Report - megaflix.help/

Report Overview

Visited public
2025-06-23 07:26:58
Tags
Submit Tags
URL
megaflix.help/
Finishing URL
megaflix.ws/
IP / ASN
172.67.192.42
#13335 CLOUDFLARENET
Title
Megaflix - Assista Séries Online Grátis - MegaflixTV

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
kit.fontawesome.com	1868	2012-10-18	2019-03-29	2025-06-18	443 B	500 B	104.18.40.68
wy.almoneraugite.com	unknown	2025-03-16	2025-06-16	2025-06-16	423 B	1.4 kB	23.109.170.59
tecnews.net	unknown	2024-04-26	2015-02-14	2025-06-08	914 B	29 kB	104.21.80.1
hv.encystkokil.com	unknown	2025-05-01	2025-05-17	2025-06-08	420 B	1.4 kB	23.109.170.137
megaflix.help	unknown	unknown	No data	No data	482 B	227 kB	104.21.73.210
image.tmdb.org	17757	2009-09-15	2021-01-09	2025-06-20	5.1 kB	1.7 MB	138.199.37.232
megaflix.ws	unknown	2025-03-21	2025-03-23	2025-05-17	6.3 kB	703 kB	104.21.60.201

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-06-23	medium	almoneraugite.com	Sinkholed
2025-06-23	medium	encystkokil.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (7)

	URL	From	Size	First Seen	Last Seen
	megaflix.ws/	ScriptElement	84 B	2023-03-07	2025-07-20
Pretty URL megaflix.ws/ IP 104.21.60.201 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:02 Last Seen2025-07-20 23:31 Times Seen3369 Hash 31370ae3f78a60279d29cd25e1eb8657 34f454d9855d2dc1d71ab7101bd7a04d1b0199bf 6682cf99413df38b7572d2f2eb9c549f33d2a52ceaa9c6a8ff723c02339380dc Loading...

	wy.almoneraugite.com/raYcMOoaOFlV/RNJJk	ScriptElement	5 B	2025-04-24	2025-07-22
Pretty URL wy.almoneraugite.com/raYcMOoaOFlV/RNJJk IP 23.109.170.59 ASN #7979 SERVERS-COM Introduced by scriptElement Embedded in HTML false Observations First Seen2025-04-24 10:17 Last Seen2025-07-22 07:02 Times Seen1675 Hash 848667c49f5d3aef59cd65ed276cd7ae bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763 cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8 Loading...

	megaflix.ws/	ScriptElement	446 B	2025-06-23	2025-06-23
Pretty URL megaflix.ws/ IP 104.21.60.201 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2025-06-23 07:27 Last Seen2025-06-23 07:27 Times Seen1 Hash 8893a9478afe27701b79f41bafff05dd 83cfd559fb7d88978d0e5799488b8de9aeaa2ec1 f8275c4ad716e29c848cf34b0b9958ea032fa845a298c56788456bfb565e1d61 Loading...

	hv.encystkokil.com/rNKdaN4XxmP/qEkkm	ScriptElement	5 B	2025-04-24	2025-07-22
Pretty URL hv.encystkokil.com/rNKdaN4XxmP/qEkkm IP 23.109.170.137 ASN #7979 SERVERS-COM Introduced by scriptElement Embedded in HTML false Observations First Seen2025-04-24 10:17 Last Seen2025-07-22 07:02 Times Seen1675 Hash 848667c49f5d3aef59cd65ed276cd7ae bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763 cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8 Loading...

	megaflix.ws/wp-content/plugins/autoptimize/classes/external/js/lazysizes.min.js?ao_version=3.1.13	ScriptElement	9.8 kB	2023-03-07	2025-07-20
Pretty URL megaflix.ws/wp-content/plugins/autoptimize/classes/external/js/lazysizes.min.js?ao_version=3.1.13 IP 104.21.60.201 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-07-20 23:31 Times Seen3263 Hash d1edbffbde50cd32ab770746b4140906 6e120f03a5ac9fddc25e7830d204b202721d8879 c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1 Loading...

	megaflix.ws/	ScriptElement	796 B	2025-06-23	2025-06-25
Pretty URL megaflix.ws/ IP 104.21.60.201 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2025-06-23 07:27 Last Seen2025-06-25 06:47 Times Seen2 Hash 4cb2c9d864756172277bad115484aa32 31614db3344270b5869ad7b654e7ee2d7fb9fe87 417e4c44f8437b839ee4fbc7ad394bd626accf40299dc34b23eeca9fadbc0651 Loading...

	megaflix.ws/wp-content/cache/autoptimize/js/autoptimize_bdaa40adc6df517e6a31333a6a463539.js	ScriptElement	150 kB	2025-01-27	2025-06-23
Pretty URL megaflix.ws/wp-content/cache/autoptimize/js/autoptimize_bdaa40adc6df517e6a31333a6a463539.js IP 104.21.60.201 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2025-01-27 03:19 Last Seen2025-06-23 07:27 Times Seen9 Hash 9ba3b612c7f996a26a9112ad99f1a076 230d1bfeaad6bca8cd59f2d4fdc8255bf20fd504 ac1bde668e7266fdb97add7377dfe6b7844f68098fbdd455b2596276d5649c7e Loading...

HTTP Transactions (30)

URL IP Response Size

GET image.tmdb.org/t/p/w500/etRDHyD3FszWdMGHVJA5bMXvoem.jpg

138.199.37.232

200 OK

66 kB

URL GET
image.tmdb.org/t/p/w500/etRDHyD3FszWdMGHVJA5bMXvoem.jpg
IP
138.199.37.232:443
ASN
#60068 Datacamp Limited

Requested by
https://megaflix.ws/
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
FingerprintAD:C0:83:00:0A:8D:95:D2:69:DA:6B:FB:17:51:B0:98:85:98:83:32
ValidityWed, 14 May 2025 17:12:51 GMT - Tue, 12 Aug 2025 17:12:50 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 500x750, Scaling: [none]x[none], YUV color, decoders should clamp
Size
66 kB (65936 bytes)
Hash
5ca648bd78ca16d126f8e744810eb28d
f4daacb428aad3b68dce23639b0b8b41e68264ec
6ea54708273f24f8308a899f74c96449ee9900314ed42a3de48cd7e941767d99

HTTP Headers

GET /t/p/w500/etRDHyD3FszWdMGHVJA5bMXvoem.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaflix.ws/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 23 Jun 2025 07:26:36 GMT
content-type: image/webp
content-length: 65936
server: BunnyCDN-DE1-874
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "680cfe47-10190"
last-modified: Sat, 26 Apr 2025 15:39:51 GMT
cdn-storageserver: NY-703
cdn-requestpullsuccess: True
cdn-fileserver: 923
perma-cache: HIT
cdn-proxyver: 1.28
cdn-requestpullcode: 200
cdn-cachedat: 06/04/2025 16:55:27
cdn-edgestorageid: 874
cdn-requestid: 912cec2628e6284a4dc587a461af1694
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 0
accept-ranges: bytes
X-Firefox-Spdy: h2

GET megaflix.ws/wp-content/uploads/2024/06/cropped-cropped-megaflix2.png

104.21.60.201

200 OK

9.2 kB

URL GET
megaflix.ws/wp-content/uploads/2024/06/cropped-cropped-megaflix2.png
IP
104.21.60.201:443
ASN
#13335 CLOUDFLARENET

Requested by
https://megaflix.ws/
Certificate
IssuerGoogle Trust Services
Subjectmegaflix.ws
Fingerprint91:C2:67:85:3D:1D:3F:17:63:9A:05:E1:82:74:3A:A1:C0:91:74:A9
ValidityMon, 19 May 2025 16:21:48 GMT - Sun, 17 Aug 2025 17:19:08 GMT

File type
PNG image data, 700 x 100, 8-bit/color RGBA, non-interlaced
Size
9.2 kB (9200 bytes)
Hash
14b6188389bc62f5ade7234f8fd70bba
b19c35480f3b7d1c61154067b9cac652ea3bf583
9300c32c43121cdd4ccbc6ee26dd4e8bc39dd886ad1cf77bfeb9703f966923c4

HTTP Headers

GET /wp-content/uploads/2024/06/cropped-cropped-megaflix2.png HTTP/1.1
Host: megaflix.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaflix.ws/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 23 Jun 2025 07:26:36 GMT
content-type: image/png
content-length: 9200
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a2y7lJRCpK96jWZA3pDCrnOtlb0TXVXjRisIKsRq87zrOW%2FXetvZhrLvVtd6DQ0Ih60Dfm0bU01F%2BDkkrCStVYI8oYeAu4eSUucatMWK5UiAhdwDD9%2Fqut90%2BNBptQ%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 19 Jan 2025 15:19:24 GMT
etag: "678d17fc-23f0"
expires: Wed, 23 Jul 2025 07:26:36 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
accept-ranges: bytes
cf-cache-status: DYNAMIC
cf-ray: 95424215bc1f56a2-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=602&min_rtt=0&rtt_var=246&sent=401&recv=284&lost=0&retrans=0&sent_bytes=269359&recv_bytes=16794&delivery_rate=9310625&ss_exit_cwnd=14903&ss_exit_reason=2&cwnd=22178&unsent_bytes=0&cid=3d95023e171b329f&ts=1114&inflight_dur=131&x=44"

GET image.tmdb.org/t/p/w500/rWQYtLHVzG44Ks6Ohi6K1IVyIwq.jpg

138.199.37.232

200 OK

57 kB

URL GET
image.tmdb.org/t/p/w500/rWQYtLHVzG44Ks6Ohi6K1IVyIwq.jpg
IP
138.199.37.232:443
ASN
#60068 Datacamp Limited

Requested by
https://megaflix.ws/
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
FingerprintAD:C0:83:00:0A:8D:95:D2:69:DA:6B:FB:17:51:B0:98:85:98:83:32
ValidityWed, 14 May 2025 17:12:51 GMT - Tue, 12 Aug 2025 17:12:50 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 500x750, Scaling: [none]x[none], YUV color, decoders should clamp
Size
57 kB (57222 bytes)
Hash
fad779b1603a7397c104ed722723b43c
ba5c88db3139ac66a92bc05b71333279050a6a14
c286ead1045b8215d45e4e75bbe9f5936f5b151592e5b68c35df979b65bd3089

HTTP Headers

GET /t/p/w500/rWQYtLHVzG44Ks6Ohi6K1IVyIwq.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaflix.ws/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 23 Jun 2025 07:26:37 GMT
content-type: image/webp
content-length: 57222
server: BunnyCDN-DE1-874
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "67fa312f-df86"
last-modified: Sat, 12 Apr 2025 09:23:59 GMT
cdn-storageserver: NY-673
cdn-requestpullsuccess: True
cdn-fileserver: 915
perma-cache: HIT
cdn-proxyver: 1.27
cdn-requestpullcode: 200
cdn-cachedat: 05/15/2025 14:41:29
cdn-edgestorageid: 756
cdn-requestid: 4d3337c5629f11c64718edee93221762
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 0
accept-ranges: bytes
X-Firefox-Spdy: h2

GET image.tmdb.org/t/p/w500/cLwxFcO4pyji3YwkKBnM42a0yQf.jpg

138.199.37.232

200 OK

33 kB

URL GET
image.tmdb.org/t/p/w500/cLwxFcO4pyji3YwkKBnM42a0yQf.jpg
IP
138.199.37.232:443
ASN
#60068 Datacamp Limited

Requested by
https://megaflix.ws/
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
FingerprintAD:C0:83:00:0A:8D:95:D2:69:DA:6B:FB:17:51:B0:98:85:98:83:32
ValidityWed, 14 May 2025 17:12:51 GMT - Tue, 12 Aug 2025 17:12:50 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 500x750, Scaling: [none]x[none], YUV color, decoders should clamp
Size
33 kB (32682 bytes)
Hash
24bda396cdc067f10eb6bee4dcdfe5d8
2130415735ab7c8337c0dd0405931c11b2520b8f
672d20bb5daee609fe2ad98d2ac2c24c8d6c11f9a98d1f5bccddffadf2618ec1

HTTP Headers

GET /t/p/w500/cLwxFcO4pyji3YwkKBnM42a0yQf.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaflix.ws/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 23 Jun 2025 07:26:37 GMT
content-type: image/webp
content-length: 32682
server: BunnyCDN-DE1-874
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "682d6fba-7faa"
last-modified: Wed, 21 May 2025 06:16:26 GMT
cdn-storageserver: NY-703
cdn-requestpullsuccess: True
cdn-fileserver: 912
perma-cache: HIT
cdn-proxyver: 1.29
cdn-requestpullcode: 200
cdn-cachedat: 06/16/2025 06:35:03
cdn-edgestorageid: 860
cdn-requestid: aadfc8e1a12d33ae56782fdb16f69c4a
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 0
accept-ranges: bytes
X-Firefox-Spdy: h2

GET megaflix.ws/

104.21.60.201

200 OK

226 kB

URL User Request GET
megaflix.ws/
IP
104.21.60.201:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectmegaflix.ws
Fingerprint91:C2:67:85:3D:1D:3F:17:63:9A:05:E1:82:74:3A:A1:C0:91:74:A9
ValidityMon, 19 May 2025 16:21:48 GMT - Sun, 17 Aug 2025 17:19:08 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (13744)
Size
226 kB (226479 bytes)
Hash
4b57291193964500ca39e8ffa827b3fc
04b4d20d9087d01b5031e7202875e71a0b0d2719
7e887ce535733702580dba95f0113c821f703aaa7506fa344cc0df91d4211afa

HTTP Headers

GET / HTTP/1.1
Host: megaflix.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 23 Jun 2025 07:26:35 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
link: <https://megaflix.ws/wp-json/>; rel="https://api.w.org/"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Ul9DR3jGAr2%2FxGDQq8NTyTchbJfOKhQ7AP2hmya38M5uok8X6IU7EQ2OtyPNVnqkGd0vgU1vrkpzwPheK2BaovyRo83mQmFf%2Bg%3D%3D"}]}
cache-control: max-age=1382400
cf-cache-status: MISS
last-modified: Mon, 23 Jun 2025 07:26:35 GMT
content-encoding: br
cf-ray: 9542420d1d74b51e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET megaflix.ws/wp-content/uploads/2024/06/cropped-download-32x32.png

104.21.60.201

200 OK

2.6 kB

URL GET
megaflix.ws/wp-content/uploads/2024/06/cropped-download-32x32.png
IP
104.21.60.201:443
ASN
#13335 CLOUDFLARENET

Requested by
https://megaflix.ws/
Certificate
IssuerGoogle Trust Services
Subjectmegaflix.ws
Fingerprint91:C2:67:85:3D:1D:3F:17:63:9A:05:E1:82:74:3A:A1:C0:91:74:A9
ValidityMon, 19 May 2025 16:21:48 GMT - Sun, 17 Aug 2025 17:19:08 GMT

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Size
2.6 kB (2561 bytes)
Hash
33eb0ac63b5b4f7692a6687abb1777a8
354ea3e3cb1f9680333d41176ce5ef4e4e398567
96d458ba50105ac501d59d75da9f550159bfd4b8779177377b9b406c5cc7a191

HTTP Headers

GET /wp-content/uploads/2024/06/cropped-download-32x32.png HTTP/1.1
Host: megaflix.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaflix.ws/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 23 Jun 2025 07:26:36 GMT
content-type: image/png
content-length: 2561
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KKrisEv4Ex8OZF8nyQHoWG%2FQORFeaEck8BqIits7C1511zAdx21kDFZTiN9SwhujE9lFN15n%2FEtuUOxgU4yGSpNKe81Iphd9GslrqgL9BCZXXad0a3hNw8RBXCIxZw%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 23 Jun 2024 15:18:19 GMT
etag: "66783cbb-a01"
expires: Wed, 23 Jul 2025 07:26:36 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
accept-ranges: bytes
cf-cache-status: DYNAMIC
cf-ray: 954242157c1e56a2-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=590&min_rtt=0&rtt_var=98&sent=358&recv=273&lost=0&retrans=0&sent_bytes=224913&recv_bytes=16286&delivery_rate=7448463&ss_exit_cwnd=14903&ss_exit_reason=2&cwnd=17450&unsent_bytes=0&cid=3d95023e171b329f&ts=1074&inflight_dur=116&x=44"

GET image.tmdb.org/t/p/w500/41VBHhbwWAP4saoKrAhAjNILR3u.jpg

138.199.37.232

200 OK

29 kB

URL GET
image.tmdb.org/t/p/w500/41VBHhbwWAP4saoKrAhAjNILR3u.jpg
IP
138.199.37.232:443
ASN
#60068 Datacamp Limited

Requested by
https://megaflix.ws/
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
FingerprintAD:C0:83:00:0A:8D:95:D2:69:DA:6B:FB:17:51:B0:98:85:98:83:32
ValidityWed, 14 May 2025 17:12:51 GMT - Tue, 12 Aug 2025 17:12:50 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 500x750, Scaling: [none]x[none], YUV color, decoders should clamp
Size
29 kB (29384 bytes)
Hash
1a77c4880e97334385ec89d5909a5a11
c7865e53de02d186cacb23cc86b80b8bef263d65
76fb01b7d6833d4e19c7e3d53db29c0547fe94db239c3baa99a9b31766a8b189

HTTP Headers

GET /t/p/w500/41VBHhbwWAP4saoKrAhAjNILR3u.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaflix.ws/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 23 Jun 2025 07:26:36 GMT
content-type: image/webp
content-length: 29384
server: BunnyCDN-DE1-874
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "67ef5cd5-72c8"
last-modified: Fri, 04 Apr 2025 04:15:17 GMT
cdn-storageserver: NY-703
cdn-requestpullsuccess: True
cdn-fileserver: 832
perma-cache: HIT
cdn-proxyver: 1.27
cdn-requestpullcode: 200
cdn-cachedat: 05/02/2025 20:08:18
cdn-edgestorageid: 1053
cdn-requestid: 7ff328915b871ef0c5e1077cc095d143
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 0
accept-ranges: bytes
X-Firefox-Spdy: h2

GET image.tmdb.org/t/p/w500/5izmRuuqPh9Uq1xJU1EizdUBi6b.jpg

138.199.37.232

200 OK

56 kB

URL GET
image.tmdb.org/t/p/w500/5izmRuuqPh9Uq1xJU1EizdUBi6b.jpg
IP
138.199.37.232:443
ASN
#60068 Datacamp Limited

Requested by
https://megaflix.ws/
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
FingerprintAD:C0:83:00:0A:8D:95:D2:69:DA:6B:FB:17:51:B0:98:85:98:83:32
ValidityWed, 14 May 2025 17:12:51 GMT - Tue, 12 Aug 2025 17:12:50 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 500x750, Scaling: [none]x[none], YUV color, decoders should clamp
Size
56 kB (56152 bytes)
Hash
a63eaf4949039768932fd260baa56c28
7db92c402357851c5ec9ebb47fe321fb2ec9be50
5e6e3bdff04aefb33ea29a61799575a4ca0590000327004ee45c66d944a4152b

HTTP Headers

GET /t/p/w500/5izmRuuqPh9Uq1xJU1EizdUBi6b.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaflix.ws/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 23 Jun 2025 07:26:36 GMT
content-type: image/webp
content-length: 56152
server: BunnyCDN-DE1-874
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "67fb6582-db58"
last-modified: Sun, 13 Apr 2025 07:19:30 GMT
cdn-storageserver: NY-753
cdn-requestpullsuccess: True
cdn-fileserver: 857
perma-cache: HIT
cdn-proxyver: 1.29
cdn-requestpullcode: 200
cdn-cachedat: 06/16/2025 04:44:26
cdn-edgestorageid: 860
cdn-requestid: 1baa205768c5dab1632cb0044fa2f37f
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 0
accept-ranges: bytes
X-Firefox-Spdy: h2

GET image.tmdb.org/t/p/original/fePO5rKq1lM4lIhvrEQWrqaCUyj.jpg

138.199.37.232

200 OK

1.2 MB

URL GET
image.tmdb.org/t/p/original/fePO5rKq1lM4lIhvrEQWrqaCUyj.jpg
IP
138.199.37.232:443
ASN
#60068 Datacamp Limited

Requested by
https://megaflix.ws/
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
FingerprintAD:C0:83:00:0A:8D:95:D2:69:DA:6B:FB:17:51:B0:98:85:98:83:32
ValidityWed, 14 May 2025 17:12:51 GMT - Tue, 12 Aug 2025 17:12:50 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 3840x2160, Scaling: [none]x[none], YUV color, decoders should clamp
Size
1.2 MB (1192650 bytes)
Hash
27cc7f774d4f8881ee40bd2548b26697
9d1bfd73cd0bfe3b24d434b286e2fbe8559facfd
9293d3430f7fc2f8c642e4e80506dd70de23ecccc66ccccc59ae745906a0a134

HTTP Headers

GET /t/p/original/fePO5rKq1lM4lIhvrEQWrqaCUyj.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaflix.ws/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 23 Jun 2025 07:26:36 GMT
content-type: image/webp
content-length: 1192650
server: BunnyCDN-DE1-874
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "68401412-1232ca"
last-modified: Wed, 04 Jun 2025 09:38:26 GMT
cdn-storageserver: NY-833
cdn-requestpullsuccess: True
cdn-fileserver: 922
perma-cache: HIT
cdn-proxyver: 1.28
cdn-requestpullcode: 200
cdn-cachedat: 06/04/2025 23:27:37
cdn-edgestorageid: 1075
cdn-requestid: a3cc1b983f7193099d0fff8f09756820
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 0
accept-ranges: bytes
X-Firefox-Spdy: h2

GET image.tmdb.org/t/p/w500/nDkcmSOgQTp7cDrMczPKCNa8SZQ.jpg

138.199.37.232

200 OK

50 kB

URL GET
image.tmdb.org/t/p/w500/nDkcmSOgQTp7cDrMczPKCNa8SZQ.jpg
IP
138.199.37.232:443
ASN
#60068 Datacamp Limited

Requested by
https://megaflix.ws/
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
FingerprintAD:C0:83:00:0A:8D:95:D2:69:DA:6B:FB:17:51:B0:98:85:98:83:32
ValidityWed, 14 May 2025 17:12:51 GMT - Tue, 12 Aug 2025 17:12:50 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 500x750, Scaling: [none]x[none], YUV color, decoders should clamp
Size
50 kB (50142 bytes)
Hash
f25d6d31b16b7fef263bf7c190368088
ea91d5fa60f76d8430d225bc3a58034c7fa6ed28
2415fb774e47c8bb42e842623b603751ffdfa89a844e335c982bce41b609134d

HTTP Headers

GET /t/p/w500/nDkcmSOgQTp7cDrMczPKCNa8SZQ.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaflix.ws/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 23 Jun 2025 07:26:37 GMT
content-type: image/webp
content-length: 50142
server: BunnyCDN-DE1-874
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "68084f29-c3de"
last-modified: Wed, 23 Apr 2025 02:23:37 GMT
cdn-storageserver: NY-673
cdn-requestpullsuccess: True
cdn-fileserver: 920
perma-cache: HIT
cdn-proxyver: 1.28
cdn-requestpullcode: 200
cdn-cachedat: 06/13/2025 08:46:29
cdn-edgestorageid: 1076
cdn-requestid: c6affb1e32c921d521ce637cd0380615
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 0
accept-ranges: bytes
X-Firefox-Spdy: h2

GET kit.fontawesome.com/354ebe7a8c.js

104.18.40.68

403 Forbidden

9 B

URL GET
kit.fontawesome.com/354ebe7a8c.js
IP
104.18.40.68:443
ASN
#13335 CLOUDFLARENET

Requested by
https://megaflix.ws/
Certificate
IssuerGoogle Trust Services
Subjectfontawesome.com
FingerprintB6:27:5D:7E:5E:68:5C:A4:3C:22:27:23:51:CC:9A:5C:3A:7A:AF:0D
ValidityMon, 28 Apr 2025 18:51:58 GMT - Sun, 27 Jul 2025 19:51:56 GMT

File type
ASCII text, with no line terminators
Size
9 B (9 bytes)
Hash
722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3

HTTP Headers

GET /354ebe7a8c.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://megaflix.ws
DNT: 1
Connection: keep-alive
Referer: https://megaflix.ws/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 403 Forbidden
date: Mon, 23 Jun 2025 07:26:36 GMT
content-length: 9
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=0, private, must-revalidate
x-request-id: GEubQ96Xg4aqWh8LFDYh
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 954242123eca56ae-OSL
X-Firefox-Spdy: h2

GET wy.almoneraugite.com/raYcMOoaOFlV/RNJJk

23.109.170.59

200 OK

5 B

URL GET
wy.almoneraugite.com/raYcMOoaOFlV/RNJJk
IP
23.109.170.59:443
ASN
#7979 SERVERS-COM

Requested by
https://megaflix.ws/
Certificate
IssuerLet's Encrypt
Subjectwy.almoneraugite.com
Fingerprint31:C1:EC:81:E5:F2:FE:D8:DD:39:80:D3:60:28:C3:2B:C7:68:64:05
ValidityWed, 21 May 2025 08:23:34 GMT - Tue, 19 Aug 2025 08:23:33 GMT

File type
ASCII text, with no line terminators
Size
5 B (5 bytes)
Hash
848667c49f5d3aef59cd65ed276cd7ae
bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763
cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /raYcMOoaOFlV/RNJJk HTTP/1.1
Host: wy.almoneraugite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaflix.ws/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 23 Jun 2025 07:26:35 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://megaflix.ws
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2B2dUFnYQDeASKlPDqi1fwkRT6B%2BtCuykV9PYSE32bTH6T8TwvKB7gb8kZ4afgeGKsbdqaV21ZD62o%2Br5tGl72vC1ZxceR46zWzol%2BJhfhtC7Cus5tES4TabJq6AYjKcPjof6aqza7jhD3VmiZIV4OMWdIe2v2lWwRItJiIaSvytJovg4hPoxFyJ7rIyt9ZL9EYNYizO%2BQviktj2V%2BQcDKPE883N9m4UZjl07JxEc8WSEJ%2FgtOg3A0GfuNVNJ6deYGmFl2%2F%2F73ONxZiUTSpgZCbNw72R%2B3Z03l; expires=Tue, 24-Jun-2025 07:26:35 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Tue, 24-Jun-2025 07:26:35 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff

GET image.tmdb.org/t/p/w500/gCbNdbf0gdJTbqwxZovIZiO7KUb.jpg

138.199.37.232

200 OK

32 kB

URL GET
image.tmdb.org/t/p/w500/gCbNdbf0gdJTbqwxZovIZiO7KUb.jpg
IP
138.199.37.232:443
ASN
#60068 Datacamp Limited

Requested by
https://megaflix.ws/
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
FingerprintAD:C0:83:00:0A:8D:95:D2:69:DA:6B:FB:17:51:B0:98:85:98:83:32
ValidityWed, 14 May 2025 17:12:51 GMT - Tue, 12 Aug 2025 17:12:50 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 500x750, Scaling: [none]x[none], YUV color, decoders should clamp
Size
32 kB (32296 bytes)
Hash
17a9b8f366e61eb78bc7e19a8b0e8641
4a55d6e4fb35e996cb65b04483ad8284414bc238
16a90f6b0810a6985dd0a06bd40a0e0cf44fd86863d2c3e0918ddc5e164340e7

HTTP Headers

GET /t/p/w500/gCbNdbf0gdJTbqwxZovIZiO7KUb.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaflix.ws/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 23 Jun 2025 07:26:37 GMT
content-type: image/webp
content-length: 32296
server: BunnyCDN-DE1-874
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "680ed541-7e28"
last-modified: Mon, 28 Apr 2025 01:09:21 GMT
cdn-storageserver: NY-753
cdn-requestpullsuccess: True
cdn-fileserver: 629
perma-cache: HIT
cdn-proxyver: 1.28
cdn-requestpullcode: 200
cdn-cachedat: 05/21/2025 07:43:27
cdn-edgestorageid: 865
cdn-requestid: 83b7df7d93cbbf2767170907100a5c81
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 0
accept-ranges: bytes
X-Firefox-Spdy: h2

GET megaflix.ws/modal.css

104.21.60.201

200 OK

1.4 kB

URL GET
megaflix.ws/modal.css
IP
104.21.60.201:443
ASN
#13335 CLOUDFLARENET

Requested by
https://megaflix.ws/
Certificate
IssuerGoogle Trust Services
Subjectmegaflix.ws
Fingerprint91:C2:67:85:3D:1D:3F:17:63:9A:05:E1:82:74:3A:A1:C0:91:74:A9
ValidityMon, 19 May 2025 16:21:48 GMT - Sun, 17 Aug 2025 17:19:08 GMT

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
1.4 kB (1401 bytes)
Hash
a75a810d83d3d27a709b0ad56e130076
56593dfb41deadf7f15ba63e3717a426071c8026
1b30c70910f5bd41270e8599a26c99389d482a93b1cc190a06d7df831a85a39c

HTTP Headers

GET /modal.css HTTP/1.1
Host: megaflix.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaflix.ws/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 23 Jun 2025 07:26:35 GMT
content-type: text/css
server: cloudflare
last-modified: Sun, 23 Feb 2025 20:49:34 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
etag: W/"67bb89de-579"
expires: Sun, 20 Jul 2025 19:16:57 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
age: 216578
cf-cache-status: HIT
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=26eLtke8X7fW%2BwS6I54jDqQaXgG0smsquQT2qvfJqXT6DUCxvA0TPs6xxDoEv1QXLd1QVMBMIVhqdTuU6v%2BefODq9pUnGZG7hw%3D%3D"}]}
cf-ray: 95424211fb7fb51e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET megaflix.ws/wp-content/themes/torofilm/public/fonts/work-sans-v4-latin-regular.woff2

104.21.60.201

200 OK

22 kB

URL GET
megaflix.ws/wp-content/themes/torofilm/public/fonts/work-sans-v4-latin-regular.woff2
IP
104.21.60.201:443
ASN
#13335 CLOUDFLARENET

Requested by
https://megaflix.ws/
Certificate
IssuerGoogle Trust Services
Subjectmegaflix.ws
Fingerprint91:C2:67:85:3D:1D:3F:17:63:9A:05:E1:82:74:3A:A1:C0:91:74:A9
ValidityMon, 19 May 2025 16:21:48 GMT - Sun, 17 Aug 2025 17:19:08 GMT

File type
Web Open Font Format (Version 2), TrueType, length 22488, version 1.0
Size
22 kB (22488 bytes)
Hash
238c66f0f32567f8b025fa462b139235
a27f5e36161c6194a6f8a135e9e0056028bf3128
29a23ea4b518625595ed555e8edc2e32119a305df5bfecacc1ac38df8a384f9e

HTTP Headers

GET /wp-content/themes/torofilm/public/fonts/work-sans-v4-latin-regular.woff2 HTTP/1.1
Host: megaflix.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://megaflix.ws/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 23 Jun 2025 07:26:37 GMT
content-type: font/woff2
content-length: 22488
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=88q0EcEv%2FjQBxecbUkpkN%2B3fg%2BJrKaIdD4L7c8mdAQb%2FIYeiZZt86hxAghpnPrYwdi7L8YyKaSrsylfs17NXpkaR5oXw%2FuLLGQNRpZ8zhwhI%2Fp7smewTHaonK9JgxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Tue, 04 Jun 2024 02:05:13 GMT
etag: "665e7659-57d8"
expires: Wed, 23 Jul 2025 07:26:37 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
accept-ranges: bytes
cf-cache-status: DYNAMIC
cf-ray: 9542421c7c5e56a2-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=673&min_rtt=0&rtt_var=157&sent=413&recv=290&lost=0&retrans=0&sent_bytes=279559&recv_bytes=17682&delivery_rate=9310625&ss_exit_cwnd=14903&ss_exit_reason=2&cwnd=22178&unsent_bytes=0&cid=3d95023e171b329f&ts=2194&inflight_dur=135&x=44"

GET megaflix.ws/wp-content/themes/torofilm/public/fonts/work-sans-v4-latin-700.woff2

104.21.60.201

200 OK

24 kB

URL GET
megaflix.ws/wp-content/themes/torofilm/public/fonts/work-sans-v4-latin-700.woff2
IP
104.21.60.201:443
ASN
#13335 CLOUDFLARENET

Requested by
https://megaflix.ws/
Certificate
IssuerGoogle Trust Services
Subjectmegaflix.ws
Fingerprint91:C2:67:85:3D:1D:3F:17:63:9A:05:E1:82:74:3A:A1:C0:91:74:A9
ValidityMon, 19 May 2025 16:21:48 GMT - Sun, 17 Aug 2025 17:19:08 GMT

File type
Web Open Font Format (Version 2), TrueType, length 24452, version 1.0
Size
24 kB (24452 bytes)
Hash
539ed1a07cb8b137b6825efd1789c2f3
6a46045cbc0a5af52f68d8a65a40df4f5cc6ed6e
681a963b7e247c1376a6af7a6e439256600ac932521623f600faa57a59b4fcb7

HTTP Headers

GET /wp-content/themes/torofilm/public/fonts/work-sans-v4-latin-700.woff2 HTTP/1.1
Host: megaflix.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://megaflix.ws/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 23 Jun 2025 07:26:37 GMT
content-type: font/woff2
content-length: 24452
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MzRJa5%2BYQP7EcRVGPZcJOWQQ5ucH%2F6J18LsINCX6S9wQySYhMaquVdWgrZKpU7Ipm%2B%2BR93GC8eqYZ%2FTkJf938ihIPHeYvcgiBXMPoXl4DqbT%2BSPcZXhGd83K1mKBQg%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Tue, 04 Jun 2024 02:05:13 GMT
etag: "665e7659-5f84"
expires: Wed, 23 Jul 2025 07:26:37 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
accept-ranges: bytes
cf-cache-status: DYNAMIC
cf-ray: 9542421c7c5f56a2-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=673&min_rtt=0&rtt_var=157&sent=419&recv=290&lost=0&retrans=0&sent_bytes=285789&recv_bytes=17682&delivery_rate=9310625&ss_exit_cwnd=14903&ss_exit_reason=2&cwnd=22178&unsent_bytes=0&cid=3d95023e171b329f&ts=2195&inflight_dur=135&x=44"

GET tecnews.net/wp-content/uploads/2025/01/telegram777.png

104.21.80.1

200 OK

13 kB

URL GET
tecnews.net/wp-content/uploads/2025/01/telegram777.png
IP
104.21.80.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://megaflix.ws/
Certificate
IssuerGoogle Trust Services
Subjecttecnews.net
Fingerprint49:47:E4:3F:D8:AD:FE:E1:84:BC:35:2D:9C:07:43:E7:BB:B7:E7:95
ValidityFri, 13 Jun 2025 23:32:04 GMT - Fri, 12 Sep 2025 00:29:50 GMT

File type
PNG image data, 320 x 92, 8-bit/color RGBA, non-interlaced
Size
13 kB (13224 bytes)
Hash
4238cc867dc62bbe1d1f0742173c3002
8e29c753429596948942b4fdf945fc9c13b044ed
7f040525aafce4db87b6b3aa7c2e04eb39fb646b2e1e1684043712e51db926a6

HTTP Headers

GET /wp-content/uploads/2025/01/telegram777.png HTTP/1.1
Host: tecnews.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaflix.ws/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 23 Jun 2025 07:26:36 GMT
content-type: image/png
content-length: 13224
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MPJhyiUIGWiUxtTTxvkKsZKXhjOzGALH2RdOagfzbt70sOT65B6850uEoBupigKghWZbr0yBDH6OPa80BZBsi6Z%2BS2YPVh2rvFsuu2YQ1j9O1Uz9NrpW9UDoQktbiA%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sat, 18 Jan 2025 02:54:19 GMT
etag: "678b17db-33a8"
expires: Fri, 18 Jul 2025 19:55:33 GMT
cache-control: max-age=2592000
accept-ranges: bytes
age: 387062
cf-cache-status: HIT
cf-ray: 95424215a9780afe-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3600&min_rtt=532&rtt_var=3583&sent=88&recv=104&lost=0&retrans=0&sent_bytes=7874&recv_bytes=6206&delivery_rate=402454&ss_exit_cwnd=14906&ss_exit_reason=2&cwnd=12000&unsent_bytes=0&cid=4723b51028ba6a3e&ts=509&inflight_dur=32&x=44"

GET tecnews.net/wp-content/uploads/2025/01/discord.png

104.21.80.1

200 OK

14 kB

URL GET
tecnews.net/wp-content/uploads/2025/01/discord.png
IP
104.21.80.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://megaflix.ws/
Certificate
IssuerGoogle Trust Services
Subjecttecnews.net
Fingerprint49:47:E4:3F:D8:AD:FE:E1:84:BC:35:2D:9C:07:43:E7:BB:B7:E7:95
ValidityFri, 13 Jun 2025 23:32:04 GMT - Fri, 12 Sep 2025 00:29:50 GMT

File type
PNG image data, 320 x 86, 8-bit/color RGBA, non-interlaced
Size
14 kB (14016 bytes)
Hash
6c44db282c31a07eed63dfe2911a9b84
a24d4564eb457aacb5758940cb737702618483a4
cbf78887991388a49b882969c512f69a7b4c08be4ac6bc9805f1b89d52f311ec

HTTP Headers

GET /wp-content/uploads/2025/01/discord.png HTTP/1.1
Host: tecnews.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaflix.ws/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 23 Jun 2025 07:26:35 GMT
content-type: image/png
content-length: 14016
cf-ray: 954242125adf569b-OSL
last-modified: Thu, 16 Jan 2025 04:42:53 GMT
etag: "67888e4d-36c0"
expires: Fri, 18 Jul 2025 19:55:33 GMT
cache-control: max-age=2592000
accept-ranges: bytes
age: 387062
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8%2BHtVxfgUV1Yu111mzNEKO4OfWobpl%2FQn3daosoczUwygERJauzkBjZ8fGpzcxmva7o%2Fl%2F0ijJqE7hvknzx9FPJRcWOhchlV8uaywEfAk6cucZLzWNUjf%2BPbfuui0A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=435&min_rtt=397&rtt_var=88&sent=8&recv=10&lost=0&retrans=0&sent_bytes=3199&recv_bytes=1096&delivery_rate=8551181&cwnd=254&unsent_bytes=0&cid=17c562f5c802ea4f&ts=68&x=0"
X-Firefox-Spdy: h2

GET megaflix.ws/wp-content/themes/torofilm/public/fonts/fa-solid-900.woff2

104.21.60.201

200 OK

74 kB

URL GET
megaflix.ws/wp-content/themes/torofilm/public/fonts/fa-solid-900.woff2
IP
104.21.60.201:443
ASN
#13335 CLOUDFLARENET

Requested by
https://megaflix.ws/
Certificate
IssuerGoogle Trust Services
Subjectmegaflix.ws
Fingerprint91:C2:67:85:3D:1D:3F:17:63:9A:05:E1:82:74:3A:A1:C0:91:74:A9
ValidityMon, 19 May 2025 16:21:48 GMT - Sun, 17 Aug 2025 17:19:08 GMT

File type
Web Open Font Format (Version 2), TrueType, length 74328, version 329.-17695
Size
74 kB (74328 bytes)
Hash
64b3e814a66c2719b15abf8f7998bd73
fa5c5d34c7c375aa3e101f0b8104b6cdbcacd6a6
0fe6a4357505cb0d3ca8ba0671ad57df6b7410ca02cb8065eed58e2c0381e640

HTTP Headers

GET /wp-content/themes/torofilm/public/fonts/fa-solid-900.woff2 HTTP/1.1
Host: megaflix.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://megaflix.ws/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 23 Jun 2025 07:26:36 GMT
content-type: font/woff2
content-length: 74328
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=efq5tg9%2BFq41RBw3XBLjmyy6H%2FHJj%2BmE3j7wwFWVomQDhBbZ06zKP7U17GZ5NzwSBId5HOHsmKeKjFJZUfd32bR%2Byr%2BSaXigqh9uvpOQtBH3lG7MtesGfk9ohtI4MQ%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Tue, 04 Jun 2024 02:05:13 GMT
etag: "665e7659-12258"
expires: Wed, 23 Jul 2025 07:26:36 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
accept-ranges: bytes
cf-cache-status: DYNAMIC
cf-ray: 954242140c1556a2-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4575&min_rtt=527&rtt_var=5086&sent=151&recv=206&lost=0&retrans=0&sent_bytes=11257&recv_bytes=12448&delivery_rate=264129&ss_exit_cwnd=14903&ss_exit_reason=2&cwnd=12000&unsent_bytes=0&cid=3d95023e171b329f&ts=858&inflight_dur=40&x=44"

GET megaflix.ws/wp-content/themes/torofilm/public/fonts/work-sans-v4-latin-700.woff2

104.21.60.201

200 OK

24 kB

URL GET
megaflix.ws/wp-content/themes/torofilm/public/fonts/work-sans-v4-latin-700.woff2
IP
104.21.60.201:443
ASN
#13335 CLOUDFLARENET

Requested by
https://megaflix.ws/
Certificate
IssuerGoogle Trust Services
Subjectmegaflix.ws
Fingerprint91:C2:67:85:3D:1D:3F:17:63:9A:05:E1:82:74:3A:A1:C0:91:74:A9
ValidityMon, 19 May 2025 16:21:48 GMT - Sun, 17 Aug 2025 17:19:08 GMT

File type
Web Open Font Format (Version 2), TrueType, length 24452, version 1.0
Size
24 kB (24452 bytes)
Hash
539ed1a07cb8b137b6825efd1789c2f3
6a46045cbc0a5af52f68d8a65a40df4f5cc6ed6e
681a963b7e247c1376a6af7a6e439256600ac932521623f600faa57a59b4fcb7

HTTP Headers

GET /wp-content/themes/torofilm/public/fonts/work-sans-v4-latin-700.woff2 HTTP/1.1
Host: megaflix.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://megaflix.ws/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 23 Jun 2025 07:26:36 GMT
content-type: font/woff2
content-length: 24452
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=juRfAFAfE4RlGRQZW9aOHoZAkgpNJszBvO1j8cYRAlmHKzG79qYXMrR8M%2BX9u6zwjH%2FIAj4bAsAK7rKQihuijlcyu1gAntiDSjwQYSdLvAR0s7FI4Y%2BN24AFvSibcQ%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Tue, 04 Jun 2024 02:05:13 GMT
etag: "665e7659-5f84"
expires: Wed, 23 Jul 2025 07:26:36 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
accept-ranges: bytes
cf-cache-status: DYNAMIC
cf-ray: 954242141c1756a2-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=848&min_rtt=0&rtt_var=564&sent=208&recv=224&lost=0&retrans=0&sent_bytes=74039&recv_bytes=13261&delivery_rate=5611533&ss_exit_cwnd=14903&ss_exit_reason=2&cwnd=14928&unsent_bytes=0&cid=3d95023e171b329f&ts=901&inflight_dur=65&x=44"

GET image.tmdb.org/t/p/w500/hk55rpH8UlnTZUztqax0Wnc4rj8.jpg

138.199.37.232

200 OK

32 kB

URL GET
image.tmdb.org/t/p/w500/hk55rpH8UlnTZUztqax0Wnc4rj8.jpg
IP
138.199.37.232:443
ASN
#60068 Datacamp Limited

Requested by
https://megaflix.ws/
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
FingerprintAD:C0:83:00:0A:8D:95:D2:69:DA:6B:FB:17:51:B0:98:85:98:83:32
ValidityWed, 14 May 2025 17:12:51 GMT - Tue, 12 Aug 2025 17:12:50 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 500x750, Scaling: [none]x[none], YUV color, decoders should clamp
Size
32 kB (32080 bytes)
Hash
8927bbc4d5db94c9b86f336f7896769a
7d57c216bbaa1f4a7ddbd62eef365a659b5ca8ff
41b70df5665ebd10be9d788940d0971e79c4f1fbe768a4872c5f424c4c89757a

HTTP Headers

GET /t/p/w500/hk55rpH8UlnTZUztqax0Wnc4rj8.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaflix.ws/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 23 Jun 2025 07:26:36 GMT
content-type: image/webp
content-length: 32080
server: BunnyCDN-DE1-874
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "67fcadef-7d50"
last-modified: Mon, 14 Apr 2025 06:40:47 GMT
cdn-storageserver: NY-753
cdn-requestpullsuccess: True
cdn-fileserver: 921
perma-cache: HIT
cdn-proxyver: 1.28
cdn-requestpullcode: 200
cdn-cachedat: 06/04/2025 02:07:14
cdn-edgestorageid: 1075
cdn-requestid: 5f84e588c4ea23d13bded870b10e5b46
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 0
accept-ranges: bytes
X-Firefox-Spdy: h2

GET megaflix.ws/wp-content/plugins/autoptimize/classes/external/js/lazysizes.min.js?ao_version=3.1.13

104.21.60.201

200 OK

9.8 kB

URL GET
megaflix.ws/wp-content/plugins/autoptimize/classes/external/js/lazysizes.min.js?ao_version=3.1.13
IP
104.21.60.201:443
ASN
#13335 CLOUDFLARENET

Requested by
https://megaflix.ws/
Certificate
IssuerGoogle Trust Services
Subjectmegaflix.ws
Fingerprint91:C2:67:85:3D:1D:3F:17:63:9A:05:E1:82:74:3A:A1:C0:91:74:A9
ValidityMon, 19 May 2025 16:21:48 GMT - Sun, 17 Aug 2025 17:19:08 GMT

File type
JavaScript source, ASCII text, with very long lines (7862)
Size
9.8 kB (9813 bytes)
Hash
d1edbffbde50cd32ab770746b4140906
6e120f03a5ac9fddc25e7830d204b202721d8879
c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1

HTTP Headers

GET /wp-content/plugins/autoptimize/classes/external/js/lazysizes.min.js?ao_version=3.1.13 HTTP/1.1
Host: megaflix.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaflix.ws/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 23 Jun 2025 07:26:35 GMT
content-type: text/javascript
server: cloudflare
last-modified: Thu, 26 Dec 2024 18:27:21 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
etag: W/"676da009-2655"
expires: Wed, 23 Jul 2025 07:26:35 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=L5Q7OpbZAYPl%2BBdXk3ebtI476j%2BMZcZVNqwH5QfEPESaNUYG2GKv7Z4DNcqa4YNBfO6bCj%2F4nrYfAGo6YQ7sBG94hgt0l9HcAA%3D%3D"}]}
cf-ray: 95424211eb6db51e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET hv.encystkokil.com/rNKdaN4XxmP/qEkkm

23.109.170.137

200 OK

5 B

URL GET
hv.encystkokil.com/rNKdaN4XxmP/qEkkm
IP
23.109.170.137:443
ASN
#7979 SERVERS-COM

Requested by
https://megaflix.ws/
Certificate
IssuerLet's Encrypt
Subjecthv.encystkokil.com
Fingerprint1D:36:0D:DF:14:E8:B7:D3:8E:98:B2:D4:39:21:5A:A8:A2:89:D9:F8
ValidityThu, 01 May 2025 17:05:40 GMT - Wed, 30 Jul 2025 17:05:39 GMT

File type
ASCII text, with no line terminators
Size
5 B (5 bytes)
Hash
848667c49f5d3aef59cd65ed276cd7ae
bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763
cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /rNKdaN4XxmP/qEkkm HTTP/1.1
Host: hv.encystkokil.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaflix.ws/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 23 Jun 2025 07:26:36 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://megaflix.ws
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2B2dUFnYQDeASKlPDqi1fwkRT6B%2BtCuykV9PYSE32bTH6T8TwvKB7gb8kZ4afgeGKsbdqaV21ZD62o%2Br5tGl72vC1ZxceR46zWzol%2BJhfhtC7Cus5tES4TabJq6AYjKcPjof6aqza7jhD3VmiZIV4OMWdIe2v2lWwRItJiIaSvytJovg4hPoxFyJ7rIyt9ZL9EYNYizO%2BQviktj2V%2BQcDKPE883N9m4UZjl07JxEc8WSEJ%2FgtOg3A0GfuNVNJ6deYGmFl2%2F%2F73ONxZiUTSpgZCbNw72R%2B3Z03l; expires=Tue, 24-Jun-2025 07:26:36 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Tue, 24-Jun-2025 07:26:36 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff

GET megaflix.ws/wp-content/themes/torofilm/public/fonts/fa-brands-400.woff2

104.21.60.201

200 OK

75 kB

URL GET
megaflix.ws/wp-content/themes/torofilm/public/fonts/fa-brands-400.woff2
IP
104.21.60.201:443
ASN
#13335 CLOUDFLARENET

Requested by
https://megaflix.ws/
Certificate
IssuerGoogle Trust Services
Subjectmegaflix.ws
Fingerprint91:C2:67:85:3D:1D:3F:17:63:9A:05:E1:82:74:3A:A1:C0:91:74:A9
ValidityMon, 19 May 2025 16:21:48 GMT - Sun, 17 Aug 2025 17:19:08 GMT

File type
Web Open Font Format (Version 2), TrueType, length 74656, version 329.-17695
Size
75 kB (74656 bytes)
Hash
9f4ce3dc689981a1b87faab0f5484f9e
1b33b1246610585c440e464b04df64cf0cea1dca
57c96fd4294617fb0bf3842d1f77ec2365ff0d0d00b6817508b6192df0e8c169

HTTP Headers

GET /wp-content/themes/torofilm/public/fonts/fa-brands-400.woff2 HTTP/1.1
Host: megaflix.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://megaflix.ws/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 23 Jun 2025 07:26:36 GMT
content-type: font/woff2
content-length: 74656
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qLrYhCxoG9yQds77nt6Byeuj8Hfn33enB4qUbe1OsplzBpNKcHKiOIKmNvRyWMZ%2BneAhrvsVjxfCh7jqCWQscjzaFPcxLOViBEOdx%2Bvio0wCTbXr2tnhEiExmErsWQ%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Tue, 04 Jun 2024 02:05:13 GMT
etag: "665e7659-123a0"
expires: Wed, 23 Jul 2025 07:26:36 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
accept-ranges: bytes
cf-cache-status: DYNAMIC
cf-ray: 954242144c1956a2-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=695&min_rtt=0&rtt_var=147&sent=247&recv=238&lost=0&retrans=0&sent_bytes=113088&recv_bytes=13907&delivery_rate=6053015&ss_exit_cwnd=14903&ss_exit_reason=2&cwnd=19060&unsent_bytes=0&cid=3d95023e171b329f&ts=923&inflight_dur=78&x=44"

GET megaflix.ws/wp-content/themes/torofilm/public/fonts/work-sans-v4-latin-regular.woff2

104.21.60.201

200 OK

22 kB

URL GET
megaflix.ws/wp-content/themes/torofilm/public/fonts/work-sans-v4-latin-regular.woff2
IP
104.21.60.201:443
ASN
#13335 CLOUDFLARENET

Requested by
https://megaflix.ws/
Certificate
IssuerGoogle Trust Services
Subjectmegaflix.ws
Fingerprint91:C2:67:85:3D:1D:3F:17:63:9A:05:E1:82:74:3A:A1:C0:91:74:A9
ValidityMon, 19 May 2025 16:21:48 GMT - Sun, 17 Aug 2025 17:19:08 GMT

File type
Web Open Font Format (Version 2), TrueType, length 22488, version 1.0
Size
22 kB (22488 bytes)
Hash
238c66f0f32567f8b025fa462b139235
a27f5e36161c6194a6f8a135e9e0056028bf3128
29a23ea4b518625595ed555e8edc2e32119a305df5bfecacc1ac38df8a384f9e

HTTP Headers

GET /wp-content/themes/torofilm/public/fonts/work-sans-v4-latin-regular.woff2 HTTP/1.1
Host: megaflix.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://megaflix.ws/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 23 Jun 2025 07:26:36 GMT
content-type: font/woff2
content-length: 22488
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yDh9YbyZZNRG1K6WG7qmryoVHUfPUpM9BRdkJJ%2Fkyg4pH27ISvmCz5nS3IIUEh65ck%2BxGRruse215I%2BLnci4pIvfhQvwt8Iy0kgTrVhVMlPIW5VD7Isfx8q9tP%2Fm5Q%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Tue, 04 Jun 2024 02:05:13 GMT
etag: "665e7659-57d8"
expires: Wed, 23 Jul 2025 07:26:36 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
accept-ranges: bytes
cf-cache-status: DYNAMIC
cf-ray: 954242141c1656a2-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4575&min_rtt=527&rtt_var=5086&sent=151&recv=206&lost=0&retrans=0&sent_bytes=11257&recv_bytes=12448&delivery_rate=264129&ss_exit_cwnd=14903&ss_exit_reason=2&cwnd=12000&unsent_bytes=0&cid=3d95023e171b329f&ts=858&inflight_dur=40&x=44"

GET megaflix.ws/wp-content/uploads/2024/06/cropped-download-192x192.png

104.21.60.201

200 OK

48 kB

URL GET
megaflix.ws/wp-content/uploads/2024/06/cropped-download-192x192.png
IP
104.21.60.201:443
ASN
#13335 CLOUDFLARENET

Requested by
https://megaflix.ws/
Certificate
IssuerGoogle Trust Services
Subjectmegaflix.ws
Fingerprint91:C2:67:85:3D:1D:3F:17:63:9A:05:E1:82:74:3A:A1:C0:91:74:A9
ValidityMon, 19 May 2025 16:21:48 GMT - Sun, 17 Aug 2025 17:19:08 GMT

File type
PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Size
48 kB (48238 bytes)
Hash
b3faf24e8e68caeeca9a385f99f2d045
2daf15729d3b00cd89abbfba52c5c6718dae969f
4dbefe62614c969859953e5c1355d49fc891983cf1bca91e7556f5a02dc98588

HTTP Headers

GET /wp-content/uploads/2024/06/cropped-download-192x192.png HTTP/1.1
Host: megaflix.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaflix.ws/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 23 Jun 2025 07:26:36 GMT
content-type: image/png
content-length: 48238
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PBPvV7VhFf6ETV%2FfAeHaog8bMN%2B0UYtAd2Seu4H30gtyuVb9OdA8yeg59UMMhcmxca0W3yQUxCx4ZhM4ZHJqpVfqQt7ZRpVis%2FPKMn6k147RXGhd864HWZ7p00RcrQ%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 23 Jun 2024 15:18:19 GMT
etag: "66783cbb-bc6e"
expires: Wed, 23 Jul 2025 07:26:36 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
accept-ranges: bytes
cf-cache-status: DYNAMIC
cf-ray: 954242157c1d56a2-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=590&min_rtt=0&rtt_var=98&sent=349&recv=273&lost=0&retrans=0&sent_bytes=215718&recv_bytes=16286&delivery_rate=7448463&ss_exit_cwnd=14903&ss_exit_reason=2&cwnd=17450&unsent_bytes=0&cid=3d95023e171b329f&ts=1073&inflight_dur=115&x=44"

GET image.tmdb.org/t/p/w500/vdvEClt3J8sFWxyMo0Jm7JpouEo.jpg

138.199.37.232

200 OK

47 kB

URL GET
image.tmdb.org/t/p/w500/vdvEClt3J8sFWxyMo0Jm7JpouEo.jpg
IP
138.199.37.232:443
ASN
#60068 Datacamp Limited

Requested by
https://megaflix.ws/
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
FingerprintAD:C0:83:00:0A:8D:95:D2:69:DA:6B:FB:17:51:B0:98:85:98:83:32
ValidityWed, 14 May 2025 17:12:51 GMT - Tue, 12 Aug 2025 17:12:50 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 500x750, Scaling: [none]x[none], YUV color, decoders should clamp
Size
47 kB (47278 bytes)
Hash
8a70eab86dbb2f77dd79dea33c957606
c07a818347e4ef9e8d06b8cd52a11698a4d02052
3030625cffcbeebd7b981fbf3db76e6d96788484fdb10ec401d7aa62a222de53

HTTP Headers

GET /t/p/w500/vdvEClt3J8sFWxyMo0Jm7JpouEo.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaflix.ws/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 23 Jun 2025 07:26:36 GMT
content-type: image/webp
content-length: 47278
server: BunnyCDN-DE1-874
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "6848d809-b8ae"
last-modified: Wed, 11 Jun 2025 01:12:41 GMT
cdn-storageserver: NY-833
cdn-requestpullsuccess: True
cdn-fileserver: 695
perma-cache: HIT
cdn-proxyver: 1.28
cdn-requestpullcode: 200
cdn-cachedat: 06/11/2025 04:34:11
cdn-edgestorageid: 1053
cdn-requestid: da4cce345ca374ce4265303053cf0740
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 0
accept-ranges: bytes
X-Firefox-Spdy: h2

GET megaflix.help/

104.21.73.210

301 Moved Permanently

226 kB

URL User Request GET
megaflix.help/
IP
104.21.73.210:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectmegaflix.help
FingerprintA4:37:63:25:42:D7:B5:3D:4D:12:10:33:5E:21:D7:D0:1A:B7:C1:DA
ValidityThu, 19 Jun 2025 16:48:58 GMT - Wed, 17 Sep 2025 17:46:29 GMT

File type

Size
226 kB (226479 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: megaflix.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
date: Mon, 23 Jun 2025 07:26:34 GMT
content-type: text/html; charset=iso-8859-1
location: https://megaflix.ws/
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=5gPlNlCo2s7An51Qazzj%2FTTjPbJEfGq9vKMg293%2BAS8FKsIbGNB3Xijolve9NEGxee4OCBvaT%2F0KUGEyxx0nfHjzDndg9eNKDGBY"}]}
cf-ray: 9542420c0a1f1bfe-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET megaflix.ws/wp-content/cache/autoptimize/js/autoptimize_bdaa40adc6df517e6a31333a6a463539.js

104.21.60.201

200 OK

150 kB

URL GET
megaflix.ws/wp-content/cache/autoptimize/js/autoptimize_bdaa40adc6df517e6a31333a6a463539.js
IP
104.21.60.201:443
ASN
#13335 CLOUDFLARENET

Requested by
https://megaflix.ws/
Certificate
IssuerGoogle Trust Services
Subjectmegaflix.ws
Fingerprint91:C2:67:85:3D:1D:3F:17:63:9A:05:E1:82:74:3A:A1:C0:91:74:A9
ValidityMon, 19 May 2025 16:21:48 GMT - Sun, 17 Aug 2025 17:19:08 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
150 kB (149659 bytes)
Hash
9ba3b612c7f996a26a9112ad99f1a076
230d1bfeaad6bca8cd59f2d4fdc8255bf20fd504
ac1bde668e7266fdb97add7377dfe6b7844f68098fbdd455b2596276d5649c7e

HTTP Headers

GET /wp-content/cache/autoptimize/js/autoptimize_bdaa40adc6df517e6a31333a6a463539.js HTTP/1.1
Host: megaflix.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaflix.ws/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 23 Jun 2025 07:26:35 GMT
content-type: text/javascript
server: cloudflare
last-modified: Sun, 22 Jun 2025 14:54:49 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
etag: W/"68581939-2489b"
expires: Wed, 23 Jul 2025 07:26:35 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=JVk9IzckkbDTKDD29j5RZdV3MdsQCdfAbEIbZwMamzUejematSXv%2Fvs8zOpwFvYVWdqsduNnYYbBLZC1DM%2FPFHwae9C5T8W%2BHQ%3D%3D"}]}
cf-ray: 95424211eb78b51e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET image.tmdb.org/t/p/w500/niTRdfNCT29PXU9YpPPuISrBIw7.jpg

138.199.37.232

200 OK

74 kB

URL GET
image.tmdb.org/t/p/w500/niTRdfNCT29PXU9YpPPuISrBIw7.jpg
IP
138.199.37.232:443
ASN
#60068 Datacamp Limited

Requested by
https://megaflix.ws/
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
FingerprintAD:C0:83:00:0A:8D:95:D2:69:DA:6B:FB:17:51:B0:98:85:98:83:32
ValidityWed, 14 May 2025 17:12:51 GMT - Tue, 12 Aug 2025 17:12:50 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 500x750, Scaling: [none]x[none], YUV color, decoders should clamp
Size
74 kB (74286 bytes)
Hash
99aa56fca730745b9c23564094a0af81
2f7813542782f39261868aa49fd68cde70ed2dc3
12a430f262ad8446e563823a5ce996baeb58c83c72cc7eaac21d1f9072f64ca0

HTTP Headers

GET /t/p/w500/niTRdfNCT29PXU9YpPPuISrBIw7.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaflix.ws/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 23 Jun 2025 07:26:36 GMT
content-type: image/webp
content-length: 74286
server: BunnyCDN-DE1-874
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "680cd979-1222e"
last-modified: Sat, 26 Apr 2025 13:02:49 GMT
cdn-storageserver: NY-833
cdn-requestpullsuccess: True
cdn-fileserver: 675
perma-cache: HIT
cdn-proxyver: 1.23
cdn-requestpullcode: 200
cdn-cachedat: 04/28/2025 14:25:32
cdn-edgestorageid: 1078
cdn-requestid: 8eb030cc73f7d5bba0b5aa089f718873
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 0
accept-ranges: bytes
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (30)

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers