4,"connect":1,"send":0,"wait":277,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/thumbnails/68ce01bf225b7.png","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET /thumbnails/68ce01bf225b7.png HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 518025\r\nlast-modified: Sat, 20 Sep 2025 01:22:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68ce01be-7e789\"\r\naccept-ranges: bytes\r\nage: 6409\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FajBMLhLXEJqS5JOHFsLBSMJ%2B9kGG675IJW%2BjhjLsVl8sM9L3tcPGOC5sADL8EOrBlDX3KShXB1PsxpaiEnUVa7uVmZ5kfehHkv1KNDRmA%3D%3D\"}]}\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98459d0a386f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":518025,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1142 x 704, 8-bit/color RGBA, non-interlaced","md5":"41e3eef472b3ef1ec8bb6aa4fd88448a","sha1":"20d9abb1e4420e6fdb4ca8dac11e04d691f01ba3","sha256":"38313a9136b0ef0ed95b54e1d0297c9e83be9e58bbc1e0cde8781ff4a55403de","sha512":"60e57d1a5422a6450b8983311b89e1fc7ed126a5af127ca8a340fca19677ce7e70e9984c1ceaa7667ee2d48278245c3107e29b35318e49d628892b8dae1b646b","ssdeep":"12288:BlMmoVSQVYeEWiHa55kgzu4TA63Jv5nkoKLE0DMyY:BlDQ/EBe5kgNMkzkK0DfY","tlshash":"deb423feeafc9f5af1fcd98419e4aa90f0851798bde45218f662f13419f9a5e302100d","first_seen":"2025-09-22T18:14:28.515306Z","last_seen":"2025-09-24T22:11:23.219492Z","times_seen":2,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":194,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/thumbnails/68c2c2e60c6eb.jpg","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET /thumbnails/68c2c2e60c6eb.jpg HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 354808\r\nlast-modified: Thu, 11 Sep 2025 12:39:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68c2c2e5-569f8\"\r\naccept-ranges: bytes\r\nage: 3634\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ff0CQQh0C5pygl2e%2Fa27S07PTt8wLxLJRDuqx8vpLTHTFtzHBTx6Ih5BtQfB%2Fz%2FXDEO2k1DaznNCF%2BrTvLVDqBpXiPV1fF6fyUXL7blnrA%3D%3D\"}]}\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98459d0a4872783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":354808,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1839, components 3","md5":"6506d949f5cd3795431dc24c81796914","sha1":"0d41ebf22cd2adc02d5c22197d21a30a507aabf4","sha256":"18c3fcad2035e73876a8166523a576e19a4c3a331aad862637b6954a343d0cec","sha512":"7c7b560460200e8e593df194d274e9ff63993c1e4b17d19b8ec03797ac4b5dffd2b6a0b82bdba955a9c0952329cffd28b40f4de44a1c71966aa48fa147aed773","ssdeep":"6144:ed8bMCv630OGGG9ie3Jxr0SOK311B7CFZwydl489SAIhxT2IkKHHQhiy0v5bXE9W:k8A3kTzTRX1lC8w9x4Esy0xg9oTac","tlshash":"f974239f564b56fa8124fdf530c9181a701c5d0364f52af85ca8bbc4268edc3e2bacb1","first_seen":"2025-09-24T22:11:23.220825Z","last_seen":"2025-11-09T20:40:42.71415Z","times_seen":2,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":240,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/thumbnails/6839a967eb387.jpg","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET /thumbnails/6839a967eb387.jpg HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 47944\r\nlast-modified: Fri, 30 May 2025 12:49:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6839a967-bb48\"\r\naccept-ranges: bytes\r\nage: 3634\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vYzP0MQjoqFnJSDNuPtRpSSe3lPmOY8NLtwZzuRyleEvMXEszCI5X8D8iTW%2FJlenagWn0enfAPREoHyG4RqYKbH%2FDXe5Vz2tXJteGVWDDw%3D%3D\"}]}\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98459d0a4876783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47944,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 550x861, components 3","md5":"a38f5c33be40e8024a539bfdd98c49bc","sha1":"eb2636220767c3ad92498b29fe6e4b25bf7207cc","sha256":"c52ab9933bdc9d9a37f56ff167e54e643ae0dd4f42338fed75086120e64ae3ad","sha512":"8969ddbed8e6363229321d4a43be8232b5205bb9825fd9f78b7dc4893d1b62b4b238f1237c902b413728f73977b399dcf7cd970703f379c65cbf48ffbbf8269f","ssdeep":"768:boGq48AfR9qrTnmQeAVDfG6YLJ1XYEye5nd7iXcyoenCiyy5QW5zGVC9wtRR:bor4LRGT9s5zXRyYntKG4CJW5zGAwtRR","tlshash":"7223014513931388be544ac6b7287c97caec26a32de4b78a35f0750b78764e3ebde105","first_seen":"2025-09-24T22:11:23.222264Z","last_seen":"2025-09-24T22:11:23.222264Z","times_seen":1,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Karla\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:43.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css2?family=Karla\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 24 Sep 2025 22:10:43 GMT\r\ndate: Wed, 24 Sep 2025 22:10:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":859,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c39cca1b1e63a1845419e6320b21f97c","sha1":"ea1b16f435df48cbc4b79fcf5d1499f46d900e75","sha256":"8319703d08f4dcecfc1487859e3065e0380b134b13e84e9b6846749f40aa3d96","sha512":"5ece195916851b88ca82a2ff14899a2a40ba4b2354731af64657c4da93aebc11b7b92404c0a774794cd5f614064495546ea4802cc31d10275cc9fe51ecf6b4dd","ssdeep":"","tlshash":"f51112920c5be504eb971cc612de7d36ee1e21506440a6746bfe24dcfc9ac5e431270d","first_seen":"2025-09-21T17:15:23.190511Z","last_seen":"2026-05-05T09:00:39.190929Z","times_seen":163,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":149,"dns":1,"connect":20,"send":0,"wait":34,"receive":0,"ssl":153},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/media/logo.png","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET /media/logo.png HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 23815\r\nlast-modified: Wed, 30 Aug 2023 01:48:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"64ee9fea-5d07\"\r\naccept-ranges: bytes\r\nage: 228\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WbKjRVWfSBvT2MierYZMzDkRdjBjFOCtjUGGst7n37UiJA2tIQfvPvw0AGBYdOgeKvn6QInwqWl8l1dVRp6aE6YQTGLyVA1Gt9CoAieFGQ%3D%3D\"}]}\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98459d0a2866783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23815,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 217 x 62, 16-bit gray+alpha, non-interlaced","md5":"fdcad846a7c41e94c84834ea742aa2fb","sha1":"936abe07f8ba5e0aa4e24ffe35e5455dbc8be446","sha256":"c91936643404ff7c56e9cdccf5e7fda27e33b9b1c464451f7ece04938569f870","sha512":"810432f357e5a341e6b3983b0b574064f2ef4aa00d68562ff7c9262f07e8c7a3f1715e99db599a762843f3d861362dfa7f2e1c2ab2ec0a283ac48211292db9da","ssdeep":"384:QUtcBNG5IeuL0LSQSyVcDpapKrE62SBYJHkNX8V2svZ5Pcxs2Ny:QUEIbuL0mQSBx1DqJHk5Rsx5PCQ","tlshash":"ceb2e1e5453cab71d11d473254f17cee4c8121deba9e6a50f9766ed9f80abe022cdc02","first_seen":"2024-01-26T19:51:31Z","last_seen":"2025-11-09T10:47:44.717298Z","times_seen":15,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/thumbnails/6834cb3a8ec17.PNG","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET /thumbnails/6834cb3a8ec17.PNG HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:10:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 263420\r\nlast-modified: Mon, 26 May 2025 20:12:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6834cb3a-404fc\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xbb029DKr6gcJ5Vb1DU3C2AZMyEpx2ZQqynrwn%2F13Gz4aaxvYAzjXvuyWOP%2ByDixW43s3EPo1aN3fEUChbqoWscB1dGbyJXgx3T9R85UKA%3D%3D\"}]}\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98459d0a487a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":263420,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 324 x 485, 8-bit/color RGBA, non-interlaced","md5":"0312a81186e8bc589ade9c0790bfc0d6","sha1":"7a13c4cead58c4718e7cc82bef02f2c33496af65","sha256":"52388973155151c5649a84552726198e1aac57eabb30651137a6bcd6ea958f9f","sha512":"e9b4056fcf173624787f63abc40dea8730ef1b8029a3e61f4bd179e7c79a34907d1cdd1252f171641441dca36a49f5e0c0b403f602c5bc0f2e8ae4d0410b9bfc","ssdeep":"6144:jCt09snvuQINE77B4jkeLrOHvRgbr+tagtSHD4Ft5YRMlML1olR:jC28vuQuE77B4wemPKP+tagtS0tKMMoR","tlshash":"81442357ce0ce0dd5bf8746089f505bdaff92f468c26b5de491008c56a43f298e74a93","first_seen":"2025-09-24T22:11:23.22523Z","last_seen":"2025-11-09T20:40:42.713303Z","times_seen":2,"resource_available":false,"data":null}},"time_used":816,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":466,"receive":350,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aj2532.bid/z2EXArQMLHcTtNFmbR6hIlD5I45kWsyjsy7Iuidn_JjLWl5W5J1L-a2Frs-GYeuBUrcK4kObjsp55hCckcOuH4Zxz497gatLFVVEjxMZ2BT1Sq1fYtgdHt-ylM0O42RzkS2LYZADMltD3dBMHPnJT1LqQMiTUODBVDk2nA-6yJH7JfIbYHFabPuV8X1CpjJG1AyL04WUKEwmMTNGaYYlCbk9OzSgnr9CZ-Cpp68Ejykf9Z5meMli4bhE6ylv--2bajIs68C5nuhObdt3T1mX38eG7_VkF6MgcVYzQaC6SGeaSYTMoXVGE75AytlvolwppqcAzsTawJMwuT_su45TaTYulBCFNw-dgoWuEMquwubgZgjEDOEawTyIoHb9lesP-lp5UJF-GtDjhd3-o9MttDs92-jdoQ9x0?DC=HZ","fqdn":"aj2532.bid","domain":"aj2532.bid","tld":"bid"},"ip":{"addr":"49.12.122.118","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:43.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aj2532.bid","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 08:05:17 GMT","end":"Wed, 12 Nov 2025 08:05:16 GMT"},"fingerprint":{"sha1":"79:27:08:6A:FC:70:65:84:CB:6B:5F:A4:8C:A6:B2:24:A7:78:15:DF","sha256":"F2:C5:AD:F7:F5:F4:1A:6A:7D:97:E7:B0:2F:94:E2:78:D0:BF:25:10:A4:A2:85:1A:1F:6F:F4:53:AA:66:EE:A5"}}},"request":{"raw":"GET /z2EXArQMLHcTtNFmbR6hIlD5I45kWsyjsy7Iuidn_JjLWl5W5J1L-a2Frs-GYeuBUrcK4kObjsp55hCckcOuH4Zxz497gatLFVVEjxMZ2BT1Sq1fYtgdHt-ylM0O42RzkS2LYZADMltD3dBMHPnJT1LqQMiTUODBVDk2nA-6yJH7JfIbYHFabPuV8X1CpjJG1AyL04WUKEwmMTNGaYYlCbk9OzSgnr9CZ-Cpp68Ejykf9Z5meMli4bhE6ylv--2bajIs68C5nuhObdt3T1mX38eG7_VkF6MgcVYzQaC6SGeaSYTMoXVGE75AytlvolwppqcAzsTawJMwuT_su45TaTYulBCFNw-dgoWuEMquwubgZgjEDOEawTyIoHb9lesP-lp5UJF-GtDjhd3-o9MttDs92-jdoQ9x0?DC=HZ HTTP/1.1\r\nHost: aj2532.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: UUID=8b765359-edd1-5c8a-9867-ae225b688f1a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\naccept-ch: Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\npermissions-policy: *\r\np3p: CP=\"CAO PSA OUR\"\r\nset-cookie: ucv=1223-NO-1758838243714-24--; Domain=aj2532.bid; Expires=Thu, 24 Sep 2026 22:10:43 GMT; Path=/; Secure; SameSite=None\r\naccept-ranges: bytes\r\netag: W/\"43-1754471702000\"\r\nlast-modified: Wed, 06 Aug 2025 09:15:02 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-05-05T07:26:39.839403Z","times_seen":98978,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/cdn-cgi/rum?","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:44.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1026\r\nOrigin: https://www.banflix.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://www.banflix.top\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eWwrCuDhA9UMIps9dF0vXHkoGsLsp6SsVjilqGEq4K2dBIO%2B%2FzqqBBpYZ4JpKXk%2BX1rEu4I3AcjPRpCiIxptoKq2ecvGbsk7RQqEIso2UQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 24 Sep 2025 22:10:44 GMT\r\nserver: cloudflare\r\ncf-ray: 98459d13c92a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-05T08:09:51.362598Z","times_seen":14678067,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/karla/v33/qkBIXvYC6trAT55ZBi1ueQVIjQTD-JqaE0lK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:43.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/karla/v33/qkBIXvYC6trAT55ZBi1ueQVIjQTD-JqaE0lK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.banflix.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13140\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 19 Sep 2025 09:40:08 GMT\r\nexpires: Sat, 19 Sep 2026 09:40:08 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:45:37 GMT\r\ncontent-type: font/woff2\r\nage: 477036\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13140,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13140, version 1.0","md5":"27f1a02c8f1adadd35238c2e1bc886c1","sha1":"6320bb65a84b545c6cf42017f981878d384e6819","sha256":"250bb48fdea5ba354fa85161f3877121ef679c6f7a1ef3d8f173fb8979628906","sha512":"98b46ac207f47779389714a1abe3cf8135c689859a59bb9ae792b97ec10ba0935bb73f06196cd84a8d9181a9f35f4cde963f731b321bf1aeff92c8afb2bd9094","ssdeep":"192:p3L/hJ3iQvGol9RisQklwo87Hc60O2GoRgsefk31ffGlhsjaerjs:VL5zGG8sQvvw6GtRcYfjfs","tlshash":"fc42bf5cab36ea80cca53e371356c69536417404e7dfef0ad5ac01e271d0b96b78c09c","first_seen":"2025-09-13T06:46:48.333272Z","last_seen":"2026-05-05T07:28:01.918839Z","times_seen":2056,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":90,"dns":1,"connect":21,"send":0,"wait":23,"receive":3,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/remixicon@2.2.0/fonts/remixicon.woff2?t=1578671877458","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:44.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/remixicon@2.2.0/fonts/remixicon.woff2?t=1578671877458 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.banflix.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Sep 2025 22:10:44 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 110228\r\ncf-ray: 98459d12a8deb4ed-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 2.2.0\r\nx-jsd-version-type: version\r\netag: W/\"1ae94-VFyKsHlKAiFxHgBHrz5AMsFNSnU\"\r\nx-served-by: cache-fra-eddf8230081-FRA, cache-vie6349-VIE\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 1326937\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=24A84qUM8sc9iRIu9hVjmtngflXUBv1hD5PNO5bY8%2FD2IWk813x6VqNYV832l4HTT%2Ba6smkFgz3iSj69zA3gbugt%2B%2BRGi0XGNdeCxO40ozbXYcHVcmLkDY94SoQ8H3RBi2I%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110228,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 110228, version 1.0","md5":"34ab8e4b8fd2447a24f20b64f06f0dc1","sha1":"545c8ab0794a0221711e0047af3e4032c14d4a75","sha256":"1b187ff075581862a025d0b32df2256c582440f7863564d5de7c2a96c66cc2df","sha512":"aabf69de0a295e87f6a99e7c8f5edefb73858eb369e1a4810bc1f6d1f021fa643e878f1e9503747cfb6cb1b03db67c2e7affa9c467fac9380ed90462c2f23997","ssdeep":"1536:K+OhITjBcQzOHEOToKDa9kfxLnQV00AFZ9/w/nzabIziNTI53Eqc0N1aqLJvpqoN:SSvDqLu6xLDTpkKk5UqlN1aMPHt","tlshash":"c5b312555da2e44de3d7f4bdf22b766a3c8384f6e49703c8c2a639660cd7292fa14c80","first_seen":"2023-05-18T03:45:25Z","last_seen":"2026-05-05T09:01:00.522339Z","times_seen":88,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":10,"dns":1,"connect":0,"send":0,"wait":12,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aj2532.bid/zgzo0wp58aZELXVpZEZ48EkBgoHYAbbBLSvP1lJyc6fudERQzbJcdWjo8n3NTv1L_Jc0EKBeN3tzzZk0IxUR-5V06mznYF3R6KnjVeykTHhbQevhGtd36d4PWe6PbLuHaeRDmluYeDMO44SBUZ8d8liw7Im-Jd3pdEB2q4APWTiutqCMzPyEsxRSSkO3cQCAY4Xe4qmVXN_0cEhjmLJ6i5ZNE813N0q93ujFQZd-47ekot1cAHyfce6CbTDsqNvgZBLvK2Lwgvbvs0r1CUmVpxfexK74AjxoHFXXkoV1ZU2lG4TwBpTE79yAbD0S4ewzl0w6Ewl49JHkihlQ85IensoI0AHzdVoEYTz4tDP50aV7a2ifh7Us4CuBBaPWe1G5IfQjmeA?DC=HZ","fqdn":"aj2532.bid","domain":"aj2532.bid","tld":"bid"},"ip":{"addr":"49.12.122.118","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:49.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aj2532.bid","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 08:05:17 GMT","end":"Wed, 12 Nov 2025 08:05:16 GMT"},"fingerprint":{"sha1":"79:27:08:6A:FC:70:65:84:CB:6B:5F:A4:8C:A6:B2:24:A7:78:15:DF","sha256":"F2:C5:AD:F7:F5:F4:1A:6A:7D:97:E7:B0:2F:94:E2:78:D0:BF:25:10:A4:A2:85:1A:1F:6F:F4:53:AA:66:EE:A5"}}},"request":{"raw":"GET /zgzo0wp58aZELXVpZEZ48EkBgoHYAbbBLSvP1lJyc6fudERQzbJcdWjo8n3NTv1L_Jc0EKBeN3tzzZk0IxUR-5V06mznYF3R6KnjVeykTHhbQevhGtd36d4PWe6PbLuHaeRDmluYeDMO44SBUZ8d8liw7Im-Jd3pdEB2q4APWTiutqCMzPyEsxRSSkO3cQCAY4Xe4qmVXN_0cEhjmLJ6i5ZNE813N0q93ujFQZd-47ekot1cAHyfce6CbTDsqNvgZBLvK2Lwgvbvs0r1CUmVpxfexK74AjxoHFXXkoV1ZU2lG4TwBpTE79yAbD0S4ewzl0w6Ewl49JHkihlQ85IensoI0AHzdVoEYTz4tDP50aV7a2ifh7Us4CuBBaPWe1G5IfQjmeA?DC=HZ HTTP/1.1\r\nHost: aj2532.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: UUID=8b765359-edd1-5c8a-9867-ae225b688f1a; ucv=1223-NO-1758838243714-24--\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\naccept-ch: Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\npermissions-policy: *\r\np3p: CP=\"CAO PSA OUR\"\r\naccept-ranges: bytes\r\netag: W/\"49-1754471702000\"\r\nlast-modified: Wed, 06 Aug 2025 09:15:02 GMT\r\ncontent-type: image/gif\r\ncontent-length: 49\r\ndate: Wed, 24 Sep 2025 22:10:48 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":49,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"56398e76be6355ad5999b262208a17c9","sha1":"a1fdee122b95748d81cee426d717c05b5174fe96","sha256":"2f561b02a49376e3679acd5975e3790abdff09ecbadfa1e1858c7ba26e3ffcef","sha512":"fd8b021f0236e487bfee13bf8f0ae98760abc492f7ca3023e292631979e135cb4ccb0c89b6234971b060ad72c0ca4474cbb5092c6c7a3255d81a54a36277b486","ssdeep":"","tlshash":"609002438585c491d151c1304814935011b5a5614505134ea6a836adac551a1c800408","first_seen":"2023-04-05T11:29:19Z","last_seen":"2026-05-05T08:48:59.613609Z","times_seen":10168,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/thumbnails/68b6a1447b641.jpg","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET /thumbnails/68b6a1447b641.jpg HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 326955\r\nlast-modified: Tue, 02 Sep 2025 07:48:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b6a144-4fd2b\"\r\naccept-ranges: bytes\r\nage: 3633\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DbI2vTJYQiD9WBuK8kEAxEOfTZMq9O0nPhJHkq6i1Zojs4t8Ty%2FUVOs9lbfHOG%2F7uuIo6pAuNAJ0uAlblsK6D7yMlBS%2FF9P0bbzAKQZgYw%3D%3D\"}]}\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98459d0a4875783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":326955,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=4, height=0, orientation=upper-left, width=0], baseline, precision 8, 1080x1032, components 3","md5":"9b7ef336ba55dace0d8fd0764122e547","sha1":"f723c922a4e98978c7171e4e7878a27ab3b45bc9","sha256":"b508849e6d9b376f3b1d3b1100635cee2a1362de1103314618704a2b0025af58","sha512":"51afed15122c07b148af280d2d79d96e08383862475f983642385ed0c399382fcca9a6837a51bb7ca0121e92f1530d5e63dc22a1f4bfd937aef04a83a45d8efb","ssdeep":"6144:hT0cz712hhV0ebaiCPP0hgNMbbjP1DMqr/QtkY4uNu67G+jsiL5q:hT0cz7+0HTkjbf1wqr/QqLuN0+xc","tlshash":"fa64238e90f5cdd3d0aab83940d1ce6fbd07be49d7652b9325b54850edc7ac6e26800b","first_seen":"2025-09-24T22:11:23.228507Z","last_seen":"2025-09-24T22:11:23.228507Z","times_seen":1,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn77.aj2532.bid/95316cff.js","fqdn":"cdn77.aj2532.bid","domain":"aj2532.bid","tld":"bid"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:44.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1666364575.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 06:31:52 GMT","end":"Sat, 25 Oct 2025 06:31:51 GMT"},"fingerprint":{"sha1":"08:98:C7:6D:4C:4B:44:F2:C9:A3:0C:FF:7D:A0:CD:0C:2A:07:85:ED","sha256":"3C:75:6B:52:C0:28:D6:23:40:68:D9:46:2F:07:82:59:C3:B0:26:90:B5:EB:9D:F0:35:BD:43:B4:3C:28:0A:D5"}}},"request":{"raw":"GET /95316cff.js HTTP/1.1\r\nHost: cdn77.aj2532.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: UUID=8b765359-edd1-5c8a-9867-ae225b688f1a; ucv=1223-NO-1758838243714-24--\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:10:44 GMT\r\ncontent-type: text/javascript\r\netag: W/\"074b35dc7991243baca07a67e8ca916c3\"\r\nx-77-nzt: EwwBuUwJGwH3ucYKAAwBuUwKCQH3/hsAAAwBJRPCLgG3AAAAAA\r\nx-77-nzt-ray: fdb541230bd30345646cd468dc4e5107\r\nx-77-cache: HIT\r\nx-77-age: 706233\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":37797,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (37797), with no line terminators","md5":"74b35dc7991243baca07a67e8ca916c3","sha1":"7e71f533b462e4a5f851c1afd389c668da1f12ca","sha256":"e4387b709bbba29d4e2fe5e5849b4dfbe9124f373102e90ec4aaaed8a959f118","sha512":"83bba7ecd94de3a64e308596e1e1d3c34876c7b7c19cc40e0a301eeb19ffaa660ebacb48ace208ddd7c63406693bab2b2d386e17accba98d5487b5fa64580e00","ssdeep":"768:WoLAHdpDHAC1NgldS3u3iaCDo/asO8bi/Pu8L2UcJfxxDY1n:GDHAC1Ngld4u3ia5/af/PiRYZ","tlshash":"860308debaa5b13487e685ba417f410bb17659354a2880a4f264d4e03c78a7d733bf3c","first_seen":"2025-09-17T18:43:27.968063Z","last_seen":"2025-10-29T06:09:40.758765Z","times_seen":33,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/media/apple-touch-icon.png","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:44.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET /media/apple-touch-icon.png HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:10:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 2971\r\nlast-modified: Thu, 09 Nov 2023 16:43:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"654d0c48-b9b\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9QmBABRAnuW50%2BKB8gTpcDjdZJ6F4JF1zYy9Xwy%2FftyAOJzkctFNQbfN0trwAr0clgIgpKtXI%2FBrlkjIi148a8b%2ByE5KdQcqZoZogJM6AQ%3D%3D\"}]}\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98459d132927783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2971,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"6dabc75192b64a1200befa53fc53f01f","sha1":"c2b65995f21c59acd66ec54a9cc251555c2530bb","sha256":"b7e466545d1b7b90e43487742caf7e0a910ae53341a8adbd2e4431200878799c","sha512":"c4ef43e4557707f9f6c08f5b1b0986a079126076696e701f63b93b58289ec88576fc4726ac61990f81687d9b6ced2e7035ea2da4d721640f9036764c2ab8593b","ssdeep":"","tlshash":"6e512cec192a7438d50d573690e814a2f679c4ac1873ae3dfd54373fe21b7c8a6d1240","first_seen":"2024-01-26T19:51:32Z","last_seen":"2025-11-09T20:40:42.707214Z","times_seen":11,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aj2532.bid/zSTucO-z5_HITbypJpi7uanpmqzL9s9_idLjkxb-LhEFmFwY0I8_F9MOo_hpGvm3WxPsGn-3qoiLRj5yU1dLFf2Zj_A5O1zHL-lIPY7eJNy-dOehM3eMU7IJ7IlMk2MzBvVIHmp4MaoX6sL_ZBU15fd58cGb7dlBGkL-btXKNzWIzKhrxqCGmctiBQHYcaU9dBWmBYKwEwjK6hcF2ljBc0cpNnoNbtBHmSUiynOeNN_I7rAS4tH8aW3gkJilYfjz9b1fXCbCWCRDV_-BIyfcMI3mVluBmO-1grYpKbfxkCRjqLluoTC7nSv9srcxjwiuc_WkNBpOMBotYaHN4DmHCsQ3_ii-ANZbMDtv2FIDxW2EMQJPUH-fRsxZCddKO6u_4afB47sjJ5CyXDzc1rQvnQ4clQjE8oV9N?DC=HZ","fqdn":"aj2532.bid","domain":"aj2532.bid","tld":"bid"},"ip":{"addr":"49.12.122.118","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:44.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aj2532.bid","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 08:05:17 GMT","end":"Wed, 12 Nov 2025 08:05:16 GMT"},"fingerprint":{"sha1":"79:27:08:6A:FC:70:65:84:CB:6B:5F:A4:8C:A6:B2:24:A7:78:15:DF","sha256":"F2:C5:AD:F7:F5:F4:1A:6A:7D:97:E7:B0:2F:94:E2:78:D0:BF:25:10:A4:A2:85:1A:1F:6F:F4:53:AA:66:EE:A5"}}},"request":{"raw":"GET /zSTucO-z5_HITbypJpi7uanpmqzL9s9_idLjkxb-LhEFmFwY0I8_F9MOo_hpGvm3WxPsGn-3qoiLRj5yU1dLFf2Zj_A5O1zHL-lIPY7eJNy-dOehM3eMU7IJ7IlMk2MzBvVIHmp4MaoX6sL_ZBU15fd58cGb7dlBGkL-btXKNzWIzKhrxqCGmctiBQHYcaU9dBWmBYKwEwjK6hcF2ljBc0cpNnoNbtBHmSUiynOeNN_I7rAS4tH8aW3gkJilYfjz9b1fXCbCWCRDV_-BIyfcMI3mVluBmO-1grYpKbfxkCRjqLluoTC7nSv9srcxjwiuc_WkNBpOMBotYaHN4DmHCsQ3_ii-ANZbMDtv2FIDxW2EMQJPUH-fRsxZCddKO6u_4afB47sjJ5CyXDzc1rQvnQ4clQjE8oV9N?DC=HZ HTTP/1.1\r\nHost: aj2532.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: UUID=8b765359-edd1-5c8a-9867-ae225b688f1a; ucv=1223-NO-1758838243714-24--\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\naccept-ch: Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\npermissions-policy: *\r\np3p: CP=\"CAO PSA OUR\"\r\nset-cookie: ucv=1223-NO-1758838243714-24--; Domain=aj2532.bid; Expires=Thu, 24 Sep 2026 22:10:44 GMT; Path=/; Secure; SameSite=None\r\naccept-ranges: bytes\r\netag: W/\"43-1754471702000\"\r\nlast-modified: Wed, 06 Aug 2025 09:15:02 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\ndate: Wed, 24 Sep 2025 22:10:43 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-05-05T07:26:39.839403Z","times_seen":98978,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.banflix.top/","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"172.67.146.10","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-24T22:10:42.173Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Wed, 24 Sep 2025 22:10:42 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: https://www.banflix.top/\r\nSpeculation-Rules: \"/cdn-cgi/speculation\"\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6zCp48xbP87LPddZ0F0gZ3uhjTvN8HxpTq0Un%2FGqfnqgV79CyxJJyB2MHwXkMCZ%2BjzvrZXN%2FY4tooNbD64YdNGc1jmLHy4NpvqNNEnW4Dg%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nServer-Timing: cfEdge;dur=8,cfOrigin;dur=0\r\nServer: cloudflare\r\nCF-RAY: 98459d059bc5c759-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68913,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-05T08:09:51.362598Z","times_seen":14678067,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":5,"dns":3,"connect":1,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:10:42Z","timestamp":1758751842,"ip_dst":{"addr":"172.67.146.10","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":42484,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-09-24T22:10:42.188477+0000\",\"flow_id\":1869044884092138,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":42484,\"dest_ip\":\"172.67.146.10\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.banflix.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.banflix.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":672,\"bytes_toclient\":858,\"start\":\"2025-09-24T22:10:42.177386+0000\"}}"}],"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/thumbnails/68cab4032ee79.jpg","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET /thumbnails/68cab4032ee79.jpg HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 638607\r\nlast-modified: Wed, 17 Sep 2025 13:13:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cab403-9be8f\"\r\naccept-ranges: bytes\r\nage: 3633\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fTdAxWpEBFaIMEU40ZGc%2Bf3EMYcfxoJcclsmLVpOCG5cBAJeWzJsFIYV3PoZahZsl7KkJMJqh23WPd%2FNeNAitP3bhuB6S%2FMeBKh%2F6C39qQ%3D%3D\"}]}\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98459d0a5885783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":638607,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=4, height=0, orientation=upper-left, width=0], baseline, precision 8, 1080x2400, components 3","md5":"0afde9af123684ae82fefab0e0e9a80d","sha1":"d94c37ef16736988d999ff418e3e9efcc24d6a42","sha256":"2df849415ff4f4c57e1b842881f79ff72f65e3a7602e873d808267afbbbd482f","sha512":"036c2847ea61df996487849af6c1ca2de4628ecbb05115067248080e09d8fa7f8ca36e1639440a4ed302147c3c3d8b43c5ca679d365286b1403e205f9980a9f9","ssdeep":"12288:KfyiC7NZFpVDlHs1kLWX/BpLNLjsUfi7sf6EHDZ0dXuyCrB5BhZ9RJh:KfG7NZRm1/BpJLjtn6JSbF","tlshash":"f5d4226ec77353cfbf719da81172627389eacaec8348869993cc3858e557c400b951be","first_seen":"2025-09-24T22:11:23.231035Z","last_seen":"2025-09-24T22:11:23.231035Z","times_seen":1,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Oswald\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:43.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css2?family=Oswald\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 24 Sep 2025 22:10:43 GMT\r\ndate: Wed, 24 Sep 2025 22:10:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1907,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0c56012af167c9c64cb553f4c67193ca","sha1":"aa04e60e172466c3da118fee96f59f1096311d40","sha256":"01612d0ed3d9a676c32ac4b2fbbe5c3d945c45358f335b6de733184b0f6c3fa6","sha512":"feae29d7c330d56ef53fc8f7a8e8c8a71839d5fa43085a07cf98168db5d23369fd70977505d6c1b3997dd6e633170b408bf4e17fe51593b1094af340ad08282c","ssdeep":"","tlshash":"fb41db92482b9480af4b1cc637df3e36ae5e62162414c5755ffd18acdcafe221319b4d","first_seen":"2025-09-11T22:11:43.540402Z","last_seen":"2026-05-05T08:48:34.672559Z","times_seen":1596,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":129,"dns":11,"connect":30,"send":0,"wait":21,"receive":0,"ssl":144},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/thumbnails/68940355af6f5.jpg","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET /thumbnails/68940355af6f5.jpg HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 552499\r\nlast-modified: Thu, 07 Aug 2025 01:37:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68940355-86e33\"\r\naccept-ranges: bytes\r\nage: 3633\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2NCXT3%2Foj80vUy8QwdrDZDL5xTq%2BMGE1qJ5CdCeWDHnt%2FV4ymDSnawbNK3dxCmmGhM6abOLWDF9yFIfTRA4131csE8Jevv7Cud23bPBZJQ%3D%3D\"}]}\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98459d0a4878783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":552499,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=5, height=1883, orientation=upper-left, datetime=2025:08:07 05:54:39, width=1080], baseline, precision 8, 1080x1883, components 3","md5":"c758ce18c9c85e547a758c7d2ffa435a","sha1":"6f51a61eecabebddf5abfa50564372fc172452fb","sha256":"0e6bc8c85074de9cdb7a5f5f6ce2c79549d793fa907e2a56e363808fbbc717a6","sha512":"76cd8e79cbd6acf5e66466005aab300e93d2798eef99de4246e56f0ab2cc968724e98d558d08f55ff248a254a0eade9cabf0256488d57fe1d31aa6ebc5182bbb","ssdeep":"12288:eJb71eUQ0ZVErNSE/Nf3BReuVmIWJxJAN+S7tZIDNhPTg:eJ/wUBQSgpDeqoJ8rI/U","tlshash":"24c423dea0f3d5a5ca46e27f0180fe244afe2f7710e1951c574065acd027b6a86b7bc8","first_seen":"2025-09-24T22:11:23.232872Z","last_seen":"2025-11-03T00:56:33.886348Z","times_seen":2,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/thumbnails/6829977e31bb4.jpg","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET /thumbnails/6829977e31bb4.jpg HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 145304\r\nlast-modified: Sun, 18 May 2025 08:17:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6829977e-23798\"\r\naccept-ranges: bytes\r\nage: 3633\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sGXH0e%2BMmfeetZ4Q1bPHEu2Ehn12uMHWOlwNet7Lqn9jI636QGw1NeVOVyliaPbX6FFmnoLTQH5duR%2Bm%2Fp%2FuIx7s%2FWq4hgISRsV4Lx2meQ%3D%3D\"}]}\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98459d0a5883783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":145304,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x767, components 3","md5":"e65d992c1cf436e0f09d2211f7754efa","sha1":"d83c0f6ad9899b853c4955bea266abc39be4179f","sha256":"e530f4c85a6fc17b49bf7e5917e1eaa619990676c82dda2c73162d870d84b4ca","sha512":"09e50098d8a70f8c7ca3e0eeb45884a047a9df59d99ee234b0dc21ccf2289dfb406ecf4b7da2187945a3c7811c3baa92ff511c2cdbef3c9b9b265c03eefdd55c","ssdeep":"3072:cEgK52GfQ6B3SAMCUAVYGv3yPgSoEAXC+mwR9i1/:cAK61wCPv3WgSoS+mwvi1","tlshash":"6fe3125f3c5f8829cabf9999281e003d2df184c7aa22b4d076755fa4e315ac725234e7","first_seen":"2025-09-22T18:14:28.521504Z","last_seen":"2025-09-24T22:11:23.234457Z","times_seen":2,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":464,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Lilita+One\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:43.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css2?family=Lilita+One\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 24 Sep 2025 22:10:43 GMT\r\ndate: Wed, 24 Sep 2025 22:10:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":856,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a71dc979d458bcd23bf4f0b8d3b7246d","sha1":"e3f543311eaa12c3014bb4a05f6717b206d1d60f","sha256":"c69eb5c4f9f82f9fb6810f9f55c3ae52432a759f3b6a4ff2db5fac22b18f3f9f","sha512":"3a01ef1f4af3ea799c1f13903cecbbaa875243dca8ef22867edb63a640edae2473706a638c8056a4c5a15a46f0018de13f52998b0f801100dea8fb03dfa0d747","ssdeep":"","tlshash":"d611af960c67ad04d7930dc112cf7d26ee1e61505c44a5286ffe18dcec5ac995325b0d","first_seen":"2025-09-17T09:21:52.190864Z","last_seen":"2026-05-04T04:32:25.278372Z","times_seen":114,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":163,"dns":1,"connect":17,"send":0,"wait":21,"receive":0,"ssl":166},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.banflix.top/thumbnails/68ce15b358fcd.png","fqdn":"www.banflix.top","domain":"banflix.top","tld":"top"},"ip":{"addr":"104.21.95.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:42.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banflix.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 14:20:40 GMT","end":"Mon, 17 Nov 2025 15:17:50 GMT"},"fingerprint":{"sha1":"CA:64:D2:D7:CD:59:63:1C:11:1F:56:D5:D5:60:5A:2F:E4:4B:6A:6A","sha256":"E8:6C:42:16:48:58:66:B5:35:F1:4B:AF:7C:C9:CD:61:A7:50:B6:EA:8E:53:C7:5C:D1:BC:64:1A:33:1F:02:C7"}}},"request":{"raw":"GET /thumbnails/68ce15b358fcd.png HTTP/1.1\r\nHost: www.banflix.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.banflix.top/\r\nCookie: PHPSESSID=l0cial5tl5it340c8jbtpa1u98\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 22:10:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 485931\r\nlast-modified: Sat, 20 Sep 2025 02:47:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68ce15b3-76a2b\"\r\naccept-ranges: bytes\r\nage: 6409\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ArE6994WIIg8hzsl%2Bn9LCxyyP%2BtMbV1Bvp4cAu6tCop5syzgkMhTREEDuwV%2BFPxZDrz838h5MtkW%2Fe9MdgLHo4GL0XE9wcJ9gd1QXwQCHw%3D%3D\"}]}\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98459d0a386c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":485931,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1051 x 578, 8-bit/color RGBA, non-interlaced","md5":"98e9c7ce821c5f4ed0d77e801f668933","sha1":"fee79fbe1ffe2c8640b086b46f8bbb564716eca8","sha256":"3284d0b0344bf501d4382130d377ee1e691bd9d429ed65cac81389fde958d4c7","sha512":"0600b60382c43dac8557b97b73e3ed4a347a36d470755d797395c1e3441e0b81e6e28f5a98946e0ad4ced9e1b6d40108aa34b7b07a1ae2777e734dd486a92d8e","ssdeep":"12288:tjWLearPASv1XvlCUKfABOpqsFe6DfTuab6h:tjWLnc4NCUU4UDDf36h","tlshash":"e6a42356a5b2c2f3411b05b9683ffefca9e246215be77f5f0d024d12a87a08583f8193","first_seen":"2025-09-22T18:14:28.468965Z","last_seen":"2025-09-24T22:11:23.236598Z","times_seen":2,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"www.banflix.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:44.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/oswald/v57/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.banflix.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 12248\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 19 Sep 2025 19:56:05 GMT\r\nexpires: Sat, 19 Sep 2026 19:56:05 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:46:12 GMT\r\ncontent-type: font/woff2\r\nage: 440079\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12248,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12248, version 1.0","md5":"b2a5bf57bad8445af7def71e2f49332a","sha1":"6614389ac1a58764b059d94e2f69c4e182569dd8","sha256":"e902b779e43944c300cf8ae5e4a1affa68cb8a823fd263dd2f479c4cdfbd213c","sha512":"517447cfe5fb1cdfb7700741a2f833bf2bf6b5cdb12ac38a5bfa60d1f630f42da28e05c121cc3ef1bd94cda8172f66ab9613ef18cabdc8b9803bdb3ea46ac628","ssdeep":"192:YqqOjETPdIkWeUa+UZ0eWWo1Cm6Uf3APPEMioaQ3+aZ0YMXFxfzUWEE0uZkSBIg6:Yq5jYjWeUaDiDom6EGZKYUc4kox6","tlshash":"3542b0f44c38691ae32108fc67ec857c0f11516ded1896a42de84f643aee3751772aad","first_seen":"2025-09-11T17:19:09.75806Z","last_seen":"2026-05-05T08:11:08.726956Z","times_seen":9549,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aj2532.bid/ads-api-native?key=d6d99a243edbfe47441e3b6937ed6b11\u0026o=https://www.banflix.top","fqdn":"aj2532.bid","domain":"aj2532.bid","tld":"bid"},"ip":{"addr":"49.12.122.118","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.banflix.top/","date":"2025-09-24T22:10:54.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aj2532.bid","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 08:05:17 GMT","end":"Wed, 12 Nov 2025 08:05:16 GMT"},"fingerprint":{"sha1":"79:27:08:6A:FC:70:65:84:CB:6B:5F:A4:8C:A6:B2:24:A7:78:15:DF","sha256":"F2:C5:AD:F7:F5:F4:1A:6A:7D:97:E7:B0:2F:94:E2:78:D0:BF:25:10:A4:A2:85:1A:1F:6F:F4:53:AA:66:EE:A5"}}},"request":{"raw":"GET /ads-api-native?key=d6d99a243edbfe47441e3b6937ed6b11\u0026o=https://www.banflix.top HTTP/1.1\r\nHost: aj2532.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.banflix.top/\r\nOrigin: https://www.banflix.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\naccess-control-allow-origin: https://www.banflix.top\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\naccept-ch: Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\npermissions-policy: *\r\np3p: CP=\"CAO PSA OUR\"\r\nset-cookie: UUID=b4f2f56a-512f-5a07-b380-4d0cc67350d0; Domain=aj2532.bid; Expires=Thu, 29 Oct 2026 22:10:54 GMT; Path=/; Secure; SameSite=None\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 568\r\ndate: Wed, 24 Sep 2025 22:10:53 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":568,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"47934d21fdcfdf3f2837bb60cf565d86","sha1":"e1cb6146655e5e9f53301550a6acb5fe045b0600","sha256":"5fffea8aebba5d3760d037d1b98512a30196c276d636d883a69b257af01acda1","sha512":"7665655ff6d7709544453e9002cd97bb740e9de6c75179c1e9054d3b359361a85c1cdf35c3d6a5f3a1d01f2f45e9db1094994c6429df8281d390e2c611ba008e","ssdeep":"","tlshash":"47f0204382686df823693b823b56cc34692e526bc5599a02c9cece9980bd3757930bcd","first_seen":"2025-09-24T22:11:23.238388Z","last_seen":"2025-09-24T22:11:23.238388Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}