Report - nunflix.org/https:/flixbaba.net/

Report Overview

Visited public
2025-07-13 08:05:08
Tags
Submit Tags
URL
nunflix.org/https:/flixbaba.net/
Finishing URL
nunflix.org/https:/flixbaba.net/
IP / ASN
172.66.47.153
#13335 CLOUDFLARENET
Title
Watch on Nunflix

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
nunflix-firebase-default-rtdb.firebaseio.com	unknown	2012-10-15	2024-08-26	2025-07-13	630 B	254 B	34.120.160.131
acscdn.com	93608	2020-05-05	2020-05-06	2025-07-11	819 B	245 kB	104.18.16.201
nunflix.org	unknown	2024-10-04	2024-10-07	2025-07-13	3.4 kB	6.0 MB	172.66.44.103
fonts.googleapis.com	8877	2005-01-25	2012-05-23	2025-07-09	515 B	6.9 kB	142.250.178.106
fonts.gstatic.com	unknown	2008-02-11	2014-04-02	2025-07-09	555 B	38 kB	142.250.178.99
static.cloudflareinsights.com	1294	2019-08-30	2019-09-24	2025-07-09	427 B	20 kB	104.16.79.73
cloudflareinsights.com	84344	2019-08-30	2020-10-23	2025-07-10	1.0 kB	820 B	104.16.79.73
www.googletagmanager.com	75	2011-11-11	2012-10-04	2025-07-09	432 B	458 kB	142.250.178.40
usrpubtrk.com	unknown	2025-06-16	2025-06-17	2025-07-08	482 B	522 B	172.67.186.11
youradexchange.com	273384	2012-11-09	2013-02-04	2025-07-11	1.2 kB	1.3 kB	104.18.25.98
www.themoviedb.org	39856	2008-09-15	2017-02-19	2025-07-12	527 B	2.9 kB	3.167.2.91

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-07-13	medium	usrpubtrk.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (9)

	URL	From	Size	First Seen	Last Seen
	acscdn.com/script/suv5.js	ScriptElement	96 kB	2025-07-03	2025-07-16
Pretty URL acscdn.com/script/suv5.js IP 104.18.16.201 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2025-07-03 15:12 Last Seen2025-07-16 06:52 Times Seen159 Hash 71ed3ee2d3dda440c56872b11e251bc4 d1d5332325537c207a6defbf266f3976e169a593 abb67e963d37424ecab4bf314252646bc16fa0af0af5bcc21238fb9c012ff691 Loading...

	static.cloudflareinsights.com/beacon.min.js	ScriptElement	20 kB	2024-06-07	2025-07-21
Pretty URL static.cloudflareinsights.com/beacon.min.js IP 104.16.79.73 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-06-07 09:21 Last Seen2025-07-21 07:07 Times Seen92993 Hash ec18af6d41f6f278b6aed3bdabffa7bc 62c9e2cab76b888829f3c5335e91c320b22329ae 8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f Loading...

	www.googletagmanager.com/gtag/js?id=G-SSZ835M9CV	ScriptElement	457 kB	2025-07-13	2025-07-13
Pretty URL www.googletagmanager.com/gtag/js?id=G-SSZ835M9CV IP 142.250.178.40 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2025-07-13 08:05 Last Seen2025-07-13 08:05 Times Seen1 Hash 4ba094a2b501e2e93115167e7181e7d2 b27eeb42ed44c452f8727c4ef5b998337a564a9d 1c1b2421bec6dfebe6a6dd88a40540c1ae575f1b75ea40b8ea09c80ccbbe98c0 Loading...

	nunflix.org/assets/index-CPWG1-ji.js	ScriptElement	4.6 MB	2025-07-13	2025-07-13
Pretty URL nunflix.org/assets/index-CPWG1-ji.js IP 172.66.44.103 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2025-07-13 05:26 Last Seen2025-07-13 08:05 Times Seen2 Hash 878777f46e974bd1a6fdb5edf4892b37 f49885aba68452b1725b7bad85f26c2f12d0b678 ded6da368c7af3afc87961085fdcd8c98fa2bc7a2a80795e403b440d7a766755 Loading...

	nunflix.org/assets/trakt_credentials-DaICkTzT.js	ScriptElement	31 kB	2025-05-21	2025-07-13
Pretty URL nunflix.org/assets/trakt_credentials-DaICkTzT.js IP 172.66.44.103 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2025-05-21 17:36 Last Seen2025-07-13 08:05 Times Seen7 Hash 31d7f2be0f295007e642a83007a86a42 d40a02ba1d131ed0df20fe6695895b09f18f9425 727cb0335e1b81dc5dc5188aeaf4723fd75a4de81cae92314ffcdee8e9650235 Loading...

	nunflix.org/https:/flixbaba.net/	ScriptElement	180 B	2024-12-01	2025-07-13
Pretty URL nunflix.org/https:/flixbaba.net/ IP 172.66.44.103 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-12-01 15:49 Last Seen2025-07-13 08:05 Times Seen11 Hash 498429106e66ac8c5d72524efc83eff1 a967a2973f5d4af72976c43f82fd302a5f07dbea 9218e4f0f5acb4d5907b51232273fe0456ad25a26ca6fa40a7d0d93bbed06175 Loading...

	acscdn.com/script/aclib.js	ScriptElement	147 kB	2025-07-03	2025-07-16
Pretty URL acscdn.com/script/aclib.js IP 104.18.16.201 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2025-07-03 18:09 Last Seen2025-07-16 06:52 Times Seen252 Hash fd550ad66a0d3e18ba5ea88a9410a0cb 2364c7f2c934c560a91ff44899d5836394fd82f7 a2ea232bb2f4cf7d88071aea08c659f762ee01d0e0a1ed845db965d470d47396 Loading...

	nunflix.org/https:/flixbaba.net/	ScriptElement	71 B	2025-05-21	2025-07-13
Pretty URL nunflix.org/https:/flixbaba.net/ IP 172.66.44.103 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2025-05-21 17:36 Last Seen2025-07-13 08:05 Times Seen7 Hash b82d8184ba118d5a6b293dc22417af7c 36145257128d97966ad1f2c63ea63470e1ff18a4 804d6d89382a42e689d8af0926214e1cb5971f19f014754e3d8de6821a551214 Loading...

	nunflix.org/https:/flixbaba.net/	EventHandler	16 B	2023-04-10	2025-07-21
Pretty URL nunflix.org/https:/flixbaba.net/ IP 172.66.44.103 ASN #13335 CLOUDFLARENET Introduced by eventHandler Embedded in HTML false Observations First Seen2023-04-10 15:57 Last Seen2025-07-21 07:14 Times Seen74999 Hash 7c3c3ddeb80438dcbb3d081d2d00e152 5a4016732ee72ec77b4f6ab17047bcea6d2ea34d 321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187 Loading...

HTTP Transactions (19)

URL IP Response Size

GET wss://nunflix-firebase-default-rtdb.firebaseio.com/.ws?v=5&p=1:136132242464:web:1c4129146a396187ffe045

34.120.160.131

101 Switching Protocols

0 B

URL GET
wss://nunflix-firebase-default-rtdb.firebaseio.com/.ws?v=5&p=1:136132242464:web:1c4129146a396187ffe045
IP
34.120.160.131:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
https://nunflix.org/https:/flixbaba.net/
Certificate
IssuerGoogle Trust Services
Subject*.us-central1.firebasedatabase.app
Fingerprint5E:7A:EF:1E:29:B9:08:F8:9B:D7:CC:54:55:EA:2B:14:AF:90:C8:DB
ValidityFri, 11 Jul 2025 20:54:52 GMT - Thu, 09 Oct 2025 20:54:51 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /.ws?v=5&p=1:136132242464:web:1c4129146a396187ffe045 HTTP/1.1
Host: nunflix-firebase-default-rtdb.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://nunflix.org
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ZAdnamE//LX+U3X/kXhaTg==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Server: nginx
Date: Sun, 13 Jul 2025 08:04:32 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: MjdSlxi8rMYQ7IWRF/FBX78zLAw=
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload

GET acscdn.com/script/aclib.js

104.18.16.201

200 OK

147 kB

URL GET
acscdn.com/script/aclib.js
IP
104.18.16.201:443
ASN
#13335 CLOUDFLARENET

Requested by
https://nunflix.org/https:/flixbaba.net/
Certificate
IssuerGoogle Trust Services
Subjectacscdn.com
Fingerprint63:1A:7B:92:DA:D9:63:40:A3:A0:9C:C9:93:7F:79:CD:2E:FB:74:83
ValidityFri, 11 Jul 2025 17:47:20 GMT - Thu, 09 Oct 2025 18:47:00 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (65499), with no line terminators
Size
147 kB (146925 bytes)
Hash
fd550ad66a0d3e18ba5ea88a9410a0cb
2364c7f2c934c560a91ff44899d5836394fd82f7
a2ea232bb2f4cf7d88071aea08c659f762ee01d0e0a1ed845db965d470d47396

HTTP Headers

GET /script/aclib.js HTTP/1.1
Host: acscdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nunflix.org/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 13 Jul 2025 08:04:29 GMT
content-type: text/javascript
x-guploader-uploadid: ABgVH8-E4ZDxpEUlv2VnSbiVn8l09wMdgwi2OTK9ZYGU73tVwPrAtwjBb-D7XNjKZ2VYz-r52Akojj4
x-goog-generation: 1751550588457401
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 146925
x-goog-hash: crc32c=tgMNqg==, md5=/VUK1moNPhi6XqiKlBCgyw==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
expires: Sun, 13 Jul 2025 09:04:29 GMT
cache-control: public, max-age=3600
last-modified: Thu, 03 Jul 2025 13:49:48 GMT
etag: W/"fd550ad66a0d3e18ba5ea88a9410a0cb"
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 288
vary: Accept-Encoding
server: cloudflare
cf-ray: 95e745172dac7127-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

GET static.cloudflareinsights.com/beacon.min.js

104.16.79.73

200 OK

20 kB

URL GET
static.cloudflareinsights.com/beacon.min.js
IP
104.16.79.73:443
ASN
#13335 CLOUDFLARENET

Requested by
https://nunflix.org/https:/flixbaba.net/
Certificate
IssuerGoogle Trust Services
Subjectcloudflareinsights.com
Fingerprint9D:9F:FB:08:8A:BA:46:3F:69:F6:F3:D7:AE:78:13:8D:FD:5A:C8:D5
ValidityWed, 25 Jun 2025 22:10:34 GMT - Tue, 23 Sep 2025 23:10:19 GMT

File type
JavaScript source, ASCII text, with very long lines (19948), with no line terminators
Size
20 kB (19948 bytes)
Hash
ec18af6d41f6f278b6aed3bdabffa7bc
62c9e2cab76b888829f3c5335e91c320b22329ae
8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f

HTTP Headers

GET /beacon.min.js HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nunflix.org/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 13 Jul 2025 08:04:29 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2024.6.1"
last-modified: Thu, 06 Jun 2024 15:52:56 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 95e74517094456b1-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

GET nunflix.org/assets/index-CPWG1-ji.js

172.66.44.103

200 OK

4.6 MB

URL GET
nunflix.org/assets/index-CPWG1-ji.js
IP
172.66.44.103:443
ASN
#13335 CLOUDFLARENET

Requested by
https://nunflix.org/https:/flixbaba.net/
Certificate
IssuerGoogle Trust Services
Subjectnunflix.org
FingerprintC1:C3:D7:46:50:34:BC:F4:79:34:09:8C:F7:A9:A8:F1:7B:BC:DB:C0
ValiditySun, 29 Jun 2025 16:51:25 GMT - Sat, 27 Sep 2025 17:51:18 GMT

File type
JavaScript source, ASCII text, with very long lines (38176)
Size
4.6 MB (4558098 bytes)
Hash
878777f46e974bd1a6fdb5edf4892b37
f49885aba68452b1725b7bad85f26c2f12d0b678
ded6da368c7af3afc87961085fdcd8c98fa2bc7a2a80795e403b440d7a766755

HTTP Headers

GET /assets/index-CPWG1-ji.js HTTP/1.1
Host: nunflix.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nunflix.org/https:/flixbaba.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 13 Jul 2025 08:04:29 GMT
content-type: application/javascript
content-encoding: br
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"3573cbc9b6c65478ea891de009cb99d3"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sZJcysWb3f0GktCnXFMijfTLcviWjySzODNAWCV5VlblRS2FiqbHiZhLfb7mZANdIWLGdrJcMvGz32A0Q65UX%2F%2BeQP5hWyMWfLQUHDmbebGy8GbiDT2uAs6DPrPbNg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 95e74516cb840b31-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4817&min_rtt=3157&rtt_var=1969&sent=76&recv=12&lost=0&retrans=0&sent_bytes=76369&recv_bytes=1616&delivery_rate=10644946&cwnd=48000&unsent_bytes=0&cid=0bbeb45c325dea7d&ts=303&x=1", cfExtPri, cfHdrFlush;dur=0

GET fonts.googleapis.com/css2?family=Bebas+Neue&family=DM+Sans:ital,wght@0,400;0,500;0,700;1,400;1,500;1,700&display=swap

142.250.178.106

200 OK

6.2 kB

URL GET
fonts.googleapis.com/css2?family=Bebas+Neue&family=DM+Sans:ital,wght@0,400;0,500;0,700;1,400;1,500;1,700&display=swap
IP
142.250.178.106:443
ASN
#15169 GOOGLE

Requested by
https://nunflix.org/https:/flixbaba.net/
Certificate
IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintDC:40:BF:B1:59:C9:CC:B5:4A:38:2D:D0:16:8D:06:A5:1D:B4:08:8B
ValidityMon, 23 Jun 2025 08:41:28 GMT - Mon, 15 Sep 2025 08:41:27 GMT

File type
ASCII text
Size
6.2 kB (6193 bytes)
Hash
7aa916046ae02080b532008bb2ff1fb8
f0ded682e34eb42c57914da64ad7b15b1a255e96
21f85b298ff3835c5a86b591314f74073ea86ff98054eb5907eab9886189aaf9

HTTP Headers

GET /css2?family=Bebas+Neue&family=DM+Sans:ital,wght@0,400;0,500;0,700;1,400;1,500;1,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nunflix.org/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 13 Jul 2025 08:04:30 GMT
date: Sun, 13 Jul 2025 08:04:30 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET nunflix.org/assets/nunflix-logo-BDGaWDgc.png

172.66.44.103

200 OK

288 kB

URL GET
nunflix.org/assets/nunflix-logo-BDGaWDgc.png
IP
172.66.44.103:443
ASN
#13335 CLOUDFLARENET

Requested by
https://nunflix.org/https:/flixbaba.net/
Certificate
IssuerGoogle Trust Services
Subjectnunflix.org
FingerprintC1:C3:D7:46:50:34:BC:F4:79:34:09:8C:F7:A9:A8:F1:7B:BC:DB:C0
ValiditySun, 29 Jun 2025 16:51:25 GMT - Sat, 27 Sep 2025 17:51:18 GMT

File type
PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced
Size
288 kB (288179 bytes)
Hash
9c0444ffcb94eaf2eea7c330a3a7952c
67c3d8c835960f1c30f6866f53d1fdafb500c58a
ded0cc45fd7ea410ee6a3682dc0ef37d61b77ab5f15478cdd4c9194fd5688878

HTTP Headers

GET /assets/nunflix-logo-BDGaWDgc.png HTTP/1.1
Host: nunflix.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nunflix.org/https:/flixbaba.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 13 Jul 2025 08:04:30 GMT
content-type: image/png
content-length: 288179
cf-ray: 95e7451be8b50b31-OSL
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "3bc6718961dd6beccd6be30bd80db6ea"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rb9xvh8ggDIc6KiRViJF4zboqwByPl3pILdAaAYgfyylAssZK6jFU%2FZzX3qCIpppNmsBjP1DdCBU3CdnDhufYku70qvEclUiubAEIvNstKeWRgJ0SCdMFMSW8pdqYQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1414&min_rtt=627&rtt_var=799&sent=1272&recv=120&lost=0&retrans=0&sent_bytes=1414252&recv_bytes=7734&delivery_rate=23009513&cwnd=146400&unsent_bytes=0&cid=0bbeb45c325dea7d&ts=1107&x=1", cfExtPri, cfHdrFlush;dur=0

GET nunflix.org/assets/nunflix-BhfhbbaK.webp

172.66.44.103

200 OK

558 kB

URL GET
nunflix.org/assets/nunflix-BhfhbbaK.webp
IP
172.66.44.103:443
ASN
#13335 CLOUDFLARENET

Requested by
https://nunflix.org/https:/flixbaba.net/
Certificate
IssuerGoogle Trust Services
Subjectnunflix.org
FingerprintC1:C3:D7:46:50:34:BC:F4:79:34:09:8C:F7:A9:A8:F1:7B:BC:DB:C0
ValiditySun, 29 Jun 2025 16:51:25 GMT - Sat, 27 Sep 2025 17:51:18 GMT

File type
RIFF (little-endian) data, Web/P image
Size
558 kB (558350 bytes)
Hash
00b77d2e43b798a1cf9611d88510c8c1
66c9775fa432fcffafc089d7fef31b312299eb8a
1576e13daa8411aecf608b6fda5977cbaa3b2eb677e1dad9e04c067a047631b7

HTTP Headers

GET /assets/nunflix-BhfhbbaK.webp HTTP/1.1
Host: nunflix.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nunflix.org/https:/flixbaba.net/
DNT: 1
Connection: keep-alive
Cookie: _ga_SSZ835M9CV=GS2.1.s1752393870$o1$g0$t1752393870$j60$l0$h0; _ga=GA1.1.1874385813.1752393871
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 13 Jul 2025 08:04:31 GMT
content-type: image/webp
content-length: 558350
cf-ray: 95e7451edb7d0b31-OSL
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "8bdd0c5922d7fffa8987c0c1d8d2fbad"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=16v%2B9sRJugWqUpYnDl04fvL12MbiiwBppLT8HIB%2F%2FAu2JwY%2FGlhs6%2Blv9zEBvffepvhG0p14H%2FLRbmGm5WWqWpBkvGVhDzKrICPiniq9TXziCJ%2Bw2%2FAdvoq8JWKIRg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4279&min_rtt=627&rtt_var=4661&sent=1521&recv=124&lost=0&retrans=0&sent_bytes=1710371&recv_bytes=8262&delivery_rate=23009513&cwnd=369600&unsent_bytes=0&cid=0bbeb45c325dea7d&ts=1568&x=1", cfExtPri, cfHdrFlush;dur=0

GET nunflix.org/https:/flixbaba.net/

172.66.44.103

200 OK

5.3 kB

URL User Request GET
nunflix.org/https:/flixbaba.net/
IP
172.66.44.103:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectnunflix.org
FingerprintC1:C3:D7:46:50:34:BC:F4:79:34:09:8C:F7:A9:A8:F1:7B:BC:DB:C0
ValiditySun, 29 Jun 2025 16:51:25 GMT - Sat, 27 Sep 2025 17:51:18 GMT

File type
HTML document, ASCII text
Size
5.3 kB (5335 bytes)
Hash
878044ed9f31b2670303b631253e8094
679b54edfe15f9a3217b5f1f3ff115e1f2102ac4
5f3bbcd71ad0ba6aa4e5c7a4a5da6a557d8550a677d0bd7447e4574ffe2d95ff

HTTP Headers

GET /https:/flixbaba.net/ HTTP/1.1
Host: nunflix.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 13 Jul 2025 08:04:29 GMT
content-type: text/html; charset=utf-8
content-encoding: br
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
link: <https://fonts.googleapis.com>; rel="preconnect"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qbAIwc%2Fp8jWXdzmNmjPEZpB7Ka64SdJJl%2BzmXbFDp2LhV0JOC4seT8QmX1yOwUVpnhdQNC9e%2BDsptBEXzRdCz5KqFxXEEd%2Bk4PipEyAPk4bDIzadvrrcgjMMpZlWSA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 95e74514b90ab503-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=5672&min_rtt=495&rtt_var=10401&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3183&recv_bytes=1137&delivery_rate=7869565&cwnd=254&unsent_bytes=0&cid=36559e14ad26cf00&ts=76&x=0"
X-Firefox-Spdy: h2

GET nunflix.org/assets/index-BRVQlLPS.css

172.66.44.103

200 OK

487 kB

URL GET
nunflix.org/assets/index-BRVQlLPS.css
IP
172.66.44.103:443
ASN
#13335 CLOUDFLARENET

Requested by
https://nunflix.org/https:/flixbaba.net/
Certificate
IssuerGoogle Trust Services
Subjectnunflix.org
FingerprintC1:C3:D7:46:50:34:BC:F4:79:34:09:8C:F7:A9:A8:F1:7B:BC:DB:C0
ValiditySun, 29 Jun 2025 16:51:25 GMT - Sat, 27 Sep 2025 17:51:18 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
487 kB (486579 bytes)
Hash
fef041cc7ce1b4abd53469ce095a7d38
34f043f83d6ff09303ecafc95a641801c6fb9d99
e391964fa0044ac5e161497d93cb2343317008d6cf8c1f4b0b25bb17b7ebaae4

HTTP Headers

GET /assets/index-BRVQlLPS.css HTTP/1.1
Host: nunflix.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nunflix.org/https:/flixbaba.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 13 Jul 2025 08:04:29 GMT
content-type: text/css; charset=utf-8
content-encoding: br
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"8a980a5648af83bbd31a0c5cab799e27"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BqehaDtiRW8AuO4Q8CPsZROZJG0yhaalvwTyQeaJFVqtvCUIXjaYphHroj95EgMxdqp4aJS4B2w3tpEQI%2BSbBTz5w81OiN0BgmDEYdwTd5hZ5jNchxTwjYozH6TNCw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 95e74516cb860b31-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5138&min_rtt=3728&rtt_var=2405&sent=13&recv=9&lost=0&retrans=0&sent_bytes=4106&recv_bytes=1481&delivery_rate=569284&cwnd=12000&unsent_bytes=0&cid=0bbeb45c325dea7d&ts=287&x=1", cfExtPri, cfHdrFlush;dur=0

GET acscdn.com/script/suv5.js

104.18.16.201

200 OK

96 kB

URL GET
acscdn.com/script/suv5.js
IP
104.18.16.201:443
ASN
#13335 CLOUDFLARENET

Requested by
https://nunflix.org/https:/flixbaba.net/
Certificate
IssuerGoogle Trust Services
Subjectacscdn.com
Fingerprint63:1A:7B:92:DA:D9:63:40:A3:A0:9C:C9:93:7F:79:CD:2E:FB:74:83
ValidityFri, 11 Jul 2025 17:47:20 GMT - Thu, 09 Oct 2025 18:47:00 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (65493), with no line terminators
Size
96 kB (96485 bytes)
Hash
71ed3ee2d3dda440c56872b11e251bc4
d1d5332325537c207a6defbf266f3976e169a593
abb67e963d37424ecab4bf314252646bc16fa0af0af5bcc21238fb9c012ff691

HTTP Headers

GET /script/suv5.js HTTP/1.1
Host: acscdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nunflix.org/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 13 Jul 2025 08:04:30 GMT
content-type: text/javascript
x-guploader-uploadid: ABgVH8-Pao7Dtw8XlWSAPuYMux1D2sMvgXp7-AZsPJjBjChjaW87C_NfPbSKbNX28vMFRCrS
x-goog-generation: 1751550941046231
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 96485
x-goog-hash: crc32c=spBWqg==, md5=ce0+4tPdpEDFaHKxHiUbxA==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Sun, 13 Jul 2025 09:04:30 GMT
cache-control: public, max-age=3600
last-modified: Thu, 03 Jul 2025 13:55:41 GMT
etag: W/"71ed3ee2d3dda440c56872b11e251bc4"
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 276
priority: u=3,i=?0
vary: Accept-Encoding
server: cloudflare
cf-ray: 95e74518eb5756b1-OSL
content-encoding: gzip
server-timing: cfExtPri

GET nunflix.org/assets/android-icon-192x192-uPGbQdri.png

172.66.44.103

200 OK

49 kB

URL GET
nunflix.org/assets/android-icon-192x192-uPGbQdri.png
IP
172.66.44.103:443
ASN
#13335 CLOUDFLARENET

Requested by
https://nunflix.org/https:/flixbaba.net/
Certificate
IssuerGoogle Trust Services
Subjectnunflix.org
FingerprintC1:C3:D7:46:50:34:BC:F4:79:34:09:8C:F7:A9:A8:F1:7B:BC:DB:C0
ValiditySun, 29 Jun 2025 16:51:25 GMT - Sat, 27 Sep 2025 17:51:18 GMT

File type
PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Size
49 kB (48934 bytes)
Hash
dc7f9df16b884d14105645323e334f33
1c7fb2a75fafd1fac5a2dd1eeec3d5cb6f502449
4108c2bca058dc6570b4203043252fa785c4712d2a2995c07db6ea03aadd415c

HTTP Headers

GET /assets/android-icon-192x192-uPGbQdri.png HTTP/1.1
Host: nunflix.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nunflix.org/https:/flixbaba.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 13 Jul 2025 08:04:30 GMT
content-type: image/png
content-length: 48934
cf-ray: 95e7451be8b20b31-OSL
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "1311dc050642d1d5e08e05cdc4f27dca"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d7KH6sozrOXG9koWJzauZNAThN4SVM4a1ZyUs%2FZLh2clZEQBMbtXaCGlmut2%2BIEmrXIgPQx9rITO1sdPpHoifKbaVQkUvbIfOXN%2BMPgjr0Kq3LB9U2KI66Rrxnuchw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1414&min_rtt=627&rtt_var=799&sent=1229&recv=120&lost=0&retrans=0&sent_bytes=1363393&recv_bytes=7734&delivery_rate=23009513&cwnd=146400&unsent_bytes=0&cid=0bbeb45c325dea7d&ts=1103&x=1", cfExtPri, cfHdrFlush;dur=0

POST cloudflareinsights.com/cdn-cgi/rum

104.16.79.73

204 No Content

0 B

URL POST
cloudflareinsights.com/cdn-cgi/rum
IP
104.16.79.73:443
ASN
#13335 CLOUDFLARENET

Requested by
https://nunflix.org/https:/flixbaba.net/
Certificate
IssuerGoogle Trust Services
Subjectcloudflareinsights.com
Fingerprint9D:9F:FB:08:8A:BA:46:3F:69:F6:F3:D7:AE:78:13:8D:FD:5A:C8:D5
ValidityWed, 25 Jun 2025 22:10:34 GMT - Tue, 23 Sep 2025 23:10:19 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /cdn-cgi/rum HTTP/1.1
Host: cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nunflix.org/
content-type: application/json
Content-Length: 1032
Origin: https://nunflix.org
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 204 No Content
date: Sun, 13 Jul 2025 08:04:31 GMT
access-control-allow-origin: https://nunflix.org
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 95e74522faa37127-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2

GET www.googletagmanager.com/gtag/js?id=G-SSZ835M9CV

142.250.178.40

200 OK

457 kB

URL GET
www.googletagmanager.com/gtag/js?id=G-SSZ835M9CV
IP
142.250.178.40:443
ASN
#15169 GOOGLE

Requested by
https://nunflix.org/https:/flixbaba.net/
Certificate
IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint3A:12:37:38:16:E5:9F:51:4E:B7:1D:5F:1F:C0:84:BB:92:EA:9E:20
ValidityMon, 23 Jun 2025 08:40:16 GMT - Mon, 15 Sep 2025 08:40:15 GMT

File type
JavaScript source, ASCII text, with very long lines (8282)
Size
457 kB (457081 bytes)
Hash
4ba094a2b501e2e93115167e7181e7d2
b27eeb42ed44c452f8727c4ef5b998337a564a9d
1c1b2421bec6dfebe6a6dd88a40540c1ae575f1b75ea40b8ea09c80ccbbe98c0

HTTP Headers

GET /gtag/js?id=G-SSZ835M9CV HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nunflix.org/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 13 Jul 2025 08:04:30 GMT
expires: Sun, 13 Jul 2025 08:04:30 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0
report-to: {"group":"ascgcycc:1077:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0"}],}
server: Google Tag Manager
content-length: 148464
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

POST usrpubtrk.com/ut/hb.php?cb=0.6863744247842303&v=1

172.67.186.11

204 No Content

0 B

URL POST
usrpubtrk.com/ut/hb.php?cb=0.6863744247842303&v=1
IP
172.67.186.11:443
ASN
#13335 CLOUDFLARENET

Requested by
https://nunflix.org/https:/flixbaba.net/
Certificate
IssuerGoogle Trust Services
Subjectusrpubtrk.com
Fingerprint73:D3:CF:85:0F:63:93:DD:FC:EC:C6:A5:AD:25:E8:9F:46:71:26:ED
ValidityMon, 16 Jun 2025 11:32:07 GMT - Sun, 14 Sep 2025 12:30:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /ut/hb.php?cb=0.6863744247842303&v=1 HTTP/1.1
Host: usrpubtrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nunflix.org/
Content-Type: text/plain; charset=utf-8
Content-Length: 1230
Origin: https://nunflix.org
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 204 No Content
date: Sun, 13 Jul 2025 08:04:30 GMT
server: cloudflare
access-control-allow-origin: *
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Suf3VckbmjoDBzegZqodB342SYoRDZV8Odc664WWhJuLflpXFECVzu5kVEoYa4%2Bl1BSbFYnZEoIVfX6qOKETKFDdM47Od3CIM6B3"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: 95e74519ea53569f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET nunflix.org/assets/trakt_credentials-DaICkTzT.js

172.66.44.103

200 OK

31 kB

URL GET
nunflix.org/assets/trakt_credentials-DaICkTzT.js
IP
172.66.44.103:443
ASN
#13335 CLOUDFLARENET

Requested by
https://nunflix.org/https:/flixbaba.net/
Certificate
IssuerGoogle Trust Services
Subjectnunflix.org
FingerprintC1:C3:D7:46:50:34:BC:F4:79:34:09:8C:F7:A9:A8:F1:7B:BC:DB:C0
ValiditySun, 29 Jun 2025 16:51:25 GMT - Sat, 27 Sep 2025 17:51:18 GMT

File type
ASCII text, with very long lines (30578)
Size
31 kB (30579 bytes)
Hash
31d7f2be0f295007e642a83007a86a42
d40a02ba1d131ed0df20fe6695895b09f18f9425
727cb0335e1b81dc5dc5188aeaf4723fd75a4de81cae92314ffcdee8e9650235

HTTP Headers

GET /assets/trakt_credentials-DaICkTzT.js HTTP/1.1
Host: nunflix.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nunflix.org/assets/index-CPWG1-ji.js
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 13 Jul 2025 08:04:30 GMT
content-type: application/javascript
content-encoding: br
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"ef01638a233760cbbe00204c40cae517"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ODLBG48tsKfLQJfPYBSVJs1gfXNZkAYRAUOchGHDujZCqYTflx707lbfZ0KMWHO4uEbkDLa9qt4nXSI8mxUlZMYlIgWvyuNdLPX5045DSh4JRw1suGO0tQBbknkxaA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 95e7451b4fda0b31-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1324&min_rtt=627&rtt_var=828&sent=1214&recv=117&lost=0&retrans=0&sent_bytes=1348836&recv_bytes=7074&delivery_rate=23009513&cwnd=146400&unsent_bytes=0&cid=0bbeb45c325dea7d&ts=1016&x=1", cfExtPri, cfHdrFlush;dur=0

GET fonts.gstatic.com/s/dmsans/v16/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2

142.250.178.99

200 OK

37 kB

URL GET
fonts.gstatic.com/s/dmsans/v16/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2
IP
142.250.178.99:443
ASN
#15169 GOOGLE

Requested by
https://nunflix.org/https:/flixbaba.net/
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA
ValidityMon, 23 Jun 2025 08:41:27 GMT - Mon, 15 Sep 2025 08:41:26 GMT

File type
Web Open Font Format (Version 2), TrueType, length 36916, version 1.0
Size
37 kB (36916 bytes)
Hash
f0244b919a1d63ca2c430cbea5a9760b
e85051d4a760f8feb6b2293ad9ba3cde1cbec15e
967ec653e45a62f5dc91767eba95b0e2df6ed754bc4de4354e5efdf4ac9de068

HTTP Headers

GET /s/dmsans/v16/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nunflix.org
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 36916
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 07 Jul 2025 18:27:04 GMT
expires: Tue, 07 Jul 2026 18:27:04 GMT
cache-control: public, max-age=31536000
age: 481047
last-modified: Thu, 29 May 2025 22:31:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

OPTIONS cloudflareinsights.com/cdn-cgi/rum

104.16.79.73

200 OK

0 B

URL OPTIONS
cloudflareinsights.com/cdn-cgi/rum
IP
104.16.79.73:443
ASN
#13335 CLOUDFLARENET

Requested by
https://nunflix.org/https:/flixbaba.net/
Certificate
IssuerGoogle Trust Services
Subjectcloudflareinsights.com
Fingerprint9D:9F:FB:08:8A:BA:46:3F:69:F6:F3:D7:AE:78:13:8D:FD:5A:C8:D5
ValidityWed, 25 Jun 2025 22:10:34 GMT - Tue, 23 Sep 2025 23:10:19 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS /cdn-cgi/rum HTTP/1.1
Host: cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://nunflix.org/
Origin: https://nunflix.org
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 13 Jul 2025 08:04:31 GMT
content-type: text/plain
access-control-allow-origin: https://nunflix.org
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 95e74522ea9e7127-OSL
x-frame-options: DENY
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2

GET youradexchange.com/script/suurl5.php?r=9444550&cbur=0.7680300500447108&cbiframe=0&cbWidth=1280&cbHeight=1024&cbtitle=Nunflix%20-%20Streaming%20World!&cbpage=https%3A%2F%2Fnunflix.org%2Fhttps%3A%2Fflixbaba.net%2F&cbref=&cbdescription=Welcome%20to%20Nunflix!%20Discover%20trending%20movies%2C%20popular%20TV%20shows%2C%20and%20more%20for%20a%20seamless%20streaming%20experience.&cbkeywords=Nunflix%2C%20streaming%2C%20movies%2C%20TV%20shows%2C%20Netflix%2C%20Disney%2C%20HBO%2C%20Apple%20TV%2C%20Shahid%2C%20trending%2C%20popular%2C%20top%20rated%2C%20watch%20movies%20online%2C%20free%20to%20watch%2C%20no%20ads%2C%20HD%20quality&cbcdn=acscdn.com&ufp=Linux%20x86_64%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits&ts=1752393870284&srs=e2cabe7d36f7ad41c2884d41b0b1df1c&atv=62.4

104.18.25.98

200 OK

882 B

URL GET
youradexchange.com/script/suurl5.php?r=9444550&cbur=0.7680300500447108&cbiframe=0&cbWidth=1280&cbHeight=1024&cbtitle=Nunflix%20-%20Streaming%20World!&cbpage=https%3A%2F%2Fnunflix.org%2Fhttps%3A%2Fflixbaba.net%2F&cbref=&cbdescription=Welcome%20to%20Nunflix!%20Discover%20trending%20movies%2C%20popular%20TV%20shows%2C%20and%20more%20for%20a%20seamless%20streaming%20experience.&cbkeywords=Nunflix%2C%20streaming%2C%20movies%2C%20TV%20shows%2C%20Netflix%2C%20Disney%2C%20HBO%2C%20Apple%20TV%2C%20Shahid%2C%20trending%2C%20popular%2C%20top%20rated%2C%20watch%20movies%20online%2C%20free%20to%20watch%2C%20no%20ads%2C%20HD%20quality&cbcdn=acscdn.com&ufp=Linux%20x86_64%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits&ts=1752393870284&srs=e2cabe7d36f7ad41c2884d41b0b1df1c&atv=62.4
IP
104.18.25.98:443
ASN
#13335 CLOUDFLARENET

Requested by
https://nunflix.org/https:/flixbaba.net/
Certificate
IssuerGoogle Trust Services
Subjectyouradexchange.com
Fingerprint5D:6F:35:ED:36:A9:D9:F7:69:BE:71:FD:6E:3A:C4:28:3D:88:9D:58
ValiditySun, 01 Jun 2025 20:52:12 GMT - Sat, 30 Aug 2025 21:51:56 GMT

File type
JSON text data
Size
882 B (882 bytes)
Hash
f87ddd5934fe9265a0a3be292373c49e
7e5b413205e85b70084239ad2a826025a205b49d
48a0718a584b8e74330b8be6395cc8a8da39be642c7ec2653d3d654b9372b6d9

HTTP Headers

GET /script/suurl5.php?r=9444550&cbur=0.7680300500447108&cbiframe=0&cbWidth=1280&cbHeight=1024&cbtitle=Nunflix%20-%20Streaming%20World!&cbpage=https%3A%2F%2Fnunflix.org%2Fhttps%3A%2Fflixbaba.net%2F&cbref=&cbdescription=Welcome%20to%20Nunflix!%20Discover%20trending%20movies%2C%20popular%20TV%20shows%2C%20and%20more%20for%20a%20seamless%20streaming%20experience.&cbkeywords=Nunflix%2C%20streaming%2C%20movies%2C%20TV%20shows%2C%20Netflix%2C%20Disney%2C%20HBO%2C%20Apple%20TV%2C%20Shahid%2C%20trending%2C%20popular%2C%20top%20rated%2C%20watch%20movies%20online%2C%20free%20to%20watch%2C%20no%20ads%2C%20HD%20quality&cbcdn=acscdn.com&ufp=Linux%20x86_64%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits&ts=1752393870284&srs=e2cabe7d36f7ad41c2884d41b0b1df1c&atv=62.4 HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nunflix.org/
Origin: https://nunflix.org
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 13 Jul 2025 08:04:30 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, POST, OPTIONS
content-encoding: gzip
via: 1.1 google
cf-cache-status: DYNAMIC
vary: accept-encoding
server: cloudflare
cf-ray: 95e7451a08fd568f-OSL
X-Firefox-Spdy: h2

GET www.themoviedb.org/assets/2/v4/logos/v2/blue_square_1-5bdc75aaebeb75dc7ae79426ddd9be3b2be1e342510f8202baf6bffa71d7f5c4.svg

3.167.2.91

200 OK

2.2 kB

URL GET
www.themoviedb.org/assets/2/v4/logos/v2/blue_square_1-5bdc75aaebeb75dc7ae79426ddd9be3b2be1e342510f8202baf6bffa71d7f5c4.svg
IP
3.167.2.91:443
ASN
#0

Requested by
https://nunflix.org/https:/flixbaba.net/
Certificate
IssuerAmazon
Subject*.themoviedb.org
Fingerprint89:45:AB:78:3F:F7:36:C3:05:5E:BB:B1:51:88:86:C1:95:F0:7F:C2
ValidityThu, 19 Jun 2025 00:00:00 GMT - Fri, 17 Jul 2026 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
2.2 kB (2232 bytes)
Hash
08392f186e99a74794065effff6f90e5
bbdb45a8e78cf26bb19bc994a4553efcee54f38c
5bdc75aaebeb75dc7ae79426ddd9be3b2be1e342510f8202baf6bffa71d7f5c4

HTTP Headers

GET /assets/2/v4/logos/v2/blue_square_1-5bdc75aaebeb75dc7ae79426ddd9be3b2be1e342510f8202baf6bffa71d7f5c4.svg HTTP/1.1
Host: www.themoviedb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nunflix.org/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/svg+xml
date: Wed, 04 Dec 2024 07:42:58 GMT
last-modified: Tue, 03 Dec 2024 18:46:01 GMT
content-encoding: gzip
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000, public
expires: Wed, 03 Dec 2025 18:45:39 GMT
x-amz-version-id: null
server: AmazonS3
etag: W/"08392f186e99a74794065effff6f90e5"
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 ac3e1d7135d19671e1860c67a45b3f70.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: AZSK9YtudjzkfZ77I88CNDEccUGLWncc-XUXAklPsvcOmSKH5KwjbQ==
age: 19095693
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (19)

URL GET

IP

ASN

Requested by