| rb.gy/xokmi5?/WATCH.FULL.VIDEOs. |  76.223.86.4 | 301 Moved Permanently | 0 B |
URL HTTP/1.1rb.gy/xokmi5?/WATCH.FULL.VIDEOs. IP76.223.86.4:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /xokmi5?/WATCH.FULL.VIDEOs. HTTP/1.1
Host: rb.gy
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 30 Nov 2022 01:41:34 GMT
Content-Length: 0
Cache-Control: no-cache, no-store
Expires: -1
Location: https://nculflix.xyz/tv/119051/wednesday.html?%2FWATCH.FULL.VIDEOs.=
Engine: Rebrandly.redirect, version 2.1
|
|
| r3.o.lencr.org/ |  95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash2d2e7649ce9e9ba6fc8b68aa89352e3c 0153d1d3d830a457043e16bb40d48a0b9ddef4b8 8eed57c91b42ef7b2d5eff1309e306e23e13c3de21219af24a693cbf3e8977fc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8EED57C91B42EF7B2D5EFF1309E306E23E13C3DE21219AF24A693CBF3E8977FC"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4733
Expires: Wed, 30 Nov 2022 03:00:27 GMT
Date: Wed, 30 Nov 2022 01:41:34 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 55 B |
IP93.184.220.29:0
File typeHTML document, ASCII text Hash9f073354411bbaf7a319b1519f10b4b7 571498f38548829bf186f49f5be9d5fa6e689a68 4a7aaaa1c093dee8a191d4469c9f701c5e62e88896bc778a13cc4ffedf9be89a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4539
Cache-Control: public, max-age=1209600
Content-Type: text/html
Date: Wed, 30 Nov 2022 01:41:34 GMT
Etag: "63866bb2-37"
Last-Modified: Tue, 29 Nov 2022 20:29:38 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 55
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash6d9d34c96b9a826ae5676640c966469c 8052a16d41a637e420478b7de1ff5a2dc951fccd f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16478
Expires: Wed, 30 Nov 2022 06:16:12 GMT
Date: Wed, 30 Nov 2022 01:41:34 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ | 34.102.187.140 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash14cd9a0afb6ba9a763651d5112760d1e 75d7b104ab9ab11fbb73c3f348b43b0119b5adfa 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 30 Nov 2022 01:17:57 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1417
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash9ebddc2b260d081ebbefee47c037cb28 492bad62a7ca6a74738921ef5ae6f0be5edebf39 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 2bNYuFmJx3MVZ9fh/XnlQypeX4KcmIEVU+xH3lIERxZeFsgWC5rDQYFjl1lnVoEZRlmHDjFundU=
x-amz-request-id: 7V2FVMQVRBXB7MTW
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 30 Nov 2022 00:45:40 GMT
age: 3354
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 01:41:34 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| e1.o.lencr.org/ | 95.101.11.115 | 200 OK | 345 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash9169222e1ea68a5564048cf6bae02f27 0e542fb3bbf51105fa9f59c6ed649400b17973cc 2ef10cfb72f709c8c302661e218bce1448d3d7c634a374629355cee93d2aae5d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "2EF10CFB72F709C8C302661E218BCE1448D3D7C634A374629355CEE93D2AAE5D"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Wed, 30 Nov 2022 07:41:35 GMT
Date: Wed, 30 Nov 2022 01:41:35 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 34.102.187.140 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 30 Nov 2022 01:08:56 GMT
cache-control: public,max-age=3600
age: 1959
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| e1.o.lencr.org/ | 95.101.11.115 | 200 OK | 345 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash9169222e1ea68a5564048cf6bae02f27 0e542fb3bbf51105fa9f59c6ed649400b17973cc 2ef10cfb72f709c8c302661e218bce1448d3d7c634a374629355cee93d2aae5d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "2EF10CFB72F709C8C302661E218BCE1448D3D7C634A374629355CEE93D2AAE5D"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Wed, 30 Nov 2022 07:41:35 GMT
Date: Wed, 30 Nov 2022 01:41:35 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash96ba40be4ad9ed57887bc3d9d39b9ee2 bd3b5d8943ab7741bfa5c18c8766013b80519424 19e5f58133b52dbd7ab629ad02f9a38ed2b69909b797ff3722f09fb811085362
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6206
Cache-Control: max-age=111788
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 01:41:35 GMT
Etag: "6385ae3d-117"
Expires: Thu, 01 Dec 2022 08:44:43 GMT
Last-Modified: Tue, 29 Nov 2022 07:01:17 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 279
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash96ba40be4ad9ed57887bc3d9d39b9ee2 bd3b5d8943ab7741bfa5c18c8766013b80519424 19e5f58133b52dbd7ab629ad02f9a38ed2b69909b797ff3722f09fb811085362
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6206
Cache-Control: max-age=111788
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 01:41:35 GMT
Etag: "6385ae3d-117"
Expires: Thu, 01 Dec 2022 08:44:43 GMT
Last-Modified: Tue, 29 Nov 2022 07:01:17 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 279
|
|
| cdnjs.cloudflare.com/ajax/libs/modernizr/2.7.1/modernizr.min.js |  104.17.25.14 | 200 OK | 5.2 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/modernizr/2.7.1/modernizr.min.js IP104.17.25.14:0
File typeHTML document, ASCII text, with very long lines (14586), with no line terminators Hashf44dd83db06c80bfde06118ae8acde77 42e5c552dc09f431aec9bc7960ffd96677332a4f aeb59d15e7f5061f8389180bcec7bb9a48c830b1f8a7207c8bf1592be1ee9a1b
GET /ajax/libs/modernizr/2.7.1/modernizr.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:41:35 GMT
content-type: application/javascript; charset=utf-8
content-length: 5231
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03f26-38fa"
last-modified: Mon, 04 May 2020 16:13:26 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2769567
expires: Mon, 20 Nov 2023 01:41:35 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gr8jvaPjvhdQtD5wnm4qkxfUZiiEaLGwpacW4vKpqsg%2FrJzlHWHUX1in2woZaONUw7V8dxv2OMrQ5vGpFiA66BZiLjCiokgrArcVPJ4kyGWRRRNhw6vb3mS1Ga%2BjsdcypTwac2PU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 771fe1b01c73b529-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash96ba40be4ad9ed57887bc3d9d39b9ee2 bd3b5d8943ab7741bfa5c18c8766013b80519424 19e5f58133b52dbd7ab629ad02f9a38ed2b69909b797ff3722f09fb811085362
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6206
Cache-Control: max-age=111788
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 01:41:35 GMT
Etag: "6385ae3d-117"
Expires: Thu, 01 Dec 2022 08:44:43 GMT
Last-Modified: Tue, 29 Nov 2022 07:01:17 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 279
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash146dac10a93604a686550631e14eefb9 b4af601ce6d515d9ec124938ce626060e0d43099 bac5bc94c1a95af45522dadbf1639aff31e691fa2314314c6cce1ab1e70bba87
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 01:41:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| i1.wp.com/image.tmdb.org/t/p/w300/b4gYVcl8pParX8AjkN90iQrWrWO.jpg?resize=300,450 | 192.0.77.2 | 200 OK | 6.7 kB |
URL HTTP/2i1.wp.com/image.tmdb.org/t/p/w300/b4gYVcl8pParX8AjkN90iQrWrWO.jpg?resize=300,450 IP192.0.77.2:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 300x450, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hashe18414f04728e6bd60af71ff67a2136c 8fa93f11505b80d469c7e8ea2cd6d2a3f3005d9f d097fcaaa1589c3fe973e2f4120aaf0ac1050b72724f15a6135e7d02bd6b8d0b
GET /image.tmdb.org/t/p/w300/b4gYVcl8pParX8AjkN90iQrWrWO.jpg?resize=300,450 HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 01:41:35 GMT
content-type: image/webp
content-length: 6652
last-modified: Sun, 04 Apr 2021 08:45:38 GMT
expires: Tue, 04 Apr 2023 20:45:38 GMT
cache-control: public, max-age=63115200
link: <http://image.tmdb.org/t/p/w300/b4gYVcl8pParX8AjkN90iQrWrWO.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "8bf501776e84cda1"
vary: Accept
x-nc: HIT arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash07b8296613be09905e34b09dce4a203f c97c67e8c4b1247423d089c028c31e05734f124e c8c7b7cd00d5818bbe4a4ddb1b734a1b766dc6474cce300171bd5a0947adc6b2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 01:41:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| i1.wp.com/image.tmdb.org/t/p/w300/duK11VQd4UPDa7UJrgrGx90xJOx.jpg?resize=300,450 | 192.0.77.2 | 200 OK | 19 kB |
URL HTTP/2i1.wp.com/image.tmdb.org/t/p/w300/duK11VQd4UPDa7UJrgrGx90xJOx.jpg?resize=300,450 IP192.0.77.2:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 300x450, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash77b3a672a3b5cbf1d73b3e9f38d76845 51b7381cde2493dadbcd7c5785e29653cf1440fd 4ce9c9a06c90d58fd8b01ecd7c7f3152f59dd3a7d7dc4d7950766b4b6727fde4
GET /image.tmdb.org/t/p/w300/duK11VQd4UPDa7UJrgrGx90xJOx.jpg?resize=300,450 HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 01:41:35 GMT
content-type: image/webp
content-length: 19336
last-modified: Thu, 15 Apr 2021 14:07:51 GMT
expires: Sun, 16 Apr 2023 02:07:51 GMT
cache-control: public, max-age=63115200
link: <http://image.tmdb.org/t/p/w300/duK11VQd4UPDa7UJrgrGx90xJOx.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "e208b3080d0647c5"
vary: Accept
x-nc: HIT arn 2
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| i1.wp.com/image.tmdb.org/t/p/w300/6vcDalR50RWa309vBH1NLmG2rjQ.jpg?resize=300,450 | 192.0.77.2 | 200 OK | 9.7 kB |
URL HTTP/2i1.wp.com/image.tmdb.org/t/p/w300/6vcDalR50RWa309vBH1NLmG2rjQ.jpg?resize=300,450 IP192.0.77.2:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 300x450, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash8a119e03763dc502493c3b1128eb3fc3 e5090c2d20f9cc7651a0e53c6310081f9c1a0e62 ee2b5f639c6f708d5d19d129e0ceff4d47d28817ef5f9aab7b7c928439c6cd12
GET /image.tmdb.org/t/p/w300/6vcDalR50RWa309vBH1NLmG2rjQ.jpg?resize=300,450 HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 01:41:35 GMT
content-type: image/webp
content-length: 9670
last-modified: Sat, 17 Apr 2021 16:24:09 GMT
expires: Tue, 18 Apr 2023 04:24:09 GMT
cache-control: public, max-age=63115200
link: <http://image.tmdb.org/t/p/w300/6vcDalR50RWa309vBH1NLmG2rjQ.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "804d0c58aef9adb8"
vary: Accept
x-nc: HIT arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash96ba40be4ad9ed57887bc3d9d39b9ee2 bd3b5d8943ab7741bfa5c18c8766013b80519424 19e5f58133b52dbd7ab629ad02f9a38ed2b69909b797ff3722f09fb811085362
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6206
Cache-Control: max-age=111788
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 01:41:35 GMT
Etag: "6385ae3d-117"
Expires: Thu, 01 Dec 2022 08:44:43 GMT
Last-Modified: Tue, 29 Nov 2022 07:01:17 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 279
|
|
| i1.wp.com/image.tmdb.org/t/p/w300/msI5a9TPnepx47JUb2vl88hb80R.jpg?resize=300,450 | 192.0.77.2 | 200 OK | 21 kB |
URL HTTP/2i1.wp.com/image.tmdb.org/t/p/w300/msI5a9TPnepx47JUb2vl88hb80R.jpg?resize=300,450 IP192.0.77.2:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 300x450, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash3663feb339ae0cdf7c3ddc46f3c9343f fee86d19c2c1dfcda2b3b6042f6bcab82f27776d b6f26e5047aefd05d5665b0abc5dc81019c81a1197483f6d009cbb53dcff5975
GET /image.tmdb.org/t/p/w300/msI5a9TPnepx47JUb2vl88hb80R.jpg?resize=300,450 HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 01:41:35 GMT
content-type: image/webp
content-length: 20976
last-modified: Wed, 31 Mar 2021 13:00:06 GMT
expires: Sat, 01 Apr 2023 01:00:06 GMT
cache-control: public, max-age=63115200
link: <http://image.tmdb.org/t/p/w300/msI5a9TPnepx47JUb2vl88hb80R.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "dad619008a004313"
vary: Accept
x-nc: HIT arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| i1.wp.com/image.tmdb.org/t/p/w300/h8Rb9gBr48ODIwYUttZNYeMWeUU.jpg?resize=300,450 | 192.0.77.2 | 200 OK | 30 kB |
URL HTTP/2i1.wp.com/image.tmdb.org/t/p/w300/h8Rb9gBr48ODIwYUttZNYeMWeUU.jpg?resize=300,450 IP192.0.77.2:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 300x450, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash422a6e30d0061f71f165a9c7629cf61d 1c22b6a9d7e4426b7ec9189ee678c0e16d3d435e 952cbd36f4cc6c7cf0cbcaa8d3b74df7ea3df71238f2487ce5156ced83e92186
GET /image.tmdb.org/t/p/w300/h8Rb9gBr48ODIwYUttZNYeMWeUU.jpg?resize=300,450 HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 01:41:35 GMT
content-type: image/webp
content-length: 30398
last-modified: Fri, 16 Apr 2021 21:13:21 GMT
expires: Mon, 17 Apr 2023 09:13:21 GMT
cache-control: public, max-age=63115200
link: <http://image.tmdb.org/t/p/w300/h8Rb9gBr48ODIwYUttZNYeMWeUU.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "1b3c40978f07fe83"
vary: Accept
x-nc: HIT arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| i1.wp.com/image.tmdb.org/t/p/w300/tnAuB8q5vv7Ax9UAEje5Xi4BXik.jpg?resize=300,450 | 192.0.77.2 | 200 OK | 22 kB |
URL HTTP/2i1.wp.com/image.tmdb.org/t/p/w300/tnAuB8q5vv7Ax9UAEje5Xi4BXik.jpg?resize=300,450 IP192.0.77.2:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 300x450, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash6ca1594545d5c7f2b41ada40d30150b3 149703fe206cd56fefcebc35b67bdb8b8aa8c75d 4e2bee3ee916aeb7b8a7e3642e4797b8971af56662d0a01d7e5696e3bc1f8956
GET /image.tmdb.org/t/p/w300/tnAuB8q5vv7Ax9UAEje5Xi4BXik.jpg?resize=300,450 HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 01:41:35 GMT
content-type: image/webp
content-length: 21508
last-modified: Wed, 03 Mar 2021 01:54:07 GMT
expires: Fri, 03 Mar 2023 13:54:07 GMT
cache-control: public, max-age=63115200
link: <http://image.tmdb.org/t/p/w300/tnAuB8q5vv7Ax9UAEje5Xi4BXik.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "a908ad21415aee00"
vary: Accept
x-nc: HIT arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| i1.wp.com/image.tmdb.org/t/p/w300/lPsD10PP4rgUGiGR4CCXA6iY0QQ.jpg?resize=300,450 | 192.0.77.2 | 200 OK | 24 kB |
URL HTTP/2i1.wp.com/image.tmdb.org/t/p/w300/lPsD10PP4rgUGiGR4CCXA6iY0QQ.jpg?resize=300,450 IP192.0.77.2:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 300x450, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash7d9cc67dacd0187701fd2d22f0017818 97b062b454d56c346a7a9a39532f49d1c3525cc6 4b059a798c75b1ef790cdb7912c8b8552c0d63580d6bb75e74c504f5bcba3ffd
GET /image.tmdb.org/t/p/w300/lPsD10PP4rgUGiGR4CCXA6iY0QQ.jpg?resize=300,450 HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 01:41:35 GMT
content-type: image/webp
content-length: 23532
last-modified: Sat, 09 Jan 2021 01:02:35 GMT
expires: Mon, 09 Jan 2023 13:02:35 GMT
cache-control: public, max-age=63115200
link: <http://image.tmdb.org/t/p/w300/lPsD10PP4rgUGiGR4CCXA6iY0QQ.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "88583ac70f7d7ae9"
vary: Accept
x-nc: HIT arn 4
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| i1.wp.com/image.tmdb.org/t/p/w300/dkokENeY5Ka30BFgWAqk14mbnGs.jpg?resize=300,450 | 192.0.77.2 | 200 OK | 13 kB |
URL HTTP/2i1.wp.com/image.tmdb.org/t/p/w300/dkokENeY5Ka30BFgWAqk14mbnGs.jpg?resize=300,450 IP192.0.77.2:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 300x450, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash05033a25184263ac705509a42cb8bf44 10d8fe575e6852c40b65ebbe18947127111eb21f 6c42e93d166cfa6cfaf33281e2b390f7b4b9f0def66170b0fb71f8122aeefa77
GET /image.tmdb.org/t/p/w300/dkokENeY5Ka30BFgWAqk14mbnGs.jpg?resize=300,450 HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 01:41:35 GMT
content-type: image/webp
content-length: 13358
last-modified: Sat, 10 Apr 2021 08:23:46 GMT
expires: Mon, 10 Apr 2023 20:23:46 GMT
cache-control: public, max-age=63115200
link: <http://image.tmdb.org/t/p/w300/dkokENeY5Ka30BFgWAqk14mbnGs.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "a47f197f05a08c56"
vary: Accept
x-nc: HIT arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js | 216.58.207.202 | 200 OK | 34 kB |
URL HTTP/2ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js IP216.58.207.202:0
File typeASCII text, with very long lines (32038) Hash103708790db3586027df27ded660f8ef d3f58fbe6e02cb4b8b34c6fd510e011cb325bc70 fdba876856bb6c2783df94cacb0f17b53fe33f1907135539272c0127b4270ffe
GET /ajax/libs/jquery/1.11.3/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33507
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 08:29:23 GMT
expires: Thu, 23 Nov 2023 08:29:23 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 580332
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| i1.wp.com/image.tmdb.org/t/p/w300/9kg73Mg8WJKlB9Y2SAJzeDKAnuB.jpg?resize=300,450 | 192.0.77.2 | 200 OK | 10 kB |
URL HTTP/2i1.wp.com/image.tmdb.org/t/p/w300/9kg73Mg8WJKlB9Y2SAJzeDKAnuB.jpg?resize=300,450 IP192.0.77.2:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 300x450, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash63af2b9b2cc410613d6eec455dedb4e3 52dc791bb3a669b62fbe273dc3e1994e1deb5cd4 90b4238b246ed28238c528776e6427a1d35db118fdf5ff6c15ad0cdf4e58885f
GET /image.tmdb.org/t/p/w300/9kg73Mg8WJKlB9Y2SAJzeDKAnuB.jpg?resize=300,450 HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 01:41:35 GMT
content-type: image/webp
content-length: 10056
last-modified: Sat, 20 Mar 2021 19:24:17 GMT
expires: Tue, 21 Mar 2023 07:24:17 GMT
cache-control: public, max-age=63115200
link: <http://image.tmdb.org/t/p/w300/9kg73Mg8WJKlB9Y2SAJzeDKAnuB.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "7f96c2e18a6c4ade"
vary: Accept
x-nc: HIT arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| i0.wp.com/image.tmdb.org/t/p/w300/grWS1nNexgCQacAIF6Um5PS5N5y.jpg?resize=300,450 | 192.0.77.2 | 200 OK | 4.5 kB |
URL HTTP/2i0.wp.com/image.tmdb.org/t/p/w300/grWS1nNexgCQacAIF6Um5PS5N5y.jpg?resize=300,450 IP192.0.77.2:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 300x450, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hashccbf433f5c46f5d29060bff84734c9b1 9019cfa32844d6c2b622dd41e6a27bd77f3c5017 37b0164b97b83e3f7add8a68a39c0e2940deaa377e7217a0cfc1bf38d00cdce6
GET /image.tmdb.org/t/p/w300/grWS1nNexgCQacAIF6Um5PS5N5y.jpg?resize=300,450 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 01:41:35 GMT
content-type: image/webp
content-length: 4548
last-modified: Thu, 28 Jul 2022 07:32:22 GMT
expires: Sat, 27 Jul 2024 19:32:22 GMT
cache-control: public, max-age=63115200
link: <http://image.tmdb.org/t/p/w300/grWS1nNexgCQacAIF6Um5PS5N5y.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "10c9bc9ae4a8d24b"
vary: Accept
x-nc: HIT arn 6
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| i0.wp.com/image.tmdb.org/t/p/w300/l2UWZATSJRwwwx6XUBHQ6jSt4Ka.jpg?resize=300,450 | 192.0.77.2 | 200 OK | 9.5 kB |
URL HTTP/2i0.wp.com/image.tmdb.org/t/p/w300/l2UWZATSJRwwwx6XUBHQ6jSt4Ka.jpg?resize=300,450 IP192.0.77.2:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 300x450, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash84bfa15100282b2073b83b8ed75b20c9 30d010f199b94394f8cc567e8d32d2504e0a24b2 8fe734340d1d12d1da2cd03d31e69a9acddcfafabe325476b36377f5662f3da6
GET /image.tmdb.org/t/p/w300/l2UWZATSJRwwwx6XUBHQ6jSt4Ka.jpg?resize=300,450 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 01:41:35 GMT
content-type: image/webp
content-length: 9492
last-modified: Wed, 25 Nov 2020 19:51:03 GMT
expires: Sat, 26 Nov 2022 07:51:03 GMT
cache-control: public, max-age=63115200
link: <http://image.tmdb.org/t/p/w300/l2UWZATSJRwwwx6XUBHQ6jSt4Ka.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "304533981d5d082b"
vary: Accept
x-nc: HIT arn 6
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash07b8296613be09905e34b09dce4a203f c97c67e8c4b1247423d089c028c31e05734f124e c8c7b7cd00d5818bbe4a4ddb1b734a1b766dc6474cce300171bd5a0947adc6b2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 01:41:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashcb1f999fe65295ec54f679c653b9ddbf 8f0376e89dc80451a0f654c35d7e0c430740839f f7e32163f4f44c06f60addf07add9c109a1fb82941e7608309f4ba69f4b2c972
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F7E32163F4F44C06F60ADDF07ADD9C109A1FB82941E7608309F4BA69F4B2C972"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4096
Expires: Wed, 30 Nov 2022 02:49:51 GMT
Date: Wed, 30 Nov 2022 01:41:35 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashcb1f999fe65295ec54f679c653b9ddbf 8f0376e89dc80451a0f654c35d7e0c430740839f f7e32163f4f44c06f60addf07add9c109a1fb82941e7608309f4ba69f4b2c972
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F7E32163F4F44C06F60ADDF07ADD9C109A1FB82941E7608309F4BA69F4B2C972"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4096
Expires: Wed, 30 Nov 2022 02:49:51 GMT
Date: Wed, 30 Nov 2022 01:41:35 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashcb1f999fe65295ec54f679c653b9ddbf 8f0376e89dc80451a0f654c35d7e0c430740839f f7e32163f4f44c06f60addf07add9c109a1fb82941e7608309f4ba69f4b2c972
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F7E32163F4F44C06F60ADDF07ADD9C109A1FB82941E7608309F4BA69F4B2C972"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4096
Expires: Wed, 30 Nov 2022 02:49:51 GMT
Date: Wed, 30 Nov 2022 01:41:35 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash3c8c689bd654417640d85f3da51af313 85123b6d46230a23d03768bf304b386e5d301305 516138ca79703b45e904d32d7dde1c1e9fd35995b9f1bb1331c547542745676d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3889
Cache-Control: public, max-age=1209600
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 01:41:35 GMT
Etag: "63866b9a-37"
Last-Modified: Tue, 29 Nov 2022 20:29:14 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
|
|
| image.tmdb.org/t/p/w300/juTJZCgNwcEeKtrxC6EygC2mKfJ.jpg?resize=300,450 |  138.199.36.11 | 200 OK | 28 kB |
URL HTTP/2image.tmdb.org/t/p/w300/juTJZCgNwcEeKtrxC6EygC2mKfJ.jpg?resize=300,450 IP138.199.36.11:0 ASN#60068 Datacamp Limited
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x450, components 3\012- data Hash5c7a364b643bb5638ad8bf5052239d5e de930867123c8ebf746c118111cad5c50b019000 b545e9163a9a780c5827deff1d8d62c10a0d8ad0d754b7380a57c49b3cd17ab4
GET /t/p/w300/juTJZCgNwcEeKtrxC6EygC2mKfJ.jpg?resize=300,450 HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:41:35 GMT
content-type: image/jpeg
content-length: 28308
server: BunnyCDN-DE1-1054
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "6272bfe7-6e94"
last-modified: Wed, 04 May 2022 18:03:19 GMT
cdn-storageserver: NY-267
cdn-requestpullsuccess: True
cdn-fileserver: 341
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/11/2022 02:42:34
cdn-edgestorageid: 1048
cdn-status: 200
cdn-requestid: da14b03d9627b145fb3bf6ce8c6fb267
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| image.tmdb.org/t/p/w300/jeGtaMwGxPmQN5xM4ClnwPQcNQz.jpg?resize=300,450 | 138.199.36.11 | 200 OK | 26 kB |
URL HTTP/2image.tmdb.org/t/p/w300/jeGtaMwGxPmQN5xM4ClnwPQcNQz.jpg?resize=300,450 IP138.199.36.11:0 ASN#60068 Datacamp Limited
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x450, components 3\012- data Hashc3ed7c4a5c0f3ab10de7058b112af07f 228d4b9e605f57efdb140532152e5b5a5022f8c8 6faa01fd8c9e71207fed7749326e43440a7bf2022ebcb7538506a09bc2e4333e
GET /t/p/w300/jeGtaMwGxPmQN5xM4ClnwPQcNQz.jpg?resize=300,450 HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:41:35 GMT
content-type: image/jpeg
content-length: 25503
server: BunnyCDN-DE1-1054
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "633ef1e5-639f"
last-modified: Thu, 06 Oct 2022 15:19:01 GMT
cdn-storageserver: NY-268
cdn-requestpullsuccess: True
cdn-fileserver: 354
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/22/2022 06:18:14
cdn-edgestorageid: 722
cdn-status: 200
cdn-requestid: e77dc424362fd391692d1b5a9c6d07db
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| image.tmdb.org/t/p/w300/o4osJO1dMVw91fA9yssbdoFBSZk.jpg?resize=300,450 | 138.199.36.11 | 200 OK | 23 kB |
URL HTTP/2image.tmdb.org/t/p/w300/o4osJO1dMVw91fA9yssbdoFBSZk.jpg?resize=300,450 IP138.199.36.11:0 ASN#60068 Datacamp Limited
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x450, components 3\012- data Hashb21a3636fd2eb3d52f870f7c3125ec6a a2b3cb6533ec74900938b0786f14be8228c97f43 c8db8be1e1b115efa7aed7e559ca9012824ee4707b164de6369eb1c415e2d475
GET /t/p/w300/o4osJO1dMVw91fA9yssbdoFBSZk.jpg?resize=300,450 HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:41:35 GMT
content-type: image/jpeg
content-length: 23106
server: BunnyCDN-DE1-1054
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "6272b626-5a42"
last-modified: Wed, 04 May 2022 17:21:42 GMT
cdn-storageserver: NY-430
cdn-requestpullsuccess: True
cdn-fileserver: 268
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/15/2022 10:30:19
cdn-edgestorageid: 1053
cdn-status: 200
cdn-requestid: 28141ede2030310380bfec0802dfe411
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| image.tmdb.org/t/p/w600_and_h900_bestv2/xx0qvqa38gnWLZJwFTHXFYCPBB8.jpg?resize=300,450 | 138.199.36.11 | 200 OK | 67 kB |
URL HTTP/2image.tmdb.org/t/p/w600_and_h900_bestv2/xx0qvqa38gnWLZJwFTHXFYCPBB8.jpg?resize=300,450 IP138.199.36.11:0 ASN#60068 Datacamp Limited
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x900, components 3\012- data Hashfccbc1d3d5c0110a7dc61fdcecc423be 12953617d9bf7acbbf42dd6bb8e5b8c5e6e14bcf e587608ffb29b518c180fa16157c3768aa854ba027636f17ac6b776e6bcbe83b
GET /t/p/w600_and_h900_bestv2/xx0qvqa38gnWLZJwFTHXFYCPBB8.jpg?resize=300,450 HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:41:35 GMT
content-type: image/jpeg
content-length: 66669
server: BunnyCDN-DE1-1054
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "6272b626-1046d"
last-modified: Wed, 04 May 2022 17:21:42 GMT
cdn-storageserver: NY-268
cdn-requestpullsuccess: True
cdn-fileserver: 268
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/11/2022 02:42:34
cdn-edgestorageid: 1048
cdn-status: 200
cdn-requestid: aecdd67499db74ac4f2b7a52bbd5e143
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash608e4d04a251ebcd51660e801f388303 fcb9aa48fd6ed504a1a9fed7990c5ccde63e6a1d cc1a34cd0a99e301df97cf184ab0ded2e229659f86f43e4eff479dee221695dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 01:41:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.35 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nculflix.xyz
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:33:54 GMT
expires: Thu, 23 Nov 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 540461
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 1.1 kB |
IP216.58.211.3:0
File typegzip compressed data, from Unix\012- data Hash0a850cb8ab548901262a7d8918f4038a 2a0c435fb58ed6b3b47d773d1e5bfe0420232684 ff5c2a6ebfc2c9c5622d12e1bda85d0432a771377e0a0e1e33e42f2eead104ef
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 01:41:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| push.services.mozilla.com/ | 54.202.70.174 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP54.202.70.174:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: eRf0DhlTG4WZDYC2hk+hPg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: huSYqG26AKyPhYvvTjrV+Rnj8ps=
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash5409c5c5cd98311ae4744b0c32ec510e 2043fee93a99a0bf78611754aa71f9d22f01fcf5 8281237871c6d75ccbe3c0d6b8029372d730272c3d61ddbab3d4ac52625a1999
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8281237871C6D75CCBE3C0D6B8029372D730272C3D61DDBAB3D4AC52625A1999"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4664
Expires: Wed, 30 Nov 2022 02:59:19 GMT
Date: Wed, 30 Nov 2022 01:41:35 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash002636678edf7001134180a3696f20ab e3e92ecd493e1409d7b69cbcda9f140952932e14 77c93bff152c6a6f98099dbc4243ddf6564c895a8358d1b65b69523afd64083b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "77C93BFF152C6A6F98099DBC4243DDF6564C895A8358D1B65B69523AFD64083B"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4615
Expires: Wed, 30 Nov 2022 02:58:30 GMT
Date: Wed, 30 Nov 2022 01:41:35 GMT
Connection: keep-alive
|
|
| pl17598976.highperformancecpmgate.com/66/18/05/661805d63d476fb9b73d6f7f66cdea67.js | 173.233.137.36 | 200 OK | 13 kB |
URL HTTP/1.1pl17598976.highperformancecpmgate.com/66/18/05/661805d63d476fb9b73d6f7f66cdea67.js IP173.233.137.36:0
File typeASCII text, with very long lines (37130), with no line terminators Hash2af3ea962bbd6267e5102d19bb63cf11 486464ed5d11af694ead76afcf0a997a2f550457 8f5b22fbcc40dce3e156ed13f078ec211dee4e864c49ca364ffc5e206442a3bc
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /66/18/05/661805d63d476fb9b73d6f7f66cdea67.js HTTP/1.1
Host: pl17598976.highperformancecpmgate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 30 Nov 2022 01:41:36 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 855233e6a52f84a4467a1109b931ac80
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| pl17598307.highperformancecpmgate.com/1c/30/72/1c3072954bc36085bd753a2e23ff1de8.js | 192.243.59.12 | 200 OK | 21 kB |
URL HTTP/1.1pl17598307.highperformancecpmgate.com/1c/30/72/1c3072954bc36085bd753a2e23ff1de8.js IP192.243.59.12:0 ASN#39572 DataWeb Global Group B.V.
File typeHTML document, ASCII text, with very long lines (60171), with no line terminators Hashf7e54d276351cfa82852eed19664a2d6 bde8f5d7d25595754d1c3ec6345e2f4a865a2a0f 27d1fa6cfcf191973f29479717c20de08b427efbd5fa0404452376cccbf58fb3
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /1c/30/72/1c3072954bc36085bd753a2e23ff1de8.js HTTP/1.1
Host: pl17598307.highperformancecpmgate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Wed, 30 Nov 2022 01:41:36 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: db97e4099f0659f6641e37f0b3695139
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.5/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 10 kB |
URL HTTP/2maxcdn.bootstrapcdn.com/bootstrap/3.3.5/js/bootstrap.min.js IP104.18.10.207:0
File typeASCII text, with very long lines (32034) Hash878e7a51f9275b4eb1f1acc3da53b1b7 4799d86d636944b3274ed8c0dbc69cd5501f53d0 084f85d4c18e08be9515ff7b93cd1a204878aa86104ac15183c418c149a44adf
GET /bootstrap/3.3.5/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:41:35 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: SE
cdn-edgestorageid: 601, 718, 718
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 2021-04-23 06:48:47
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 39b7a4107ac99785daf3883d73227d5f
cdn-cache: HIT
cf-cache-status: HIT
age: 17882815
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 771fe1b05fb9b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 142.250.74.35 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nculflix.xyz
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:34:15 GMT
expires: Thu, 23 Nov 2023 19:34:15 GMT
cache-control: public, max-age=31536000
age: 540441
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.5/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 21 kB |
URL HTTP/2maxcdn.bootstrapcdn.com/bootstrap/3.3.5/css/bootstrap.min.css IP104.18.10.207:0
File typeASCII text, with very long lines (65371) Hash5ffe9387a6f530ca6c0efa85adceb11e c7e643b2a0c20e5309d363db475386614b7bcdf6 0a3f195d8c1475c7c4e3ef40bb41621e309ba8f133f1bf0244c127cf1d9846b4
GET /bootstrap/3.3.5/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:41:35 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"5d5357cb3704e1f43a1f5bfed2aebf42"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 02/24/2022 14:58:46
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 864
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: fbe7e6fea753e22c4e1fd8ba1cf2b066
cdn-cache: HIT
cf-cache-status: HIT
age: 15221881
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 771fe1b03fadb511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.156 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.156:0
Hash6d4aa81497d78e8890f1833dfd810f3b 1a661b0ea7a2272d32a364d110f8b2525a13a72a c3127cd2765f7a80a75f4000fbbd0680b93a944448f0260b6c4a1dd6b041bbfa
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=133880
Date: Wed, 30 Nov 2022 01:41:36 GMT
Etag: "63860997-1d7"
Expires: Thu, 01 Dec 2022 14:52:56 GMT
Last-Modified: Tue, 29 Nov 2022 13:31:03 GMT
Server: ECS (nyb/1D17)
X-Cache: Miss from cloudfront
Via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Gw5io65xUkwvCggjw7upiGaNIDWH0flOXBEDcucvMmdUuwrL910QXg==
Age: 4913
|
|
| fonts.googleapis.com/css?family=Roboto:400,500,700 | 142.250.74.106 | 200 OK | 679 B |
URL HTTP/2fonts.googleapis.com/css?family=Roboto:400,500,700 IP142.250.74.106:0
Hash16b6122217c207a8d1a53ed32013a888 dbdfd4f4fd27d0a706412c3f74861dca1af1d1b8 cb4dce99434bfaeac52c5b8f11c5314a3cb1cb6f664a219e606e6f1242b5de4d
GET /css?family=Roboto:400,500,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 30 Nov 2022 01:41:35 GMT
date: Wed, 30 Nov 2022 01:41:35 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| simplewebanalysis.com/stats | 52.28.211.11 | 200 OK | 40 B |
URL HTTP/2simplewebanalysis.com/stats IP52.28.211.11:0
File typeASCII text, with no line terminators Hashabe72f52b5f8ceb6636441f4382a3dba 27ea1a18e3cd3489cf1bc1a9aa7e22002b142db6 52bc73ce071ef318017c23c487846d2c746cf815e56bc6710dc38e4c3aa0802f
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nculflix.xyz
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:41:36 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://nculflix.xyz
access-control-allow-credentials: true
set-cookie: uid_id2=27fca8ec-ff40-4351-932d-d2e46ee34763:2:1; expires=Sat, 27 Nov 2032 01:41:36 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| e1.o.lencr.org/ | 95.101.11.115 | 200 OK | 346 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash635eba2ec841f80118a858a94bb84ff5 591895548f1f166a16c790740656cb194d0f7760 d2e62fd34b70872cb8f68cd1fdae7f1476019968f63accab24e4d822933c07ff
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "D2E62FD34B70872CB8F68CD1FDAE7F1476019968F63ACCAB24E4D822933C07FF"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12597
Expires: Wed, 30 Nov 2022 05:11:33 GMT
Date: Wed, 30 Nov 2022 01:41:36 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash615f4e349624a6eb497b540aa4047451 e3bd3ebe01b3b8b6f0a96a86c261e500a8961356 e4f957271db176467a461db0bd87ac1b8adeac7f1948ef5ff3479c29df085b5d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E4F957271DB176467A461DB0BD87AC1B8ADEAC7F1948EF5FF3479C29DF085B5D"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9240
Expires: Wed, 30 Nov 2022 04:15:36 GMT
Date: Wed, 30 Nov 2022 01:41:36 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash5946293de07f462acaf7911368fa2fcb 7c48a92efee86c367eb3f6d6c21e0bde5a45ac9a 815b297511094288f745f230c7f3cb097f8f823c9cf67de63713aeceaf98d356
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "815B297511094288F745F230C7F3CB097F8F823C9CF67DE63713AECEAF98D356"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5208
Expires: Wed, 30 Nov 2022 03:08:24 GMT
Date: Wed, 30 Nov 2022 01:41:36 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash5946293de07f462acaf7911368fa2fcb 7c48a92efee86c367eb3f6d6c21e0bde5a45ac9a 815b297511094288f745f230c7f3cb097f8f823c9cf67de63713aeceaf98d356
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "815B297511094288F745F230C7F3CB097F8F823C9CF67DE63713AECEAF98D356"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5208
Expires: Wed, 30 Nov 2022 03:08:24 GMT
Date: Wed, 30 Nov 2022 01:41:36 GMT
Connection: keep-alive
|
|
| s10.histats.com/js15_as.js |  46.105.201.240 | 200 OK | 4.4 kB |
URL HTTP/2s10.histats.com/js15_as.js IP46.105.201.240:0
File typeHTML document, ASCII text, with very long lines (11440), with no line terminators Hashed192092c129db6123a3397855f42619 067e9b8e26cf6246eb84c6b9cf3da0c192ce7b3e 998fff486a7fb38b6ed445edc36c9b317b70950cd39efcf4012ca641312fcee1
GET /js15_as.js HTTP/1.1
Host: s10.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:34:58 GMT
etag: "-375139978"
last-modified: Thu, 16 Apr 2020 10:44:16 GMT
x-request-id: 510329021
content-type: application/javascript; charset=UTF-8
content-encoding: br
x-cdn-pop: sbg
x-cdn-pop-ip: 137.74.120.0/27
x-cacheable: Matched cache
accept-ranges: bytes
content-length: 4364
X-Firefox-Spdy: h2
|
|
| tractorfoolproofstandard.com/pixel/purst?dl=0&th=0&sc=0&rs=1792&rd=1792&fd=1023&bv=22.10.v.9&tmpl=70 | 192.243.59.13 | 200 OK | 0 B |
URL HTTP/1.1tractorfoolproofstandard.com/pixel/purst?dl=0&th=0&sc=0&rs=1792&rd=1792&fd=1023&bv=22.10.v.9&tmpl=70 IP192.243.59.13:0 ASN#39572 DataWeb Global Group B.V.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /pixel/purst?dl=0&th=0&sc=0&rs=1792&rd=1792&fd=1023&bv=22.10.v.9&tmpl=70 HTTP/1.1
Host: tractorfoolproofstandard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Wed, 30 Nov 2022 01:41:36 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| s10.histats.com/counters/cc_511.js | 46.105.201.240 | 200 OK | 6.0 kB |
URL HTTP/2s10.histats.com/counters/cc_511.js IP46.105.201.240:0
File typeHTML document, ASCII text, with very long lines (14926), with no line terminators Hashe0963faf9f8d4dd4683c649033bfe3e6 8b8365dac8c2d50836e19456f025370ee782598f 80ac8877a54d16e397e9518ce7221d0abad87a39ffd0221a99227540eeb8b2a8
GET /counters/cc_511.js HTTP/1.1
Host: s10.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:35:34 GMT
etag: "1364484781"
last-modified: Thu, 16 Apr 2020 10:45:32 GMT
x-request-id: 551519292
content-type: application/javascript; charset=UTF-8
content-encoding: br
x-cdn-pop: sbg
x-cdn-pop-ip: 137.74.120.0/27
x-cacheable: Matched cache
accept-ranges: bytes
content-length: 5984
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash1090dbbb81ab80f806d58bbeddd76959 62111da0fbbd30a06b4387315f6b39c4754dbfe9 3b77824cbf0eeb7c14e8a02213aade8964964a40a53d583d780ea2b9554efb8c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3B77824CBF0EEB7C14E8A02213AADE8964964A40A53D583D780EA2B9554EFB8C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3270
Expires: Wed, 30 Nov 2022 02:36:06 GMT
Date: Wed, 30 Nov 2022 01:41:36 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash0e3715eedd8e6500e3c5b107da5cacbc 8967db89fffacb6f8ab57c2fa408634f02fa2440 3fb9445ec8391ec7596b82a48a1379784480abdd9362cb887c59ffb1606d4ab9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3FB9445EC8391EC7596B82A48A1379784480ABDD9362CB887C59FFB1606D4AB9"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5515
Expires: Wed, 30 Nov 2022 03:13:32 GMT
Date: Wed, 30 Nov 2022 01:41:37 GMT
Connection: keep-alive
|
|
| banquetunarmedgrater.com/advertisers.js | 173.233.137.44 | 200 OK | 0 B |
URL HTTP/1.1banquetunarmedgrater.com/advertisers.js IP173.233.137.44:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /advertisers.js HTTP/1.1
Host: banquetunarmedgrater.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 30 Nov 2022 01:41:37 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: cfba36ef2821be08da994db0c81233e8
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashac3edd07bb0a4ebdaae6ec26e91d2079 b6efe3811dfa37cdcde1e9d411c171732ac7e12a c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12009
Expires: Wed, 30 Nov 2022 05:01:46 GMT
Date: Wed, 30 Nov 2022 01:41:37 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashac3edd07bb0a4ebdaae6ec26e91d2079 b6efe3811dfa37cdcde1e9d411c171732ac7e12a c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12009
Expires: Wed, 30 Nov 2022 05:01:46 GMT
Date: Wed, 30 Nov 2022 01:41:37 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashac3edd07bb0a4ebdaae6ec26e91d2079 b6efe3811dfa37cdcde1e9d411c171732ac7e12a c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12009
Expires: Wed, 30 Nov 2022 05:01:46 GMT
Date: Wed, 30 Nov 2022 01:41:37 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13e1db4e-7108-464a-85b6-24ac0c4609f9.webp | 34.120.237.76 | 200 OK | 9.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13e1db4e-7108-464a-85b6-24ac0c4609f9.webp IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashbbe350ea797a0fec5a19a450fc5de4b4 2f3a39a528d3b759060203931de33c12303592e1 4d661dac2e19e07ae15d0f8cf00bd268c6c2defb2f5e4de38fcb6e7031dfd605
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13e1db4e-7108-464a-85b6-24ac0c4609f9.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9330
x-amzn-requestid: 3fad352d-7664-43e0-9395-e840f671ca61
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgFQFIdoAMFSmw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a21-5e9847852f8435231d401fe6;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: mCEtSOenWKxay4vNy5mN9cexxXKXKt7TMuLaLw-M86tLKwQ2MwuxPg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 22:00:54 GMT
age: 13243
etag: "2f3a39a528d3b759060203931de33c12303592e1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2730750-552d-4852-8ce1-503874565f75.jpeg | 34.120.237.76 | 200 OK | 9.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2730750-552d-4852-8ce1-503874565f75.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash05196ec43964cf559caa0c0279148d62 6170d6776615503e3e29f86783febc3e3e78ca66 47f3a5cde661987e3496ce110a0170b10087dd9ba8d4fd691c4830587ba3fa3f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2730750-552d-4852-8ce1-503874565f75.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9051
x-amzn-requestid: 1032dd9c-a15e-4e8a-9c81-07419e8caf67
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYhGvEMNIAMFaKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867bc4-1005c20a33320dbf6567ca31;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:38:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: IMaVlQblNnh9mFKwb2LG7hw7h_f1_nVYqO4aEUqY01a2HofnnQqcFQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:49:31 GMT
age: 13926
etag: "6170d6776615503e3e29f86783febc3e3e78ca66"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg | 34.120.237.76 | 200 OK | 9.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash5508d05a290b663fd89ead9b58f2efd8 53650399f9a986ba54addd668b4557109d12003b 65704a961410fdd318c491fedf002c8e9b184cd34b76fe1b67026d42ce21be3f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9674
x-amzn-requestid: 7e7d0183-9667-462a-8d44-d125998c1ae3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgEoHVAoAMFvAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a1d-280ba97e3fe1bf7244cbde35;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ym_L3s5E6MLy6BxqNkVxok6L6hA4c-ilSsEqt42j2IbiXYPb4c6-VQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:52:51 GMT
age: 13726
etag: "53650399f9a986ba54addd668b4557109d12003b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2fcfcea6-8f79-45f4-b081-2b90a5d95f8f.jpeg | 34.120.237.76 | 200 OK | 5.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2fcfcea6-8f79-45f4-b081-2b90a5d95f8f.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashacb1e555533322dbfeb8e0d8c956c43d e1eec39299f081b53c647953b57da4f2f1ba10bc 579d2fd6aab6bba72a405bb1d0259856878adc90671a88b2b0edf5a284dba1f9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2fcfcea6-8f79-45f4-b081-2b90a5d95f8f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5492
x-amzn-requestid: 4b09d9a8-09fa-40e5-a996-8a6ad9f8283e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgE9E5TIAMF6ug=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a1f-2f17467d7a6318796d01fd2e;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:11 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 6QhRECWKI2TAlt2bgVuKlQPCeyzkes1_5i5kJ4FQYD591KBADY9qVg==
via: 1.1 42ef990e439ae115ff739f04e3945234.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:52:45 GMT
age: 13732
etag: "e1eec39299f081b53c647953b57da4f2f1ba10bc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4f88ec5-5875-45d1-bcd3-d997040d6d42.jpeg | 34.120.237.76 | 200 OK | 3.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4f88ec5-5875-45d1-bcd3-d997040d6d42.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashceb8e975fb408de32c43f55febaa6414 453067f6ab356aa87a3ad3b56e33545376597852 e0ecbb6052b4fef75f58da8dae589c81ab9ec9d304de08f26c144a2c3ce9eaac
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4f88ec5-5875-45d1-bcd3-d997040d6d42.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3719
x-amzn-requestid: 6fab3454-fedd-4a1e-ae47-468ddd6233bc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgDaGQ4IAMFUkQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a15-4b313cf054d6301e71cdc0c1;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: phw8DXQgjOyH5g4gvbqgZk-2sHr2n9cHVr4lqqPXfXtyhG32gs2pIg==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:52:45 GMT
age: 13732
etag: "453067f6ab356aa87a3ad3b56e33545376597852"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52cf4797-5177-4859-9523-faeb4e38f224.jpeg | 34.120.237.76 | 200 OK | 9.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52cf4797-5177-4859-9523-faeb4e38f224.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash5c5277610f3a542571abb53ffb3d4df1 ce411cc5b0a37bbd89551d06d7d0349f45734e97 3bf1105631ef7fda0249a46390ca90f904ea73b0a4f017c2db85326550a80a3f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52cf4797-5177-4859-9523-faeb4e38f224.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9812
x-amzn-requestid: 70bfeb68-0703-44bf-8550-50c759d52d86
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgDbFolIAMFYBQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a15-73fb65ee2b9161372819207f;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QQCoNlJBSE2V-IQlZr37dhINTABRu3ms9Y1p4FweO36HD-U6m9vvwg==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:52:45 GMT
age: 13732
etag: "ce411cc5b0a37bbd89551d06d7d0349f45734e97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| s4.histats.com/stats/0.php?4719165&@f16&@g0&@h2&@i1&@j1669772495658&@k7&@l2&@mWatch%20Wednesday%20Full%20Movie%20on%20123Movies%20on%20nculflix&@n0&@o1000&@q0&@r0&@s511&@ten-US&@u1280&@b1:115811523&@b3:1669772496&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fnculflix.xyz%2Ftv%2F119051%2Fwednesday.html%3F%2FWATCH.FULL.VIDEOs.%3D&@w |  149.56.240.132 | 200 OK | 47 B |
URL HTTP/1.1s4.histats.com/stats/0.php?4719165&@f16&@g0&@h2&@i1&@j1669772495658&@k7&@l2&@mWatch%20Wednesday%20Full%20Movie%20on%20123Movies%20on%20nculflix&@n0&@o1000&@q0&@r0&@s511&@ten-US&@u1280&@b1:115811523&@b3:1669772496&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fnculflix.xyz%2Ftv%2F119051%2Fwednesday.html%3F%2FWATCH.FULL.VIDEOs.%3D&@w IP149.56.240.132:0
File typeASCII text, with no line terminators Hash06b05ae9614bafae9b0b09cfbeed559e 9b087683529b7b89a117b2d5cbb35a93e7dcbaca a60692031ce09be66be89784e8b0214c0f8b6f52cd8fd6a36129a635ffe41ad2
GET /stats/0.php?4719165&@f16&@g0&@h2&@i1&@j1669772495658&@k7&@l2&@mWatch%20Wednesday%20Full%20Movie%20on%20123Movies%20on%20nculflix&@n0&@o1000&@q0&@r0&@s511&@ten-US&@u1280&@b1:115811523&@b3:1669772496&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fnculflix.xyz%2Ftv%2F119051%2Fwednesday.html%3F%2FWATCH.FULL.VIDEOs.%3D&@w HTTP/1.1
Host: s4.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:41:37 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 47
Connection: close
|
|
| s4.histats.com/stats/0.php?4719165&@f16&@g1&@h1&@i1&@j1669772495651&@k0&@l1&@mWatch%20Wednesday%20Full%20Movie%20on%20123Movies%20on%20nculflix&@n0&@o1000&@q0&@r0&@s511&@ten-US&@u1280&@b1:121293493&@b3:1669772496&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fnculflix.xyz%2Ftv%2F119051%2Fwednesday.html%3F%2FWATCH.FULL.VIDEOs.%3D&@w | 149.56.240.132 | 200 OK | 47 B |
URL HTTP/1.1s4.histats.com/stats/0.php?4719165&@f16&@g1&@h1&@i1&@j1669772495651&@k0&@l1&@mWatch%20Wednesday%20Full%20Movie%20on%20123Movies%20on%20nculflix&@n0&@o1000&@q0&@r0&@s511&@ten-US&@u1280&@b1:121293493&@b3:1669772496&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fnculflix.xyz%2Ftv%2F119051%2Fwednesday.html%3F%2FWATCH.FULL.VIDEOs.%3D&@w IP149.56.240.132:0
File typeASCII text, with no line terminators Hash06b05ae9614bafae9b0b09cfbeed559e 9b087683529b7b89a117b2d5cbb35a93e7dcbaca a60692031ce09be66be89784e8b0214c0f8b6f52cd8fd6a36129a635ffe41ad2
GET /stats/0.php?4719165&@f16&@g1&@h1&@i1&@j1669772495651&@k0&@l1&@mWatch%20Wednesday%20Full%20Movie%20on%20123Movies%20on%20nculflix&@n0&@o1000&@q0&@r0&@s511&@ten-US&@u1280&@b1:121293493&@b3:1669772496&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fnculflix.xyz%2Ftv%2F119051%2Fwednesday.html%3F%2FWATCH.FULL.VIDEOs.%3D&@w HTTP/1.1
Host: s4.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:41:37 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 47
Connection: close
|
|
| s4.histats.com/stats/0.php?4719165&@f16&@g0&@h2&@i1&@j1669772495658&@k7&@l2&@mWatch%20Wednesday%20Full%20Movie%20on%20123Movies%20on%20nculflix&@n0&@o1000&@q0&@r0&@s511&@ten-US&@u1280&@b1:-121161470&@b3:1669772496&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fnculflix.xyz%2Ftv%2F119051%2Fwednesday.html%3F%2FWATCH.FULL.VIDEOs.%3D&@w | 149.56.240.132 | 200 OK | 47 B |
URL HTTP/1.1s4.histats.com/stats/0.php?4719165&@f16&@g0&@h2&@i1&@j1669772495658&@k7&@l2&@mWatch%20Wednesday%20Full%20Movie%20on%20123Movies%20on%20nculflix&@n0&@o1000&@q0&@r0&@s511&@ten-US&@u1280&@b1:-121161470&@b3:1669772496&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fnculflix.xyz%2Ftv%2F119051%2Fwednesday.html%3F%2FWATCH.FULL.VIDEOs.%3D&@w IP149.56.240.132:0
File typeASCII text, with no line terminators Hash06b05ae9614bafae9b0b09cfbeed559e 9b087683529b7b89a117b2d5cbb35a93e7dcbaca a60692031ce09be66be89784e8b0214c0f8b6f52cd8fd6a36129a635ffe41ad2
GET /stats/0.php?4719165&@f16&@g0&@h2&@i1&@j1669772495658&@k7&@l2&@mWatch%20Wednesday%20Full%20Movie%20on%20123Movies%20on%20nculflix&@n0&@o1000&@q0&@r0&@s511&@ten-US&@u1280&@b1:-121161470&@b3:1669772496&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fnculflix.xyz%2Ftv%2F119051%2Fwednesday.html%3F%2FWATCH.FULL.VIDEOs.%3D&@w HTTP/1.1
Host: s4.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:41:37 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 47
Connection: close
|
|
| s4.histats.com/stats/0.php?4719165&@f16&@g1&@h1&@i1&@j1669772495651&@k0&@l1&@mWatch%20Wednesday%20Full%20Movie%20on%20123Movies%20on%20nculflix&@n0&@o1000&@q0&@r0&@s511&@ten-US&@u1280&@b1:182203667&@b3:1669772496&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fnculflix.xyz%2Ftv%2F119051%2Fwednesday.html%3F%2FWATCH.FULL.VIDEOs.%3D&@w | 149.56.240.132 | 200 OK | 47 B |
URL HTTP/1.1s4.histats.com/stats/0.php?4719165&@f16&@g1&@h1&@i1&@j1669772495651&@k0&@l1&@mWatch%20Wednesday%20Full%20Movie%20on%20123Movies%20on%20nculflix&@n0&@o1000&@q0&@r0&@s511&@ten-US&@u1280&@b1:182203667&@b3:1669772496&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fnculflix.xyz%2Ftv%2F119051%2Fwednesday.html%3F%2FWATCH.FULL.VIDEOs.%3D&@w IP149.56.240.132:0
File typeASCII text, with no line terminators Hash06b05ae9614bafae9b0b09cfbeed559e 9b087683529b7b89a117b2d5cbb35a93e7dcbaca a60692031ce09be66be89784e8b0214c0f8b6f52cd8fd6a36129a635ffe41ad2
GET /stats/0.php?4719165&@f16&@g1&@h1&@i1&@j1669772495651&@k0&@l1&@mWatch%20Wednesday%20Full%20Movie%20on%20123Movies%20on%20nculflix&@n0&@o1000&@q0&@r0&@s511&@ten-US&@u1280&@b1:182203667&@b3:1669772496&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fnculflix.xyz%2Ftv%2F119051%2Fwednesday.html%3F%2FWATCH.FULL.VIDEOs.%3D&@w HTTP/1.1
Host: s4.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 01:41:37 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 47
Connection: close
|
|
| wastedinvaluable.com/sbar.json?key=661805d63d476fb9b73d6f7f66cdea67&uuid=f1f4a48a-4ea5-4b20-b579-93edb5e5df47%3A2%3A1 | 173.233.137.52 | 200 OK | 4.3 kB |
URL HTTP/1.1wastedinvaluable.com/sbar.json?key=661805d63d476fb9b73d6f7f66cdea67&uuid=f1f4a48a-4ea5-4b20-b579-93edb5e5df47%3A2%3A1 IP173.233.137.52:0
File typeJSON data\012- , ASCII text, with very long lines (5927), with no line terminators Hash90c4997dd0bc3006f3f13b9d3f936edd 3cadcbd19051a034fb691aa2c526f1cd5f0a64ad 9bdfad571b67c0cf0d3b04ef3406b9008fd46dc7c4f79804b349c419ad816316
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /sbar.json?key=661805d63d476fb9b73d6f7f66cdea67&uuid=f1f4a48a-4ea5-4b20-b579-93edb5e5df47%3A2%3A1 HTTP/1.1
Host: wastedinvaluable.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nculflix.xyz
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 30 Nov 2022 01:41:37 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://nculflix.xyz
Access-Control-Allow-Origin: https://nculflix.xyz
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=17498477; expires=Thu, 01 Dec 2022 01:41:37 GMT; secure; SameSite=None
uid_id2=f1f4a48a-4ea5-4b20-b579-93edb5e5df47:2:1; expires=Wed, 07 Dec 2022 01:41:37 GMT; secure; SameSite=None
pdhtkv=true; expires=Thu, 01 Dec 2022 01:41:37 GMT; secure; SameSite=None
uncs=1; expires=Thu, 01 Dec 2022 01:41:37 GMT; secure; SameSite=None
pdhtkv29=true; expires=Thu, 01 Dec 2022 01:41:37 GMT; secure; SameSite=None
uncs29=1; expires=Thu, 01 Dec 2022 01:41:37 GMT; secure; SameSite=None
slec661805d63d476fb9b73d6f7f66cdea67=[3789942]; expires=Wed, 30 Nov 2022 01:41:42 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d53b61aece148511a7947a12c8767249
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| wastedinvaluable.com/ren.gif?sid=H4sIAAAAAAAC%2F1SST2gkRRTGq3fjH9yT4kVkZQ6LKJhJ90z3%2FHEPwbhGgjEJuyu5WtVVPSlT3dVUdU9P5hRdCIunES8eO98kG9QgLniVlYkHJSBkFCTI5u5NXNizTDIQfId%2B7%2FXvHd73vdrZzc%2BIi5yern2o%2B1IpOhdU3cob6zLhurCVlbsVz626NyvrMmn4Nyu9ycd03%2FbcoOq%2BWXlfhJt6ruZ6ruu5XmVRGhHp3tw5hUwP21617Vb9WtULfPTM%2F3ubO7DUAe%2BekZcg%2BfiZjV8fQoYjJPH3t4TdzHT61ntxrmimDbr84KNkM9FFgviyjIyDKDmYTkPbMSFfXYFODqYKoLt7EwVgckycPz2w5GC6Jlh3%2F2JTpiASMH4NRXcEoUaQdIRQ34PkJwQIOVZWkcQPVrQp6NYFpRM6JjNPn0AWYzLz%2BGUk8XcLSvYqd7TKM6kTi15UQvZGkJ0R0vwIWd%2BBLI4QZp9B8t%2FI3NNlJPHeqlUakp%2FeiLzIp36LzvqCBrM%2Bq7mzLGi2Z9t1wVkgAh75zXOLpBxBRiMoMQC1V5BbB7l0kEcO8tRBzE8rNGhHrtuMWFSvt%2FwwDOv1MAxaDR7wut%2BKXOThRMMAWTpAqAYIzTZSs41NOYDJf4LdKGG5A5sRdHmJQhAUlqCgBIUkKDKColvuc2VrtnzAlc2ZN821aa6XQ511dum%2BzjoiIbvpGXlxYpxzzYmxKU4rjYbXcgPeqHO%2F2YhYmzXrvBE1o0Yj5II2mrCyhLRXQK2DvhyT6%2FlVpHJMnvvyFzB6BKuOEEoHNL8OWgybNRd0Y%2Bi3XPSTwyTMVaRkr9rb6oPrEmk2g2zL2VVn5JXzA7b%2F6EKEx%2FNPPn32xuO5VxGaEqkp8Yn8maCj7g9v64Ls3daFJQ9X00zGsk8nx72T0UzMfPOB2Cq04Uu37ODrd8IJmJSHd4XNlmnCZdKx5NsFybkwi9qEgvy4ZNcFW8vtxkJukjxdXnt3cSlOjbBW6mQEKk8%2BfoRQjskL8c75s33tr88hzQgmLxHnx2QakPoIYboNmx7P%2F3v4vPf631uwmsCoyxmWOijycmhq7PKnkgRKXPaUlbDi0gImjh%2F9c8F27X10jAOa3UMSl%2BiaEl1VgqoBbH51mKXmeP73%2BnmAKWfIlHH2mDLqiwtrrTytiCByI%2BHWBIvaLGpSl7cjv81o2xNNFlAPmR2HOz%2Bc%2FAcAAP%2F%2FAQAA%2F%2F82BFG%2BjgQAAA%3D%3D | 173.233.137.52 | 200 OK | 7 B |
URL HTTP/1.1wastedinvaluable.com/ren.gif?sid=H4sIAAAAAAAC%2F1SST2gkRRTGq3fjH9yT4kVkZQ6LKJhJ90z3%2FHEPwbhGgjEJuyu5WtVVPSlT3dVUdU9P5hRdCIunES8eO98kG9QgLniVlYkHJSBkFCTI5u5NXNizTDIQfId%2B7%2FXvHd73vdrZzc%2BIi5yern2o%2B1IpOhdU3cob6zLhurCVlbsVz626NyvrMmn4Nyu9ycd03%2FbcoOq%2BWXlfhJt6ruZ6ruu5XmVRGhHp3tw5hUwP21617Vb9WtULfPTM%2F3ubO7DUAe%2BekZcg%2BfiZjV8fQoYjJPH3t4TdzHT61ntxrmimDbr84KNkM9FFgviyjIyDKDmYTkPbMSFfXYFODqYKoLt7EwVgckycPz2w5GC6Jlh3%2F2JTpiASMH4NRXcEoUaQdIRQ34PkJwQIOVZWkcQPVrQp6NYFpRM6JjNPn0AWYzLz%2BGUk8XcLSvYqd7TKM6kTi15UQvZGkJ0R0vwIWd%2BBLI4QZp9B8t%2FI3NNlJPHeqlUakp%2FeiLzIp36LzvqCBrM%2Bq7mzLGi2Z9t1wVkgAh75zXOLpBxBRiMoMQC1V5BbB7l0kEcO8tRBzE8rNGhHrtuMWFSvt%2FwwDOv1MAxaDR7wut%2BKXOThRMMAWTpAqAYIzTZSs41NOYDJf4LdKGG5A5sRdHmJQhAUlqCgBIUkKDKColvuc2VrtnzAlc2ZN821aa6XQ511dum%2BzjoiIbvpGXlxYpxzzYmxKU4rjYbXcgPeqHO%2F2YhYmzXrvBE1o0Yj5II2mrCyhLRXQK2DvhyT6%2FlVpHJMnvvyFzB6BKuOEEoHNL8OWgybNRd0Y%2Bi3XPSTwyTMVaRkr9rb6oPrEmk2g2zL2VVn5JXzA7b%2F6EKEx%2FNPPn32xuO5VxGaEqkp8Yn8maCj7g9v64Ls3daFJQ9X00zGsk8nx72T0UzMfPOB2Cq04Uu37ODrd8IJmJSHd4XNlmnCZdKx5NsFybkwi9qEgvy4ZNcFW8vtxkJukjxdXnt3cSlOjbBW6mQEKk8%2BfoRQjskL8c75s33tr88hzQgmLxHnx2QakPoIYboNmx7P%2F3v4vPf631uwmsCoyxmWOijycmhq7PKnkgRKXPaUlbDi0gImjh%2F9c8F27X10jAOa3UMSl%2BiaEl1VgqoBbH51mKXmeP73%2BnmAKWfIlHH2mDLqiwtrrTytiCByI%2BHWBIvaLGpSl7cjv81o2xNNFlAPmR2HOz%2Bc%2FAcAAP%2F%2FAQAA%2F%2F82BFG%2BjgQAAA%3D%3D IP173.233.137.52:0
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /ren.gif?sid=H4sIAAAAAAAC%2F1SST2gkRRTGq3fjH9yT4kVkZQ6LKJhJ90z3%2FHEPwbhGgjEJuyu5WtVVPSlT3dVUdU9P5hRdCIunES8eO98kG9QgLniVlYkHJSBkFCTI5u5NXNizTDIQfId%2B7%2FXvHd73vdrZzc%2BIi5yern2o%2B1IpOhdU3cob6zLhurCVlbsVz626NyvrMmn4Nyu9ycd03%2FbcoOq%2BWXlfhJt6ruZ6ruu5XmVRGhHp3tw5hUwP21617Vb9WtULfPTM%2F3ubO7DUAe%2BekZcg%2BfiZjV8fQoYjJPH3t4TdzHT61ntxrmimDbr84KNkM9FFgviyjIyDKDmYTkPbMSFfXYFODqYKoLt7EwVgckycPz2w5GC6Jlh3%2F2JTpiASMH4NRXcEoUaQdIRQ34PkJwQIOVZWkcQPVrQp6NYFpRM6JjNPn0AWYzLz%2BGUk8XcLSvYqd7TKM6kTi15UQvZGkJ0R0vwIWd%2BBLI4QZp9B8t%2FI3NNlJPHeqlUakp%2FeiLzIp36LzvqCBrM%2Bq7mzLGi2Z9t1wVkgAh75zXOLpBxBRiMoMQC1V5BbB7l0kEcO8tRBzE8rNGhHrtuMWFSvt%2FwwDOv1MAxaDR7wut%2BKXOThRMMAWTpAqAYIzTZSs41NOYDJf4LdKGG5A5sRdHmJQhAUlqCgBIUkKDKColvuc2VrtnzAlc2ZN821aa6XQ511dum%2BzjoiIbvpGXlxYpxzzYmxKU4rjYbXcgPeqHO%2F2YhYmzXrvBE1o0Yj5II2mrCyhLRXQK2DvhyT6%2FlVpHJMnvvyFzB6BKuOEEoHNL8OWgybNRd0Y%2Bi3XPSTwyTMVaRkr9rb6oPrEmk2g2zL2VVn5JXzA7b%2F6EKEx%2FNPPn32xuO5VxGaEqkp8Yn8maCj7g9v64Ls3daFJQ9X00zGsk8nx72T0UzMfPOB2Cq04Uu37ODrd8IJmJSHd4XNlmnCZdKx5NsFybkwi9qEgvy4ZNcFW8vtxkJukjxdXnt3cSlOjbBW6mQEKk8%2BfoRQjskL8c75s33tr88hzQgmLxHnx2QakPoIYboNmx7P%2F3v4vPf631uwmsCoyxmWOijycmhq7PKnkgRKXPaUlbDi0gImjh%2F9c8F27X10jAOa3UMSl%2BiaEl1VgqoBbH51mKXmeP73%2BnmAKWfIlHH2mDLqiwtrrTytiCByI%2BHWBIvaLGpSl7cjv81o2xNNFlAPmR2HOz%2Bc%2FAcAAP%2F%2FAQAA%2F%2F82BFG%2BjgQAAA%3D%3D HTTP/1.1
Host: wastedinvaluable.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Cookie: u_pl=17498477; uid_id2=f1f4a48a-4ea5-4b20-b579-93edb5e5df47:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec661805d63d476fb9b73d6f7f66cdea67=[3789942]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 30 Nov 2022 01:41:37 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ee634c84bad02663b5bc2aeba260b34b
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash666862f4814e01580d5eda6267101cf3 df635667f6dae8be205caf550fc95c16d17a01a5 f6f33ec68b533f749a2cef620edba5fba65b437d2dd9e7a8bd6d3e19d0581db6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F6F33EC68B533F749A2CEF620EDBA5FBA65B437D2DD9E7A8BD6D3E19D0581DB6"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2013
Expires: Wed, 30 Nov 2022 02:15:10 GMT
Date: Wed, 30 Nov 2022 01:41:37 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashdd71cb59bfd5e31191d61da63fec244a 998886e4743fc393838dbee7a6632d392e268e73 54672c525e2462ddbb2e84b80945daede2e13469b8817d636dc12d5bb0b3bc47
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "54672C525E2462DDBB2E84B80945DAEDE2E13469B8817D636DC12D5BB0B3BC47"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1859
Expires: Wed, 30 Nov 2022 02:12:36 GMT
Date: Wed, 30 Nov 2022 01:41:37 GMT
Connection: keep-alive
|
|
| cdn.barscreative1.com/sb/notifications/games/nutaku/multi/5/index.html | 45.133.44.4 | 200 OK | 492 B |
URL HTTP/2cdn.barscreative1.com/sb/notifications/games/nutaku/multi/5/index.html IP45.133.44.4:0 ASN#39572 DataWeb Global Group B.V.
File typeHTML document, ASCII text Hashc17b8e9730eaa393a1bfaccd2c689355 e8dff763fb5ab2460e99fd3b8c67dd244a9ff99e 0db286f22f7d3ec18e4172d5b7dd772ff1b924785c3a97a79b3f0f0fa4ab3587
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /sb/notifications/games/nutaku/multi/5/index.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nculflix.xyz
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:41:37 GMT
content-type: text/html; charset=utf-8
server: nginx/1.17.6
last-modified: Fri, 19 Aug 2022 11:08:45 GMT
etag: W/"62ff6f3d-588"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Wed, 30 Nov 2022 02:41:37 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
|
|
| e1.o.lencr.org/ | 95.101.11.115 | 200 OK | 345 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash9023f7c58094afb6679b8203371347f2 e4e0913494d8ef22785d0ac1ea37a6ccd07e7814 d8b439484d97223421026fbf662741696bb6e573273bfd2cff066b1c1e08e871
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "D8B439484D97223421026FBF662741696BB6E573273BFD2CFF066B1C1E08E871"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2719
Expires: Wed, 30 Nov 2022 02:26:56 GMT
Date: Wed, 30 Nov 2022 01:41:37 GMT
Connection: keep-alive
|
|
| e1.o.lencr.org/ | 95.101.11.115 | 200 OK | 345 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash9023f7c58094afb6679b8203371347f2 e4e0913494d8ef22785d0ac1ea37a6ccd07e7814 d8b439484d97223421026fbf662741696bb6e573273bfd2cff066b1c1e08e871
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "D8B439484D97223421026FBF662741696BB6E573273BFD2CFF066B1C1E08E871"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2719
Expires: Wed, 30 Nov 2022 02:26:56 GMT
Date: Wed, 30 Nov 2022 01:41:37 GMT
Connection: keep-alive
|
|
| e1.o.lencr.org/ | 95.101.11.115 | 200 OK | 21 kB |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashd05790136b58bb524ace1cb289cda071 eca930e228f890d8e171244ecc64c0276ae96f4c f491d1558cf7bfc30829661ee90cf03e4905d3c5f6717ffac35dbc4349f2e8e3
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "D8B439484D97223421026FBF662741696BB6E573273BFD2CFF066B1C1E08E871"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2718
Expires: Wed, 30 Nov 2022 02:26:56 GMT
Date: Wed, 30 Nov 2022 01:41:38 GMT
Connection: keep-alive
|
|
| unseenreport.com/pxf.gif?uuid=27fca8ec-ff40-4351-932d-d2e46ee34763&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=1c3072954bc36085bd753a2e23ff1de8&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=1 | 192.243.59.12 | 200 OK | 1 B |
URL HTTP/1.1unseenreport.com/pxf.gif?uuid=27fca8ec-ff40-4351-932d-d2e46ee34763&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=1c3072954bc36085bd753a2e23ff1de8&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=1 IP192.243.59.12:0 ASN#39572 DataWeb Global Group B.V.
File typevery short file (no magic) Hash93b885adfe0da089cdf634904fd59f71 5ba93c9db0cff93f52b521d7420e43f6eda2784f 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /pxf.gif?uuid=27fca8ec-ff40-4351-932d-d2e46ee34763&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=1c3072954bc36085bd753a2e23ff1de8&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=1 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Wed, 30 Nov 2022 01:41:38 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 89a5e4f7f81eb44339c21d0ee8451c8f
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/5/img/girl.png | 172.64.108.13 | 200 OK | 501 kB |
URL HTTP/2cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/5/img/girl.png IP172.64.108.13:0
File typePNG image data, 455 x 1011, 8-bit/color RGBA, non-interlaced\012- data Size501 kB (501411 bytes) Hashf0e79ce0a8d574d640ed9a358786eeaf 56673540848727bc10c1b82e10e66dbdc8effd1f 08132bc5abb8e4f9c9c4c33ad5390d02bc17d9dc1a77c6bb1a2391b312c00cd0
GET /sb/notifications/games/nutaku/multi/5/img/girl.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:41:38 GMT
content-type: image/png
content-length: 501411
last-modified: Fri, 19 Aug 2022 08:44:06 GMT
etag: "62ff4d56-7a6a3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1252116
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gzUZ1q%2FvAAGkF60rUywXftmN9Yr2R8UeKlkbZdHc%2FRqp6yZPXMYPu5zmM4sWZA5DWGvXufszwm7ymI1z%2FcGHIf3PMkvkpL5UysR8WvAXh9sEeTfmQhREj4sNJKye1Co4t7B8a3QFmHmN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771fe1c09a34773d-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| unseenreport.com/pxf.gif?uuid=27fca8ec-ff40-4351-932d-d2e46ee34763&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=661805d63d476fb9b73d6f7f66cdea67&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=1 | 192.243.59.12 | 200 OK | 1 B |
URL HTTP/1.1unseenreport.com/pxf.gif?uuid=27fca8ec-ff40-4351-932d-d2e46ee34763&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=661805d63d476fb9b73d6f7f66cdea67&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=1 IP192.243.59.12:0 ASN#39572 DataWeb Global Group B.V.
File typevery short file (no magic) Hash93b885adfe0da089cdf634904fd59f71 5ba93c9db0cff93f52b521d7420e43f6eda2784f 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /pxf.gif?uuid=27fca8ec-ff40-4351-932d-d2e46ee34763&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=661805d63d476fb9b73d6f7f66cdea67&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=1 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Wed, 30 Nov 2022 01:41:38 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: bf97f74809feeed1e26357d9a40412de
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/5/css/animate.css | 172.64.108.13 | 200 OK | 4.6 kB |
URL HTTP/2cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/5/css/animate.css IP172.64.108.13:0
File typeASCII text, with very long lines (60365) Hashd561eddd629c93a06fc01ea7797265b0 b13c5c5c83ffdf09f3c0adc7315001b17d7f5bb4 bd96cf96793777ba40af6a489289e378730dcdc301dbabc2622efa23cb86a5d1
GET /sb/notifications/games/nutaku/multi/5/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:41:38 GMT
content-type: text/css
last-modified: Thu, 18 Aug 2022 12:49:43 GMT
etag: W/"62fe3567-ec8b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1252116
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sEazby9LKj9olknaBjLpvJuixd0KGVTI05JpnNjhxUn937jq5RN3RHgEj6yAtOGy2w9FMTktZIDkKA1C9Wb2iyvpqlVeKWQrgw9ssRElr0RAeGy0RDE1yCrGvgdrb1tdxarTrpew58kG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771fe1c09a2c773d-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| friendshipmale.com/sfp.js | 172.64.203.23 | 200 OK | 27 kB |
URL HTTP/2friendshipmale.com/sfp.js IP172.64.203.23:0
File typeUnicode text, UTF-8 text, with very long lines (65529), with no line terminators Hash249d5bb8f8d5fd948efc1354d88c6817 7c912d3b06643207404fedefff09fafa13366c0d f3bfe89639b988ecb00f0cfee2f14749541d67e96bd6b6308d6e934031db1352
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:41:36 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: d207075a47951637bad299235fe6d0e2
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Wed, 30 Nov 2022 01:41:36 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r9wZLD6KYOdHaVnMABAUHQtY6NKBj5iZfU9azFkpIqQGcMSVTRRQAsS0SzlCe%2FHXclidg6VXdfoqMHMZdmtEGcqgr1a6MCxyHmHwdGtshuZxGdgu%2F%2FuHhMnQMDDyF7F3QZ8bYmo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771fe1b5d896730e-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/5/js/script.js | 172.64.108.13 | 200 OK | 1.4 kB |
URL HTTP/2cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/5/js/script.js IP172.64.108.13:0
Hash151ce0b43b514f5887aa5489b5d263fa 1debfa7532e3f0b3c00a14522130d4d7a7163c07 cc41c0e9b834ea46f592ffb67c917c274b15538ddf77aae51d7c5da06c884090
GET /sb/notifications/games/nutaku/multi/5/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nculflix.xyz
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:41:38 GMT
content-type: application/javascript
last-modified: Wed, 21 Sep 2022 07:34:28 GMT
etag: W/"632abe84-dd0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9m8ZpC24EBhy96sxBCDuSuG460oFBRnTOhX8K83WQrcT0MmuXEyi%2FmpUNFvNKL1baAFoFtdMyKY7thzymper%2B4pcG3D6mCj%2BeH17aZaqMTl0%2FwZ6nbmHuB0sbR5m9Sx%2FFuk2SueUVrUs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771fe1c158947531-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| wastedinvaluable.com/impr.gif?sid=H4sIAAAAAAAC%2F1SST2gkRRTGq3fjH9yT4kVkZQ6LKJhJ93T3%2FHEPi%2Bu6shiTsLuSq9VV1ZMy1V1NVff0ZE7RhbB4GvHisfNNskEN4oJXWZl4UAJCRkGCbO7exIU9yyQDwXfo917%2F3uF936ut7eKEuCjo8cqHeiCVogth3a29sSpTrktbW7pb89y6e7W2KtNmcLXWn35M723PDevum7X3BVvXCw3Xc13P9Wo3pRGx7i%2BcUshsv%2BPVO249aNS9MEDf%2FL%2B3hQNLHfDeCXkJkk%2BeWfv1ISQbI02%2BvyHseq6zt95LCkVzbdDjex%2Bl66kuUyTnZWwcxOnebBraTgj56gJ0ujdTAN3bmSpAJCfE%2BdNDlO7N1kTU2z3bNFIQKSJ%2BCWVvDKHGkHQMpu9B8iMCMI6lZaTJgyVtSrpxRumUTsjc0yeQ5YTMPX4ZafLddSX7tTtaFbnUqUU%2FriD7Y8juGFlxgHzgQJYHYPlnkPw3svB0EWmys2yVhuTHV2IvDmjQpvOBoOF8EDXc%2BShsdeY7vuBRKEIeB61Ti6QcQ8ZjKDEEtRdQWAeFdFDEDorMQcKPazTsxK7biqPY99sBY8z3GQvbTR5yP2jHLgo21TBEng3B1BDMbCIzm1iXQ5jiJ9i1CpY7sDlBj1coBUFpCUpKUEqCMicoe9UuV7Zhqwdc2SLyZrkxy3410nl3m%2B7qvCtSsp2dkBenxjmXnATr4rjWbHptN%2BRNnwetZhx1opbPm3ErbjYZF7TZgpUVpL0Aah0M5IRcLi4ikxPy3Je%2FIKIHsOoATDqgxWXQctRquKBro6DtYpDup6xQsZL9en9jAK4rZPkc8g1nW52QV04P2PmjB8EOrz359NkrjxdeBTMVMlPhE%2FkzQVfdH93WJdm5rUtLHi5nuUzkgE6PeyenuZj75gOxUWrDb92ww6%2FfYVMwLffvCpsv0pTLtGvJt9cl58Lc1IYJ8uMtuyqilcKuXS9MWmSLK%2B%2FevJVkRlgrdToGlUcfPwKTE%2FJCsnX6bF%2F763NIM4YpKiTFIZkFpD4AyzZhs8Nr%2F%2B4%2F773%2B9wasJjDqfCbKHJRFNTKN6PynkgRKnPc0qmDFuQWROHz0zxnbtvfRNQ5ofg9pUqFnKvRUBaqGsMXFUZ6Zw2u%2F%2B6eBSDmjSBlnJ1JGfXFmrZXHtdALRDtqtxjnkWDcazX8tu%2B6Dc6DVkd4HeR2wrZ%2BOPoPAAD%2F%2FwEAAP%2F%2FIgzfWI4EAAA%3D | 173.233.137.52 | 200 OK | 7 B |
URL HTTP/1.1wastedinvaluable.com/impr.gif?sid=H4sIAAAAAAAC%2F1SST2gkRRTGq3fjH9yT4kVkZQ6LKJhJ93T3%2FHEPi%2Bu6shiTsLuSq9VV1ZMy1V1NVff0ZE7RhbB4GvHisfNNskEN4oJXWZl4UAJCRkGCbO7exIU9yyQDwXfo917%2F3uF936ut7eKEuCjo8cqHeiCVogth3a29sSpTrktbW7pb89y6e7W2KtNmcLXWn35M723PDevum7X3BVvXCw3Xc13P9Wo3pRGx7i%2BcUshsv%2BPVO249aNS9MEDf%2FL%2B3hQNLHfDeCXkJkk%2BeWfv1ISQbI02%2BvyHseq6zt95LCkVzbdDjex%2Bl66kuUyTnZWwcxOnebBraTgj56gJ0ujdTAN3bmSpAJCfE%2BdNDlO7N1kTU2z3bNFIQKSJ%2BCWVvDKHGkHQMpu9B8iMCMI6lZaTJgyVtSrpxRumUTsjc0yeQ5YTMPX4ZafLddSX7tTtaFbnUqUU%2FriD7Y8juGFlxgHzgQJYHYPlnkPw3svB0EWmys2yVhuTHV2IvDmjQpvOBoOF8EDXc%2BShsdeY7vuBRKEIeB61Ti6QcQ8ZjKDEEtRdQWAeFdFDEDorMQcKPazTsxK7biqPY99sBY8z3GQvbTR5yP2jHLgo21TBEng3B1BDMbCIzm1iXQ5jiJ9i1CpY7sDlBj1coBUFpCUpKUEqCMicoe9UuV7Zhqwdc2SLyZrkxy3410nl3m%2B7qvCtSsp2dkBenxjmXnATr4rjWbHptN%2BRNnwetZhx1opbPm3ErbjYZF7TZgpUVpL0Aah0M5IRcLi4ikxPy3Je%2FIKIHsOoATDqgxWXQctRquKBro6DtYpDup6xQsZL9en9jAK4rZPkc8g1nW52QV04P2PmjB8EOrz359NkrjxdeBTMVMlPhE%2FkzQVfdH93WJdm5rUtLHi5nuUzkgE6PeyenuZj75gOxUWrDb92ww6%2FfYVMwLffvCpsv0pTLtGvJt9cl58Lc1IYJ8uMtuyqilcKuXS9MWmSLK%2B%2FevJVkRlgrdToGlUcfPwKTE%2FJCsnX6bF%2F763NIM4YpKiTFIZkFpD4AyzZhs8Nr%2F%2B4%2F773%2B9wasJjDqfCbKHJRFNTKN6PynkgRKnPc0qmDFuQWROHz0zxnbtvfRNQ5ofg9pUqFnKvRUBaqGsMXFUZ6Zw2u%2F%2B6eBSDmjSBlnJ1JGfXFmrZXHtdALRDtqtxjnkWDcazX8tu%2B6Dc6DVkd4HeR2wrZ%2BOPoPAAD%2F%2FwEAAP%2F%2FIgzfWI4EAAA%3D IP173.233.137.52:0
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /impr.gif?sid=H4sIAAAAAAAC%2F1SST2gkRRTGq3fjH9yT4kVkZQ6LKJhJ93T3%2FHEPi%2Bu6shiTsLuSq9VV1ZMy1V1NVff0ZE7RhbB4GvHisfNNskEN4oJXWZl4UAJCRkGCbO7exIU9yyQDwXfo917%2F3uF936ut7eKEuCjo8cqHeiCVogth3a29sSpTrktbW7pb89y6e7W2KtNmcLXWn35M723PDevum7X3BVvXCw3Xc13P9Wo3pRGx7i%2BcUshsv%2BPVO249aNS9MEDf%2FL%2B3hQNLHfDeCXkJkk%2BeWfv1ISQbI02%2BvyHseq6zt95LCkVzbdDjex%2Bl66kuUyTnZWwcxOnebBraTgj56gJ0ujdTAN3bmSpAJCfE%2BdNDlO7N1kTU2z3bNFIQKSJ%2BCWVvDKHGkHQMpu9B8iMCMI6lZaTJgyVtSrpxRumUTsjc0yeQ5YTMPX4ZafLddSX7tTtaFbnUqUU%2FriD7Y8juGFlxgHzgQJYHYPlnkPw3svB0EWmys2yVhuTHV2IvDmjQpvOBoOF8EDXc%2BShsdeY7vuBRKEIeB61Ti6QcQ8ZjKDEEtRdQWAeFdFDEDorMQcKPazTsxK7biqPY99sBY8z3GQvbTR5yP2jHLgo21TBEng3B1BDMbCIzm1iXQ5jiJ9i1CpY7sDlBj1coBUFpCUpKUEqCMicoe9UuV7Zhqwdc2SLyZrkxy3410nl3m%2B7qvCtSsp2dkBenxjmXnATr4rjWbHptN%2BRNnwetZhx1opbPm3ErbjYZF7TZgpUVpL0Aah0M5IRcLi4ikxPy3Je%2FIKIHsOoATDqgxWXQctRquKBro6DtYpDup6xQsZL9en9jAK4rZPkc8g1nW52QV04P2PmjB8EOrz359NkrjxdeBTMVMlPhE%2FkzQVfdH93WJdm5rUtLHi5nuUzkgE6PeyenuZj75gOxUWrDb92ww6%2FfYVMwLffvCpsv0pTLtGvJt9cl58Lc1IYJ8uMtuyqilcKuXS9MWmSLK%2B%2FevJVkRlgrdToGlUcfPwKTE%2FJCsnX6bF%2F763NIM4YpKiTFIZkFpD4AyzZhs8Nr%2F%2B4%2F773%2B9wasJjDqfCbKHJRFNTKN6PynkgRKnPc0qmDFuQWROHz0zxnbtvfRNQ5ofg9pUqFnKvRUBaqGsMXFUZ6Zw2u%2F%2B6eBSDmjSBlnJ1JGfXFmrZXHtdALRDtqtxjnkWDcazX8tu%2B6Dc6DVkd4HeR2wrZ%2BOPoPAAD%2F%2FwEAAP%2F%2FIgzfWI4EAAA%3D HTTP/1.1
Host: wastedinvaluable.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nculflix.xyz/
Cookie: u_pl=17498477; uid_id2=f1f4a48a-4ea5-4b20-b579-93edb5e5df47:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec661805d63d476fb9b73d6f7f66cdea67=[3789942]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 30 Nov 2022 01:41:38 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: df1c5ee837412f154b67f7beb30d5fc1
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/5/css/style.css | 172.64.108.13 | 200 OK | 2.0 kB |
URL HTTP/2cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/5/css/style.css IP172.64.108.13:0
File typeassembler source, ASCII text Hash40004c13f1a7f6a5c623d51dd639e427 0cf99de87da71acfd0c9aa785f2849603dd44c37 fd4fdba3631ca7995972e50130133a1589465863a704c522c612c86c2a8cc21e
GET /sb/notifications/games/nutaku/multi/5/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nculflix.xyz
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:41:38 GMT
content-type: text/css
last-modified: Fri, 19 Aug 2022 11:09:33 GMT
etag: W/"62ff6f6d-1c1c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pWSUxfCmqXi3XrYqcJjG8U0kWZxfSld4D1tQts0%2FUdO7sUQkp8jntKaFvILi%2FmBliDPB2uT7JW5MB7WplpES5i35u7ZyblbwetsQIjo%2BPpVNUY4et5gNC%2B%2FPurAFQMXkwy7yf8u4o9jg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771fe1c098417531-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/5/css/styles.css | 172.64.108.13 | 200 OK | 60 kB |
URL HTTP/2cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/5/css/styles.css IP172.64.108.13:0
File typeASCII text, with very long lines (3797) Hashf272e042abc5d1ceeaffa9c912aa0c98 fc467ea1153cba64bedf1947864aa68031893ebb 70dd320991d3bdfc74ad2c00fee746b48c50ab930be1097b3de83745067c3d69
GET /sb/notifications/games/nutaku/multi/5/css/styles.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nculflix.xyz
Connection: keep-alive
Referer: https://nculflix.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:41:38 GMT
content-type: text/css
last-modified: Thu, 18 Aug 2022 12:49:49 GMT
etag: W/"62fe356d-ed9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QyYYrJQDw0KzaIzMEGonyeBik%2BRDXH4jdd%2Bu3QIqc04JOY58e19W1upv8IgdjhThV10bArRTiaO3mA4b7g3bmkYUCr5Zya79W3OyOOZ691O4u9FMIxzwaiOQNab%2Bsv99Jx7iU%2FXNjjOU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771fe1c0983d7531-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/5/img/close.svg | 172.64.108.13 | 200 OK | 0 B |
URL HTTP/2cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/5/img/close.svg IP172.64.108.13:0
GET /sb/notifications/games/nutaku/multi/5/img/close.svg HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:41:38 GMT
content-type: image/svg+xml
last-modified: Thu, 18 Aug 2022 12:49:45 GMT
etag: W/"62fe3569-4ff"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1252116
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E0c8WZptT6shgFT2imz0WcUl7IIPMRW5qM4BoBKPg1eesOV0HrEamary5U7VFDrwg0zgo5Z55gj%2ByWJ6bUy1myIP3qyFoL3NVpd8gbDKDzcCyE0odlBBiIX%2Br4TLqwxnHArLscWjbQN2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771fe1c09a2e773d-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| nculflix.xyz/tv/119051/wednesday.html?%2FWATCH.FULL.VIDEOs.= | 172.67.162.236 | 200 OK | 0 B |
URL HTTP/2nculflix.xyz/tv/119051/wednesday.html?%2FWATCH.FULL.VIDEOs.= IP172.67.162.236:0
GET /tv/119051/wednesday.html?%2FWATCH.FULL.VIDEOs.= HTTP/1.1
Host: nculflix.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:41:35 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ieAQse%2BuLgvQAan1q4wzu%2BVkRGpyiVCtCR4L7quijAb57mRkWHCX9CSa63BGtFT6mEdnuk5HrevCV0OCrhCsBLCWab1Uch6en%2Bamjf1bZHDg2wpeqGUCfqgsLlU2l10%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771fe1ae5db81c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/5/js/jquery.min.js | 172.64.108.13 | 200 OK | 0 B |
URL HTTP/2cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/5/js/jquery.min.js IP172.64.108.13:0
GET /sb/notifications/games/nutaku/multi/5/js/jquery.min.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:41:38 GMT
content-type: application/javascript
last-modified: Thu, 18 Aug 2022 12:50:01 GMT
etag: W/"62fe3579-149b8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1252116
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r%2BsF8MKzjdUbB8xFY8prEMTd76WIUxfr12aRwRylKXbas8cWkdB87hHz3k%2BIbM0quEKW0o2mAOPW7P3h857Baj8GUWLn5vOYO18GCoqj%2BDki%2Bch066Eh%2Fr7UMF8poCq3WBplT0V5X4H1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771fe1c09a35773d-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|