{"report_id":"f307bda7-c507-4430-adf3-31f1c79ec4a5","version":6,"status":"done","tags":[],"date":"2025-10-08T12:30:54Z","url":{"schema":"http","addr":"ww1.lookmovie.pn/page/11","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":0,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"ww1.lookmovie.pn/premium.html?utm_source=internal_ads\u0026utm_medium=homepage_button","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"title":"Lookmovie2.to - Premium Membership"},"submit":{"url":{"schema":"http","addr":"ww1.lookmovie.pn/page/11","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":0,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-12T12:30:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"ww1.lookmovie.pn","ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"domain_registered":"unknown","domain_rank":126835,"first_seen":"2025-01-02T17:44:30Z","last_seen":"2025-10-05T02:38:41.222943Z","alert_count":30,"request_count":30,"received_data":1973444,"sent_data":20731,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-05T22:12:07.524768Z","alert_count":0,"request_count":11,"received_data":241874,"sent_data":5865,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-10-05T22:12:06.955348Z","alert_count":0,"request_count":5,"received_data":99278,"sent_data":3336,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-10-05T22:12:07.360997Z","alert_count":0,"request_count":8,"received_data":4299712,"sent_data":3811,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-05T22:12:06.373682Z","alert_count":0,"request_count":2,"received_data":15855,"sent_data":965,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"push-sdk.com","ip":{"addr":"178.63.248.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2022-10-25","domain_rank":36212,"first_seen":"2022-12-23T14:43:48Z","last_seen":"2025-10-06T16:43:56.532444Z","alert_count":0,"request_count":2,"received_data":55832,"sent_data":888,"comment":"","tags":null,"fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}]},{"fqdn":"stats.lmofficial.to","ip":{"addr":"38.246.114.236","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":1617435,"first_seen":"2025-07-10T21:58:11.504027Z","last_seen":"2025-10-05T02:38:41.418788Z","alert_count":0,"request_count":3,"received_data":4891,"sent_data":1453,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ww1.lookmovie.pn/page/11","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"56f242d2d50c7edf224afc8d502e93df","sha1":"fe02bd4ae6a23ab48491327573bd2d0cbb303aee","sha256":"08784ad3c47fa299b0c95e7bfa0959dcf17cb362909e562f05b886425c90ce21","sha512":"6a95c8e766f091ed7c8031934c665c5200a5c438e8a3f51c6223b393152a27d4b1aa78dc782ad993843633ec088b4dcb53f85443144197e2e4fd7a4911f38741","ssdeep":"","tlshash":"0ba012c03cc75002c523303030972c02104224d53002c800a304e03677670313d013e9","size":83,"data":"","first_seen":"2024-08-22T17:16:37.48118Z","last_seen":"2026-03-23T15:21:39.844899Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/assets/all-95a4e9f7a44334777e7bb0710359334a.js","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"95a4e9f7a44334777e7bb0710359334a","sha1":"8711739b02553f10447a02da82a033d1f48edee1","sha256":"1782296d2bee4597337783e8b9e53dd862758846f7508926d6b333623e63700b","sha512":"a3054753d03338b150e938c26697129928b4213efc0a0e18b45ff3ba4428955099dc4d80035e86c33d5d9af7c92a03182d2640972f67f38771b0187832b446d6","ssdeep":"6144:ay8G6RujcHX6MQ47GKa4++ARbgZsd000iYj4PO4ILXmZItTXp4HDi:aywRuI369+ARMZsd000iY2O4Io8Xp4H2","tlshash":"f334e7dcb2a5b071526771b5503f120bb33b187aa80c9464f179e8e17db8989827bf3d","size":240851,"data":"","first_seen":"2025-06-30T14:55:15.047837Z","last_seen":"2025-10-09T14:44:51.974625Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/bGi-DxR800F5_ueMVcTwXc6q/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5bce9e85f38aa11d35ab51517f8d07e4","sha1":"44102e17b879843f3ce36a51c0f132d11a24588a","sha256":"1a828972d3e667311b0fe5662301cc433f2c5e97d5018cbd331c4c59ad34d311","sha512":"08489944c9e40c9f71bad98402a22467e3de06545feab6314b08a2510224d75eae877604b64bb37f281f3bb5e1408b3a3c2ef71ec9c742120c002fe553b751b0","ssdeep":"12288:l4zpNa1FTCz4BpuKYXsrFoCvL67G1+zEnHYJ7HlEiU9J:OzBkruKYsuyO7G1gs4JBhk","tlshash":"66054ad87112b5e59322b9f2a067201da37ea535c84c4c5eb29588f12ef1c4e70b6ef7","size":824931,"data":"","first_seen":"2025-10-07T06:40:38.110565Z","last_seen":"2026-03-30T18:12:53.501353Z","times_seen":16338,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=bGi-DxR800F5_ueMVcTwXc6q\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=3lkmomgdxy2u","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"03714c37a14638f03c6e275a71cbd847","sha1":"cb0eeec4f8673ff2a631dcc44807f582c1be30cc","sha256":"1cfe81ee425cbb986aa90a911706dfa93c9d6fdac4da63f38186ac09696dfabc","sha512":"e1cfce7c957c6161658360ea7364e5f659992428a1734a7b5c1934d4e8d4ae5b4640499cf67d79d5e6f578a61185ddd5d0ee3777ae22f13c8c3bfe055ebe8dcd","ssdeep":"","tlshash":"6e7000082c0b2008802a3020000b008a802200880c0a0080000808c0acb0a2e2202c88","size":22,"data":"","first_seen":"2025-10-03T07:25:38.455089Z","last_seen":"2025-10-10T14:48:06.268235Z","times_seen":2483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/bGi-DxR800F5_ueMVcTwXc6q/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5bce9e85f38aa11d35ab51517f8d07e4","sha1":"44102e17b879843f3ce36a51c0f132d11a24588a","sha256":"1a828972d3e667311b0fe5662301cc433f2c5e97d5018cbd331c4c59ad34d311","sha512":"08489944c9e40c9f71bad98402a22467e3de06545feab6314b08a2510224d75eae877604b64bb37f281f3bb5e1408b3a3c2ef71ec9c742120c002fe553b751b0","ssdeep":"12288:l4zpNa1FTCz4BpuKYXsrFoCvL67G1+zEnHYJ7HlEiU9J:OzBkruKYsuyO7G1gs4JBhk","tlshash":"66054ad87112b5e59322b9f2a067201da37ea535c84c4c5eb29588f12ef1c4e70b6ef7","size":824931,"data":"","first_seen":"2025-10-07T06:40:38.110565Z","last_seen":"2026-03-30T18:12:53.501353Z","times_seen":16338,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/page/11","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"e75998275db45d2f7af36736baa3204a","sha1":"339175923cafea9089902eebf4bdd4c22024e32c","sha256":"1ed6260558a97893872245038bda3a1fc0408cd006659f49cc5c94ee92062ae6","sha512":"dbc9f2e44c6217ce92aa82100dc46fb501ed7c6f5f2fa0b13360e872762a01472025673311f4739cba4cb6afde51b5522939d8d3d497415b2b39f962ec0759a9","ssdeep":"","tlshash":"6180002ee3002b80ac88a288e20c0a000e2a800a00a222028202888c808a0e080ac00c","size":26,"data":"","first_seen":"2023-07-21T00:29:22Z","last_seen":"2026-03-23T15:21:39.832569Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/page/11","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"fed636e7ed6d19ca6e56177900c4a357","sha1":"e681cad1eddc9c2a2abaa5570368381d39142861","sha256":"ab96d056bf9f52e0b87c9e7a4e60e5d52965491c8ac098e621b84122f534a73b","sha512":"91be3ec920e67deb782c5bd87786fc683ed70981a4052ff0e0317d99e3a577cbdb5b3cd34afd2332548e915137d04d949ed09d318b43e6911e83dd342f32d1a3","ssdeep":"","tlshash":"19a012843ac12040c113317070e30c1760002494200088009140f02929a24315942459","size":73,"data":"","first_seen":"2023-05-27T11:40:22Z","last_seen":"2026-04-02T18:57:41.694404Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=bGi-DxR800F5_ueMVcTwXc6q\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026bft=0dAFcWeA6rZ6BOgoONWbfrJwq6_EtaA7ghDcCVpMN0WJwOuZ1MDzevgNtOPOqMXvOUjcp2cnreGHRvvJXgRiR_1uVysMqwWJrp7A","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-04-04T04:42:53.328236Z","times_seen":388156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=bGi-DxR800F5_ueMVcTwXc6q\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=3lkmomgdxy2u","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-04-04T04:42:53.328236Z","times_seen":388156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/page/11","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"1d217358096897860dbb4aa14a42027e","sha1":"4a6af61ca3522a1ffcda6a6271d5866b45a7989b","sha256":"f5bc2b20b66bccf19a723df33fb16e348e70a412e04414d215c47c812a6af899","sha512":"159b4c7b842c38dd3d5662538b0c925e99e08af23451ecff8ce5faf80a2071d9849bffd42479e136f48084f9f25539b8fad2a55c1dbe9d84fcb82a20cbcd4b48","ssdeep":"","tlshash":"d301495e2353b23512bb31caa717910c18728153a240c08cb78c572a8f76fafd6df689","size":827,"data":"","first_seen":"2025-06-30T14:55:15.070627Z","last_seen":"2026-03-23T15:21:39.835102Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/page/11","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"cd73218b8de969b43791bffe506f1f38","sha1":"ea744a9ef4e7c12399110d3466a7b3e11e372c40","sha256":"a548668dcbe0bc0cbf1842e4abfc24bd74015aff40c0e5f912c45e9d353867eb","sha512":"1a4d0fcb28cff3aa04055270affd35b9e27f592673a5abef34b35962281ce5eaaeb43f2b9f7bb8ce3f52f00d273c3b41db1cb871f6422965e010f885d222a078","ssdeep":"","tlshash":"82a002c43ed6a062d3b336bcb1f71d97a15568e85104cc40a614f46439731326d5a5ed","size":65,"data":"","first_seen":"2024-08-22T17:16:37.493822Z","last_seen":"2026-03-23T15:21:39.799095Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/page/11","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"137407b5bc9df5ace69c34b0b6aa1dc8","sha1":"7f7ab94980aca80eafa65dac8a1a2b0961f3dd1d","sha256":"ff70ba56a6ce3dfdf16238faea94793b4ec44d6d6e8cc0636f164d347795b080","sha512":"19ab0833a8a342ab97811b0bde2bab7911562792477da137d517e1c391e68b8533dec60a36d7983223c1dd0a3158d9a72ed5dd3ef3bbf8052067d496a2f5f083","ssdeep":"","tlshash":"4ca0118038e2a020cb233230a0b32c02a00a28e02020a880a220f0a0383202238820aa","size":77,"data":"","first_seen":"2024-08-22T17:16:37.478119Z","last_seen":"2026-03-23T15:21:39.837873Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/page/11","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"fa0d953b53e14571220e46a2909ccef5","sha1":"a39aebcfea2e358588f3ee07184d74621826fb52","sha256":"d26f0aaf761907f3d64d719545d8851cf7a73a5b92dc639c6160d0feaae09e8d","sha512":"f95ae5220b7add115112e1ff7bf1d01126dacafd1202be02a5720f1fe8b475c69cc338dcc4df7ab832712871db4d748cf5d409822511472f55d5641eb00aaceb","ssdeep":"","tlshash":"65a012c835d3a060c123313060e71e0e21013c921004c8049200e53424360226d4605c","size":82,"data":"","first_seen":"2024-08-22T17:16:37.4542Z","last_seen":"2026-03-23T15:21:39.846076Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=bGi-DxR800F5_ueMVcTwXc6q\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026bft=0dAFcWeA6rZ6BOgoONWbfrJwq6_EtaA7ghDcCVpMN0WJwOuZ1MDzevgNtOPOqMXvOUjcp2cnreGHRvvJXgRiR_1uVysMqwWJrp7A","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"97e7754e078f40c30caeee74afd4f090","sha1":"262959daeed4fb253337642fc4c826512d7c8c0e","sha256":"459cbea19e073681a280076d33c6c8fc3d0c2832d7a4bd15cc485453974e3295","sha512":"9558095f72d1d95be28c08a8246002f6d7ac01f7ab9dbc7108ae49b26ad2462b56f56583d0ff9b6f230e401586cbe39362c88fcd4551554f0ebbbb4ea5630ea1","ssdeep":"","tlshash":"66d0a9a212022df68c14ac710826005e1cca0923902693f4bece3c95afa4e85ba089bc","size":219,"data":"","first_seen":"2025-09-01T17:21:22.282495Z","last_seen":"2026-03-23T15:21:39.831236Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?onload=onRecaptchaLoaded\u0026render=6Ley5moUAAAAAJxloiuF--u_uS28aYUj-0E6tSfZ","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"91b08a3d51c333b1fff7c9d56a4c3f5c","sha1":"58c4f549978309dcbec1e0d577101edbb057910a","sha256":"2d972145025973766eae525059b1bd3c1508d7256467fe0125ff7655b18b8680","sha512":"345e713c36e73ddde4834c80aef364188d677743a7da37ac65fa5c4e820a090d7d6b66711665dcfb275dceaad6b13001ab64cae0e8324c39406f9237cd89ff2d","ssdeep":"","tlshash":"e32130762b09e03d4b7219d1b1fedbb1e881740db11844dcb542dac42ebaccbce00549","size":1152,"data":"","first_seen":"2025-10-08T12:31:01.40137Z","last_seen":"2025-10-09T14:44:51.992034Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/page/11","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"53e197ce2ce5d46618cfbecec02d8bd1","sha1":"d67f40a531402970cf37f530887e1a4174b24ccd","sha256":"23937b8d35ace63b854b4ddf791d6d6d0d234ec5117871fa1f64e1fe45f54684","sha512":"d40c52f4dd555ee1a43450bc57e24d476027de25fac14f2614008ec15e4b241d0f8ef6c5216f07a388fbb4cdf9f7d337b8456669fd1674880915cf66001b7364","ssdeep":"","tlshash":"2ea0118038c22002c223383020bb0c0220a028b000008c00a208e028a8b20a23c022aa","size":72,"data":"","first_seen":"2024-08-22T17:16:37.441411Z","last_seen":"2026-03-23T15:21:39.862724Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/page/11","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"9070600a080aed4dcf9fe841329582ec","sha1":"2a7cc7498a081299f52c0fb18894377c72187e1a","sha256":"393a62e283f56b0c0429149a6a73874adb63d4c51374b6a175f627305c6ba19f","sha512":"26701dee661c2f36b185b6a2a6f721640b515a0dfc4081c307d3c50b9ce5e2ee69e11dfaa959c7e251a89cf12614b8f9a90d5f4e8b3fb1e8ef6f18cb298eee7b","ssdeep":"","tlshash":"0fa012c03cd39011ca13343020b71c02a10124d56002d8406210e0613a630223d410da","size":83,"data":"","first_seen":"2024-08-22T17:16:37.447912Z","last_seen":"2026-03-23T15:21:39.814283Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/page/11","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"63b8d43e15a769ab1628164a54199097","sha1":"cb952005262c49778f8054abed448d6da12273ec","sha256":"86b7c5d8d05a0ee2139acbef1b2e8cce6e55fe71bb9844ef477d1988f1c01626","sha512":"7ab70ee67cafb8e5732f46f1a17fdf216e6971cae70ace50cb3df475764fef59e90029d32451d5f499c9e293201dbd9d794fd1c66a3496167c9f6796a0ac0109","ssdeep":"","tlshash":"afa011803ac2a000ca3332b030a32c02202a28e03020c888a308f2a8ba3a03238023bc","size":77,"data":"","first_seen":"2024-08-22T17:16:37.49021Z","last_seen":"2026-03-23T15:21:39.803733Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/page/11","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"d09af5ed8d7ec5f55b4e0249af667445","sha1":"fada14cdf5fe52257afc9cb444adf9d61e23503c","sha256":"bb50ac5f29b09be144b87ce9484971ec42168b2d6222814f173df8d233eaa74d","sha512":"a17d3cf4a089f218f94128c4a72e50fbaacbbe9cc9c1fb7ee2151af6c00fed96d117bccd0175f54868194918f837ca955938b752e7804d978a254bc44e0facec","ssdeep":"","tlshash":"fca012c03cc36001c653343024971c02100524952017c8006310e0623b630213d061d9","size":81,"data":"","first_seen":"2024-08-22T17:16:37.504644Z","last_seen":"2026-03-23T15:21:39.863375Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=bGi-DxR800F5_ueMVcTwXc6q\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=3lkmomgdxy2u","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"dfc58d083d3170f029909a322d38c016","sha1":"932138132d59cdda67d03ae0ec70012d147d2c2f","sha256":"52264362b212b45b456df3a84eb0ab8ee769d4b432bcf5597774b7c854c02dfe","sha512":"fd0be8c203b06dd25a3da55412e2dcb0d6361baa25a1e0788565eadb8fbabf536755b5e2c4da2c6b5feef905830dadaef5847afa8e630e0ce054de5ada8aa750","ssdeep":"1536:276jn/QpNevXapphOgzypYjJHhp6Wr8RQnt/fHrP5BnNGLwq9x:YO/QKXQOgeCHx8O/TMwq7","tlshash":"d963bf27d94370efdfbe8b411ae2966d123dd18a25a305dd22fb10d18a3bdd2666c1cc","size":69308,"data":"","first_seen":"2025-10-08T12:31:01.434832Z","last_seen":"2025-10-08T12:31:01.434832Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=bGi-DxR800F5_ueMVcTwXc6q\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=3lkmomgdxy2u","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3f9d2b1383d4f639d6c22ae094abb165","sha1":"ff8d73e60f698f88ba69f536db99d861852441d7","sha256":"8aeb2c9a69d9b1695a88fb1585fa6c3dffa87097e1cbd3e8fe5464e800d07896","sha512":"5514bea215ad67bb3ed313f48529afd8bd953dad7d742ca4106ba5d3ceddfddb73bbed0906b969dd88b55b8780f626d0f1b4b9e594487341f0b4bb8a7aef5b1c","ssdeep":"","tlshash":"2ca002542d1622680827f169d847a50d97e138112d188c880575dbc837bd38dc7e7965","size":60,"data":"","first_seen":"2025-10-03T07:25:38.472615Z","last_seen":"2025-10-10T14:48:06.289472Z","times_seen":2484,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=bGi-DxR800F5_ueMVcTwXc6q\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=3lkmomgdxy2u","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f4e5f2ea51fb17d25ffb62b3dbc7dc37","sha1":"df0312944562c17492d8fccb8522b4676faeee86","sha256":"c7510d3080c747a596103a3954953ac8e3b8d5f25d5477602256005709dd4827","sha512":"4f38d3e0eec13c0807ab5061bdd29cd609721488223a7f7312f03d551acd9590c519bb667b3bfe2cad6ee2add4d0f7933c617aa2022bd40741a5fd5553b8b104","ssdeep":"","tlshash":"dd7000082c0b2008002a3020020b0088c02200880c0a0088000808c2acb020e2202888","size":22,"data":"","first_seen":"2025-10-03T07:25:38.466148Z","last_seen":"2025-10-10T14:48:06.330411Z","times_seen":2486,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/page/11","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"c30df127f42c787d9e7ff0b64c78a63d","sha1":"66d8ab00834abc63de4e087901c5e9605a46ef48","sha256":"d6e7baba06337dda71daa6d58997440bf55000342d688d928c1b9056f2f0c453","sha512":"9c29f3f1b09bab595a128a3189d1642f84c06b007ac7ace32b49dea975fc7a9ffe205c65560feb52b1c08bd23912f1286db3f8b090c22fd2fcbc773f163eb7ff","ssdeep":"","tlshash":"40a011883ee22080c2233a30a0e30c0ba00028a020008800a200fa2a2ab283228820a8","size":72,"data":"","first_seen":"2024-03-03T01:28:36Z","last_seen":"2026-03-23T15:21:39.804785Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/page/11","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"81cd056d560e92e39bf54a2dd4554ae0","sha1":"66feccb041d079db4652d95e996e500a0bcffa26","sha256":"3945aa927ee4ef00ed56b17c35b0f45e3c38d8b45ff36b7e28d3f510cc326be1","sha512":"79b9cb32a27c593f7690517fd8551c0ba4c60a8a05bef57bf06c579206c2799f90e9fad260c4216382c96982dbd7a02be88869201d8a637ecaa51ed588e0107a","ssdeep":"","tlshash":"f8f0591f6a97186513b7e5766b0f3b523b234117d00acc957e3e86446fc422736b07da","size":645,"data":"","first_seen":"2025-06-30T14:55:15.089743Z","last_seen":"2025-11-09T16:43:17.887618Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/bGi-DxR800F5_ueMVcTwXc6q/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5bce9e85f38aa11d35ab51517f8d07e4","sha1":"44102e17b879843f3ce36a51c0f132d11a24588a","sha256":"1a828972d3e667311b0fe5662301cc433f2c5e97d5018cbd331c4c59ad34d311","sha512":"08489944c9e40c9f71bad98402a22467e3de06545feab6314b08a2510224d75eae877604b64bb37f281f3bb5e1408b3a3c2ef71ec9c742120c002fe553b751b0","ssdeep":"12288:l4zpNa1FTCz4BpuKYXsrFoCvL67G1+zEnHYJ7HlEiU9J:OzBkruKYsuyO7G1gs4JBhk","tlshash":"66054ad87112b5e59322b9f2a067201da37ea535c84c4c5eb29588f12ef1c4e70b6ef7","size":824931,"data":"","first_seen":"2025-10-07T06:40:38.110565Z","last_seen":"2026-03-30T18:12:53.501353Z","times_seen":16338,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"push-sdk.com/f/sdk.js?z=1500787","fqdn":"push-sdk.com","domain":"push-sdk.com","tld":"com"},"ip":{"addr":"178.63.248.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4d87b22393ed5eef57d01d86c6a88f6","sha1":"5e1aaee78cd735c23cc423fc863decca30aee219","sha256":"91cf9b34af48f3b62d706127b1140c89d8bb3a5455120acd2cfcfc41ab4ad5ee","sha512":"bba6ac4eafefb3415063cea1a572f7b56625300e5e671bedeb71eee84b72c532bd7815491602cc3a7059a2bfc1ace5a35ff6065709b60bbf9891e3849c82767c","ssdeep":"1536:/7LMSZcnLitlCr8WoeisV69SDG3nY+kH+sYK:/7L1Y2NViBYK","tlshash":"a933818877c6713412a7a4ac056f50daeb2b3c34944e890adc53f3a2297576eef23d74","size":54787,"data":"","first_seen":"2025-04-01T19:54:23.10118Z","last_seen":"2026-04-04T02:03:24.468958Z","times_seen":7948,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ley5moUAAAAAJxloiuF--u_uS28aYUj-0E6tSfZ\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=bGi-DxR800F5_ueMVcTwXc6q\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=jpu8rhsfwtv","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"68302322987585e23fe67bc3771a2a1e","sha1":"9096351bf350e1c82f85c405c2df05bcc46b5634","sha256":"c7091320443cf15cd57f975a93bddde3bb2df0a511acd5f15a383aabfa2d7ac6","sha512":"9821ffec24fc07f4713892a14fb58fb622bf7618b3356f6486572895cf98e4f2348a7e73988f8ac182edf6482f928d6f2f1c3e4e43bc96a557dc619b05b0bb0e","ssdeep":"","tlshash":"3ad0a7eb1442cdf7cda0ddbb9743d1a678efd1b780a981f425e04ca22ee1c9510285ec","size":264,"data":"","first_seen":"2025-03-02T22:52:05.537345Z","last_seen":"2026-04-04T03:45:50.390998Z","times_seen":5513,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/page/11","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"83949792573762da733fca28039776d4","sha1":"9d4f9f81151715cd7c1d66eb689cf29a9d73c4d3","sha256":"ec015db7ec0d21efcf679d129241c125b9e5aa4db8accf192e8bf91a4a35086f","sha512":"f2024df4934d3228dfe0681c5c32f3e48499159e9401d22987e2a5eec222eb090cf46e3474ffdc9fca478be17155712b71ef1bd18e9fdf4b325c46bec83a075f","ssdeep":"","tlshash":"b6a00184beda6152d2b33670a0e72c9ba15568a461088841a208f5692ab28326da66a9","size":71,"data":"","first_seen":"2024-08-22T17:16:37.471808Z","last_seen":"2026-03-23T15:21:39.835939Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.lmofficial.to/script.js","fqdn":"stats.lmofficial.to","domain":"lmofficial.to","tld":"to"},"ip":{"addr":"38.246.114.236","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"14510a5b7aeeaa1060666fd2f1fcda4a","sha1":"9fe250161aac6d93d342fdf97f4a7c59566f16c1","sha256":"a656812a02ca34d8dc65b86430b3434eb5f17e56bd904b4761566cf542d08b55","sha512":"135d932f031243ba24bbb3903f3a928506516ac86f6f2d6cd9b6c99932286c2f67dbfb2b978a8c05e0456c4b8c0aa965ba3a718fbe089cdcc9d6843c849ef2f0","ssdeep":"","tlshash":"e45109f6b2d5b0f13f7438c0c1b9612467290a71782f9091babe1c898b1d81b5132e3c","size":2522,"data":"","first_seen":"2025-07-27T21:31:49.605781Z","last_seen":"2026-04-03T12:22:11.964549Z","times_seen":620,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/page/11","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"529cb6a629864b4319dc53d3f68238b9","sha1":"e9ea9360134e87e9e822d6f5120c31f88db5f7e3","sha256":"2d1973adaa4bf544a889cb5108e318b69e5e995ff07c6e0eead3448279bc3cdf","sha512":"b39c03f130b8fbd6457b1e888f9cef43592f92643921e1b30940b9b2dc93a484ed099fa9ef61e5caabd73c0e5ed41853ecf69dd24df73cdde42b64889860eabb","ssdeep":"","tlshash":"69b012883dd29050cb333170b0b71c07e4937ae010009844a350f05028f3a3278564f9","size":96,"data":"","first_seen":"2024-08-22T17:16:37.484004Z","last_seen":"2026-03-23T15:21:39.809702Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/page/11","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"4b13ebd7bca52812272ffa228e093ade","sha1":"f0250050e4248adf3aaefee1a5937bad368c7482","sha256":"abb639a76534d6716ee636e46119116312a6cb51652eba1c71ba1ad1f1e13705","sha512":"2f88eeef220b6b360ac822f7a294a2e2299d86335e8ab9f654cb6e22df9f090f07b2e312cd97fbd6a3c7729716fbca78b982f615c6bc44087b97e6e3c9002e59","ssdeep":"","tlshash":"e1a012c03cc75051c513303031975c12100124952412c8006310e43736730213d011d9","size":81,"data":"","first_seen":"2024-08-22T17:16:37.487763Z","last_seen":"2026-03-23T15:21:39.826234Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/page/11","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"5d592ebd1387a06bacfd4516914c8c96","sha1":"439677d15d9f72ad1a655c5e5f28d9a510878f33","sha256":"770ae751ad2a2cdd47837cf7e64e7aa4dd4258d5253a6cb1d205488669d10aea","sha512":"9a44a08ef93795fdd1ca00bd45390fc187a5c7b4c33632201c32f2adff6547943556066bda7069c507cbddb84b432e4e1b039de64f90f1752be4323e6dd39e12","ssdeep":"","tlshash":"15a0128c3ed69060c12732f530e30d0650431ce040048d086100f16c3432033e84606c","size":86,"data":"","first_seen":"2024-08-22T17:16:37.475793Z","last_seen":"2026-03-23T15:21:39.827538Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/assets/vendor-24ed5e5a3f933dd90aaca8fb28a5f615.js","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"24ed5e5a3f933dd90aaca8fb28a5f615","sha1":"aa7d3884928c571b363631d7ad575e64c8aa42b3","sha256":"6688d65430a12167920da2f05aca9769087529d2ec7db7a72f5498bbbdc0faa8","sha512":"ac894e208f4461c29308d10ba5df7f9092baae96423df9536ebe16998ff2d953651d424cabfe8c6c73bea3484920b50b875bebeaa538decba6066bda2dee91f3","ssdeep":"1536:NITMFC4dbMVRSGcgRDdUsY7qfIDMIL2u0lgK44R82g9p5q2lMVkxPDs4g2ib8vGH:NVbmwpcPYegDM62uqiq2wkxL+2ibaGea","tlshash":"4cf328997255782653eb21f1113f150bb23b2919e80980acb536e4ee7cb9c4c217bfbd","size":161310,"data":"","first_seen":"2024-08-22T17:16:37.457423Z","last_seen":"2026-03-23T15:21:39.663798Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/page/11","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"873afb88d8253bb0ff5f2baffbc2529b","sha1":"df18b10120ff46fff81eb768d30cf1684eb288e7","sha256":"8e772906e0c78d6549e331bfd51ad5f47fbe5a699874402b7ec5b73e4d8c557f","sha512":"ed279f4d692dfd15b786f371ff8e35b9ce3d9ab45756085de822172ec9ccac6ef4927777b91e4cb2023e6b3a5d11a3c66e9d0c79eedb473f6c9a5cbffb49d10b","ssdeep":"","tlshash":"f8f0e1f320f554574ac803dd278f7f0766c6902b6cd02086c088cc3c1c746b962508b8","size":557,"data":"","first_seen":"2025-09-22T15:37:58.711998Z","last_seen":"2026-02-14T17:35:55.567435Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/page/11","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"4dda1e53380dea56285e3c9c6e925ed5","sha1":"9da3b2d2ef6e33d1931bf0356ba6b7b4345b77aa","sha256":"6f67115c565e435d0cc9081ee6f4f9dd825ce11a10f0cc2d8dc99fa84bc8c03e","sha512":"889fdd7bf30b6e64878a25ace3e73cb4953e8335f40b9c855af1a738ad3d4f9c92f9d060ede7daf08a16768936a365be379ec4d5ff255cad910e510c8a2187f4","ssdeep":"","tlshash":"dba0128434c65040c623313030935c02111524d02830d8405310f41534324213841098","size":75,"data":"","first_seen":"2024-08-22T17:16:37.471839Z","last_seen":"2026-03-23T15:21:39.859947Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/page/11","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"f9bc3c8335536c709264b7bd109faa31","sha1":"778c7f61a9a060288f2fed9052814dd775abc681","sha256":"6a627bd73e43d3e12a524ce2ca058df0387c82179498ad1cb709b2a105965821","sha512":"8bd65a064530775cffa427386cc20d8337a7a4f6781c1482ae2230386026b282224c3aacb2ca76ffcc1c05a9c4666edfc56d4188672f2473a99ebce95bf4fdfa","ssdeep":"","tlshash":"dba022c03ae22080c2333830b0e30c0b30003cf00000cc00e200fab83a33032ec020ac","size":66,"data":"","first_seen":"2024-08-22T17:16:37.457876Z","last_seen":"2026-03-23T15:21:39.847924Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/bGi-DxR800F5_ueMVcTwXc6q/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5bce9e85f38aa11d35ab51517f8d07e4","sha1":"44102e17b879843f3ce36a51c0f132d11a24588a","sha256":"1a828972d3e667311b0fe5662301cc433f2c5e97d5018cbd331c4c59ad34d311","sha512":"08489944c9e40c9f71bad98402a22467e3de06545feab6314b08a2510224d75eae877604b64bb37f281f3bb5e1408b3a3c2ef71ec9c742120c002fe553b751b0","ssdeep":"12288:l4zpNa1FTCz4BpuKYXsrFoCvL67G1+zEnHYJ7HlEiU9J:OzBkruKYsuyO7G1gs4JBhk","tlshash":"66054ad87112b5e59322b9f2a067201da37ea535c84c4c5eb29588f12ef1c4e70b6ef7","size":824931,"data":"","first_seen":"2025-10-07T06:40:38.110565Z","last_seen":"2026-03-30T18:12:53.501353Z","times_seen":16338,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=bGi-DxR800F5_ueMVcTwXc6q\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=3lkmomgdxy2u","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"75a167f5721976a3b19265bd8d7ab0f7","sha1":"04d60ddeb6f566afe9cac2913d30570bf9fd7676","sha256":"f2e158ef9833ed7abacafaba4b57fb4be62d8e56f22784966eb490fa4921363e","sha512":"214170a131cbf9ba32d968654e882fb46e6fe026a1260c16674c58b003f8ce3ecab461cc24d4c573b4475357d3aa5872500e98c479c9626d6034f255a53f3ecb","ssdeep":"384:L7Z1uHCLIruDq//6HNOtIxGke/QnaepZRGlH558:LtEIR7Hw+xGktaest558","tlshash":"298296d872d2b86981b360a1d92f120df3f768105d0c285cf141c6e96e70e9e51eafbb","size":18995,"data":"","first_seen":"2025-10-03T07:25:38.477705Z","last_seen":"2025-10-10T14:48:06.392644Z","times_seen":2483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=bGi-DxR800F5_ueMVcTwXc6q\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=3lkmomgdxy2u","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"08aa8d7a4efa242d3a54b2e22b419120","sha1":"c277355611eb96b97d65a34077e00759cdbc83bc","sha256":"95c4425400d20329df5df5356d3c80fb8d8db876edd77dfd661eef413eace488","sha512":"001f630d8c964014f37ce4e0c79ffbfeb8bfe9c6b83f2fe4bb200dfb4470eebf574661e9e2b1a062a5ad0b7fea5bb49fecd79f3224bb3c8cea43e5a40b5da71a","ssdeep":"384:NZ1uHCLIruDq//6HNO9IxGke/QnaepZRGlH55c:3EIR7HwOxGktaest55c","tlshash":"229296d8f1d2a86981b760b1d92f120db3f76811d90c285cf141c6e92e70e9e51eafb7","size":19943,"data":"","first_seen":"2025-10-08T12:31:01.456952Z","last_seen":"2025-10-08T12:31:01.456952Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/page/11","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"904ab8f26a773d315572381f78e7906f","sha1":"cce0474ccab6ce7fb499bcb754ecc3099bb92812","sha256":"01fb103342a7852fb43a588089af0dcf028fb8f4ecd8f3705b16f642d31972bb","sha512":"95700f23e5dbe6a8116bf670c23b159d5dab7811c52fe441f874b96d58230c9a99d2b2293122e8a4a606dcc069a7a0e5f42737716654b371f3b80fe7804fa69b","ssdeep":"","tlshash":"ecb0128c3dc75080c633317070a75c1755a37aa01800d8449350f41624f3e3178564f8","size":94,"data":"","first_seen":"2024-08-22T17:16:37.465761Z","last_seen":"2026-03-23T15:21:39.822993Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/page/11","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"3e03b94dcdb76c75e408ba25d8cb6894","sha1":"cc55f73b3cda6acce6368085b25465fdb8a40c24","sha256":"727942b7ade3e9626303358e918bec3669e38355c34246c75cd319b25309460f","sha512":"2b26f53dfcaa42e17c2947fc0123125144e85d9380a0cefb58f8b70a53952612dbb1c68737cb08d486a60746b68e4643084e9a3e70e85d42e4566017d6089b53","ssdeep":"","tlshash":"55b012883ec25040c63331b070a72c0754a37aa02000c849d344f06575f7a3178167fc","size":96,"data":"","first_seen":"2024-08-22T17:16:37.508806Z","last_seen":"2026-03-23T15:21:39.840108Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/premium-banner/dragon-left.png","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:29.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/premium-banner/dragon-left.png HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/page/11\r\nCookie: PHPSESSID=oph1a5iau6n3ujf3fnkl69n12u; _csrf=551efa9d1b8b64e3fa214be982477d402dacba5c23550d42c9e751e6ce31ccc5a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22PWg7eZcuKkG2xqXJWl0RTSPz3UzYyzj5%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 12:30:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 55488\r\ncache-control: max-age=604800\r\netag: \"68e50da4-d8c0\"\r\nexpires: Wed, 15 Oct 2025 09:29:51 GMT\r\nlast-modified: Tue, 07 Oct 2025 12:55:00 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55488,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 168 x 169, 8-bit/color RGBA, non-interlaced","md5":"27b58eced56ab01bc779ab815ba962ad","sha1":"78f4dc0198570fee6e943c08d02946ccefe5ed03","sha256":"2fd2daf2d77d850d635baf6ff95cea91d4016cb5c89273b5ab95e45b1a9ad67d","sha512":"bd3bf8fc43d32268a23f4d1ac95e695fd22851284ba70a4eb7ba4d6b05c0546f71b12044bceb31a6756e567964001667e16ddfb79bff52d6bd3a8b40e13f7b77","ssdeep":"1536:T+WNAIs5xJYzmTJYBOBYTqg2F5CxRnLwMS/qtbGf:THNAZtYwJ+OHDkRnWqG","tlshash":"9b430175ad3cd02e650a64246b69d901f3fc69df10b09c8b939c33e506ca8be8456ada","first_seen":"2025-10-08T12:31:01.324602Z","last_seen":"2026-03-23T15:21:39.717717Z","times_seen":8,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dosis/v34/HhyaU5sn9vOmLzloC_U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:29.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/dosis/v34/HhyaU5sn9vOmLzloC_U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ww1.lookmovie.pn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30744\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 07 Oct 2025 15:25:15 GMT\r\nexpires: Wed, 07 Oct 2026 15:25:15 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 17:03:39 GMT\r\ncontent-type: font/woff2\r\nage: 75915\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30744,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30744, version 1.0","md5":"87bc734caa77a6aa60700bab80b18f44","sha1":"3d65ee80d4a6cf3a4d435dc8327dc97ea8be3511","sha256":"1db3f2316b3766392a12f4a4e88221e3ce9e70b170fa4390994c47a9db10352e","sha512":"7d4a224248447a3f5cc12e592c393f2a69dc5bb8c56c3f8ecdb0bbe4a334ce708915339503afdebf6d4550de1df7a6a64feca7bc2b31030cb6ea030a67c34bd2","ssdeep":"768:/8sHNQDk7eXaE/AFBdtU5WxXCF9CvyMGHNfkqSrM4D0AvO0l:nHNI7XqrtU5OXCmwHqqSrjDvBl","tlshash":"a8d2f130c98b6d597b971c7db823156ecdbeb40d5fa78ee01c062e38a0afd150712a38","first_seen":"2025-06-03T03:08:20.355522Z","last_seen":"2026-04-04T01:19:31.617088Z","times_seen":2419,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":133,"dns":4,"connect":7,"send":0,"wait":67,"receive":5,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:29.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ww1.lookmovie.pn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:45:39 GMT\r\nexpires: Fri, 02 Oct 2026 12:45:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 517491\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-04-04T04:46:10.188102Z","times_seen":203464,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":109,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=bGi-DxR800F5_ueMVcTwXc6q\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=3lkmomgdxy2u","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:30.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:18 GMT","end":"Mon, 08 Dec 2025 08:34:17 GMT"},"fingerprint":{"sha1":"33:09:D4:D3:61:83:44:73:CF:04:5A:44:53:2E:B5:36:64:BB:FC:7F","sha256":"86:F0:16:7D:8B:24:BC:17:6C:2B:06:E6:05:A6:33:43:10:A0:61:A6:BA:81:FB:58:ED:0A:DC:0B:AE:5D:08:C6"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=bGi-DxR800F5_ueMVcTwXc6q\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=3lkmomgdxy2u HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 08 Oct 2025 12:30:30 GMT\r\ncontent-security-policy: script-src 'nonce-mfJJzg7VwV1O3caIYtHANA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":78221,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (56645)","md5":"84bf73fbc041ab1b155a406e34328ce1","sha1":"d99e887c185b899c3b6a01a383cdd7c9f14d864e","sha256":"d16fa300ae5f80469632042d7819897b171d8bae0aadf73f6dc778d28a5115c8","sha512":"9c4df2c2eb9b1a7aedaffcf7549c0e3f4a6a578adbfa9f51412bad70f41b91aa5cfee979f0a1a1f5b9ad15234c6c1ffa5c0a589c9b6f86cfa8c588ba6d2b1c37","ssdeep":"1536:/9/C+76jn/QpNevXapphOgzypYjJHhp6Wr8RQnt/fHrP5BnNGLwq9o:/NO/QKXQOgeCHx8O/TMwqS","tlshash":"0673ae17c853a09adfb74e8127e2aa39623e9146319344ad27ff14e19d7bcd352683cc","first_seen":"2025-10-08T12:31:01.332715Z","last_seen":"2025-10-08T12:31:01.332715Z","times_seen":1,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/bGi-DxR800F5_ueMVcTwXc6q/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=bGi-DxR800F5_ueMVcTwXc6q\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=3lkmomgdxy2u","date":"2025-10-08T12:30:31.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /recaptcha/releases/bGi-DxR800F5_ueMVcTwXc6q/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 352219\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 08 Oct 2025 10:10:21 GMT\r\nexpires: Thu, 08 Oct 2026 10:10:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 06 Oct 2025 04:00:11 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 8410\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":824931,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"5bce9e85f38aa11d35ab51517f8d07e4","sha1":"44102e17b879843f3ce36a51c0f132d11a24588a","sha256":"1a828972d3e667311b0fe5662301cc433f2c5e97d5018cbd331c4c59ad34d311","sha512":"08489944c9e40c9f71bad98402a22467e3de06545feab6314b08a2510224d75eae877604b64bb37f281f3bb5e1408b3a3c2ef71ec9c742120c002fe553b751b0","ssdeep":"12288:l4zpNa1FTCz4BpuKYXsrFoCvL67G1+zEnHYJ7HlEiU9J:OzBkruKYsuyO7G1gs4JBhk","tlshash":"66054ad87112b5e59322b9f2a067201da37ea535c84c4c5eb29588f12ef1c4e70b6ef7","first_seen":"2025-10-07T06:40:38.110565Z","last_seen":"2026-03-30T18:12:53.501353Z","times_seen":16338,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:29.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"54:09:EF:2E:96:03:5C:86:DF:F0:DA:AC:A6:7A:0D:35:49:4E:68:90","sha256":"0E:84:83:07:1D:C1:46:17:EB:EA:2F:15:CE:88:56:D2:FF:9E:AE:31:D2:C3:FC:DA:00:24:46:48:43:CD:11:1F"}}},"request":{"raw":"GET /css2?family=Poppins:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 08 Oct 2025 12:30:29 GMT\r\ndate: Wed, 08 Oct 2025 12:30:29 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5993,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9c51d4ed0528132b3a6be429dca636b5","sha1":"18cc681e66f5b6696a4ff89774e53aef2a51af00","sha256":"45a8505a86014b27b96db52f81bf4dbced7a8eb9b419d28e89bcfccb334b49b2","sha512":"3fa61799ef336da5f4c9a0a0fcf7d14fdb09e2e18cbc1488eae44a06b61beca3831c9eadd77b22a16a84e8041074d74d51429e23a1a6e8ce9b56860ed682e800","ssdeep":"96:SO1arO1aTJc+ukO1aaN3OEanOEaCJc+ukOEauN3OXa3OXavJc+ukOXaON3OxMac8:4hHdPgKQcXr3lVwa3RzJZ","tlshash":"15c19cd1087be114ab831cc123cf7d36ee1e9255b810e5786bfd0c98adabc654362b2d","first_seen":"2025-09-17T11:27:36.868673Z","last_seen":"2026-04-04T04:07:53.943066Z","times_seen":5610,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":120,"dns":0,"connect":23,"send":0,"wait":66,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/live-chat-icon.png","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:29.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/live-chat-icon.png HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/page/11\r\nCookie: PHPSESSID=oph1a5iau6n3ujf3fnkl69n12u; _csrf=551efa9d1b8b64e3fa214be982477d402dacba5c23550d42c9e751e6ce31ccc5a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22PWg7eZcuKkG2xqXJWl0RTSPz3UzYyzj5%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 12:30:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 2194\r\ncache-control: max-age=604800\r\netag: \"67e28b77-892\"\r\nexpires: Wed, 15 Oct 2025 09:31:47 GMT\r\nlast-modified: Tue, 25 Mar 2025 10:54:47 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2194,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 94, 8-bit colormap, non-interlaced","md5":"37b436241e8dbf1862d3b1155532fadf","sha1":"d23efc5c537550bf91ef3408280412bafa7d7e74","sha256":"be6199623eb7d2e23090b643161c7d644054edb4b4decec3a6d1d5532ecde955","sha512":"72a527e83b4ae3e10c5939f7e756d1fbcd280f3a05ae02d1a8b0958743ef2d693724eab27830a8c4d934ecf95d8bd80353c5000d192ffcede72ce092cefb41f7","ssdeep":"","tlshash":"6341949f474ebc4ed56391105baec4d9610620b651dcf936dc29c9f9b22f0c4d4e2e04","first_seen":"2025-06-30T14:55:15.046994Z","last_seen":"2026-03-19T21:54:20.275958Z","times_seen":22,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/slider-bg.webp","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:29.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/slider-bg.webp HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/assets/all-68a77a7c6b8e9ce10ad35bb20ee11ac0.css\r\nCookie: PHPSESSID=oph1a5iau6n3ujf3fnkl69n12u; _csrf=551efa9d1b8b64e3fa214be982477d402dacba5c23550d42c9e751e6ce31ccc5a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22PWg7eZcuKkG2xqXJWl0RTSPz3UzYyzj5%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 12:30:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 45784\r\netag: \"660e9646-b2d8\"\r\nlast-modified: Thu, 04 Apr 2024 12:00:06 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45784,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x789, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"be6e355750c11159252a9f94b4a08481","sha1":"5505608714e5005039fdee22877ea5811913f5f1","sha256":"47b0a084d29428d691c103d68b8cc73a3c60822713b2637ecacf83c5004b87ac","sha512":"1dd6a6e6b8c8d7242782da1d3d68c1c0aa5024514d40e20b253630f21f78c8e075333d973ef82b07fccf3d45d2add86946ffb5dde4f1d7548fa46ea1e1c82c81","ssdeep":"768:NHk+ARTUbVZT8aJmr5PxRI8lnrT4j6CKSEBIViFJU1Ymz91RwzpUaULzlK:q+gTCjT8d5PEErUGCbE8GZmz9opUb9K","tlshash":"342301e743f009159f0fb79882637fc88361869d17ca8e6186b7475fceec0466a6f4a1","first_seen":"2023-05-21T11:23:07Z","last_seen":"2026-03-23T15:21:39.771596Z","times_seen":55,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ley5moUAAAAAJxloiuF--u_uS28aYUj-0E6tSfZ\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=bGi-DxR800F5_ueMVcTwXc6q\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=jpu8rhsfwtv","date":"2025-10-08T12:30:31.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15344\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:57:38 GMT\r\nexpires: Fri, 02 Oct 2026 12:57:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 516773\r\nlast-modified: Mon, 16 Oct 2017 17:32:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15344, version 1.0","md5":"5d4aeb4e5f5ef754e307d7ffaef688bd","sha1":"06db651cdf354c64a7383ea9c77024ef4fb4cef8","sha256":"3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc","sha512":"7eb7c301df79d35a6a521fae9d3dccc0a695d3480b4d34c7d262dd0c67abec8437ed40e2920625e98aaeafba1d908dec69c3b07494ec7c29307de49e91c2ef48","ssdeep":"384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw","tlshash":"5162e16aef76dc7e4f1af1361c01b45404462290ba6155eff00d6e1d4eed1aff461392","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:45:43.00495Z","times_seen":536037,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/p/w400/5f87ecc1164ec989833e68b968bc9fbf.webp","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:32.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/p/w400/5f87ecc1164ec989833e68b968bc9fbf.webp HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/page/11\r\nCookie: PHPSESSID=oph1a5iau6n3ujf3fnkl69n12u; _csrf=551efa9d1b8b64e3fa214be982477d402dacba5c23550d42c9e751e6ce31ccc5a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22PWg7eZcuKkG2xqXJWl0RTSPz3UzYyzj5%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 12:30:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 35242\r\netag: W/\"89aa-l4pzuhLWtmK10DQxAG7Typzd7X0\"\r\nx-powered-by: Express\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":35242,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3c9780bd6db26846cd37ad3523ed2bf3","sha1":"978a73ba12d6b662b5d03431006ed3ca9cdded7d","sha256":"35078891d1b88bec896736fb416381a524943d2343ad1ecd545ef39d9e785535","sha512":"19b6be9b4528a7fe2e3b7bcd0cd608f57477f8d1f05baf41968b1cca45c4072b2f5352f575055f9b76048cc6e49725147551ceb56290eeba6ac7c10e7f3bcde8","ssdeep":"768:9Sz0nOOZ12gc3CSceYYR70734EzeMvVwBTmFeClkksFsf:9Sz0n3kzSSceYYRwsVMm5mFehkJ","tlshash":"1bf2e1172a302e3d2c5a157d3f129821b5b4c72cfe9b23985f0e8a959d5a10f077f24e","first_seen":"2025-10-08T12:31:01.345536Z","last_seen":"2025-10-08T12:51:28.01004Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/b/w1280/dc894597e35645d7acc5cf2128676f13.webp","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:37.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/b/w1280/dc894597e35645d7acc5cf2128676f13.webp HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/page/11\r\nCookie: PHPSESSID=oph1a5iau6n3ujf3fnkl69n12u; _csrf=551efa9d1b8b64e3fa214be982477d402dacba5c23550d42c9e751e6ce31ccc5a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22PWg7eZcuKkG2xqXJWl0RTSPz3UzYyzj5%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 12:30:37 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28464\r\netag: W/\"6f30-00swSABBJWRYTWwWRn7Rtq+XBoo\"\r\nx-powered-by: Express\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":28464,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8d8a902bb4efe14a37a5ce0f1ffc1eea","sha1":"d34b304800412564584d6c16467ed1b6af97068a","sha256":"942d9faabd487e286a98519654548a49d0bc644dc763597681d516a87786f752","sha512":"64216ca54ceeba009fd774b1b726bd33e5123e30536bbbe749525bcd52a412ab66f337e5faa8cfa4788941aa4257d7e0d78b1461c2f13992bff336bce4362eb8","ssdeep":"768:9bruRiueuwbKmqfrbNAfSUDUNZkxdP0wZzpwedDPRY:E1wbmfrBAfSUAyT0OXdrRY","tlshash":"dfd2f15aeb681accc39f9af66bb4f40745297f2447b83816efc02c6d09c86490d5167f","first_seen":"2025-10-08T12:31:01.348684Z","last_seen":"2025-10-08T12:52:38.514563Z","times_seen":3,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:29.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ww1.lookmovie.pn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7840\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 10:13:43 GMT\r\nexpires: Fri, 02 Oct 2026 10:13:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 526607\r\nlast-modified: Mon, 15 Sep 2025 16:35:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7840,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7840, version 1.0","md5":"8d91ec1ca2d8b56640a47117e313a3e9","sha1":"a9e9bafe64666f4595051a0e895b47a5fa39e67e","sha256":"78bc3aa78faec288bbb3bf26c9a0fa4eb67b1e69da94a17233c5cab60525efdb","sha512":"bd3a864bd45f39ee83ee79ba4469a156ad8ff3dd33d8aae11e3edd97b29c2ef7f610ac851726041251e34b0108f618a2f945038bf6c0de9a7982e0d643cdfcfb","ssdeep":"192:S5upwnqrBHPLA3J73KAQDPh50uFdXrnpjDS7LjvQnRb:S5ELrBvLA3J76AIPhi+vXwzQnRb","tlshash":"68f19de0200937e4f73d5feee6276b7f2e2edb05e25305aa7556014c69de39310d21a2","first_seen":"2023-04-06T21:42:41Z","last_seen":"2026-04-04T04:42:24.410845Z","times_seen":56656,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":166,"dns":3,"connect":25,"send":0,"wait":22,"receive":1,"ssl":134},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"push-sdk.com/event?z=1500787","fqdn":"push-sdk.com","domain":"push-sdk.com","tld":"com"},"ip":{"addr":"178.63.248.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:30.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"push-sdk.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 11:06:22 GMT","end":"Tue, 25 Nov 2025 11:06:21 GMT"},"fingerprint":{"sha1":"BD:DD:75:88:5F:0F:2F:A6:EA:FF:1B:29:49:86:BB:EC:C1:90:4A:79","sha256":"89:8C:73:02:C1:8B:65:46:0D:EE:E7:41:24:34:AE:25:5A:28:56:20:4F:E2:7C:EB:1C:D8:91:6C:BC:2A:16:12"}}},"request":{"raw":"POST /event?z=1500787 HTTP/1.1\r\nHost: push-sdk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 83\r\nOrigin: https://ww1.lookmovie.pn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Wed, 08 Oct 2025 12:30:30 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: https://ww1.lookmovie.pn\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization, X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\ncache-control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store\r\npragma: no-cache\r\nexpires: Tue, 11 Jan 1994 00:00:00 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=bGi-DxR800F5_ueMVcTwXc6q\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=3lkmomgdxy2u","date":"2025-10-08T12:30:31.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15344\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:57:38 GMT\r\nexpires: Fri, 02 Oct 2026 12:57:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 516773\r\nlast-modified: Mon, 16 Oct 2017 17:32:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15344, version 1.0","md5":"5d4aeb4e5f5ef754e307d7ffaef688bd","sha1":"06db651cdf354c64a7383ea9c77024ef4fb4cef8","sha256":"3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc","sha512":"7eb7c301df79d35a6a521fae9d3dccc0a695d3480b4d34c7d262dd0c67abec8437ed40e2920625e98aaeafba1d908dec69c3b07494ec7c29307de49e91c2ef48","ssdeep":"384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw","tlshash":"5162e16aef76dc7e4f1af1361c01b45404462290ba6155eff00d6e1d4eed1aff461392","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:45:43.00495Z","times_seen":536037,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.lmofficial.to/script.js","fqdn":"stats.lmofficial.to","domain":"lmofficial.to","tld":"to"},"ip":{"addr":"38.246.114.236","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:29.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmofficial.to","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 15:49:46 GMT","end":"Thu, 23 Oct 2025 15:49:45 GMT"},"fingerprint":{"sha1":"EB:A0:FB:23:50:BF:AD:36:49:AE:70:55:50:B5:25:89:3C:0E:B3:61","sha256":"72:39:1A:53:4E:D1:3D:77:78:A8:81:60:CA:BD:84:DA:35:37:A3:B4:E1:4E:E9:0C:EA:9A:91:74:DA:8B:EE:23"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: stats.lmofficial.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Oct 2025 12:30:29 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-DNS-Prefetch-Control: on\r\nContent-Security-Policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is cloud.umami.is;frame-ancestors 'self'\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: public, max-age=86400, must-revalidate\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 27 Jul 2025 22:26:06 GMT\r\nETag: W/\"9da-1984dfe4430\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2522,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2521)","md5":"14510a5b7aeeaa1060666fd2f1fcda4a","sha1":"9fe250161aac6d93d342fdf97f4a7c59566f16c1","sha256":"a656812a02ca34d8dc65b86430b3434eb5f17e56bd904b4761566cf542d08b55","sha512":"135d932f031243ba24bbb3903f3a928506516ac86f6f2d6cd9b6c99932286c2f67dbfb2b978a8c05e0456c4b8c0aa965ba3a718fbe089cdcc9d6843c849ef2f0","ssdeep":"","tlshash":"e45109f6b2d5b0f13f7438c0c1b9612467290a71782f9091babe1c898b1d81b5132e3c","first_seen":"2025-07-27T21:31:49.605781Z","last_seen":"2026-04-03T12:22:11.964549Z","times_seen":620,"resource_available":true,"data":null}},"time_used":726,"timings":{"blocked":286,"dns":14,"connect":138,"send":0,"wait":139,"receive":1,"ssl":146},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/logo1.webp","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:29.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/logo1.webp HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/page/11\r\nCookie: PHPSESSID=oph1a5iau6n3ujf3fnkl69n12u; _csrf=551efa9d1b8b64e3fa214be982477d402dacba5c23550d42c9e751e6ce31ccc5a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22PWg7eZcuKkG2xqXJWl0RTSPz3UzYyzj5%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 12:30:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10856\r\netag: \"660e9646-2a68\"\r\nlast-modified: Thu, 04 Apr 2024 12:00:06 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10856,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"72d607ac83508d3e1fe32b4a4fa55e86","sha1":"f715a10e0ce897bb7df8952bca4065c25432a785","sha256":"b91a8aa6c2599c106ee7ffb45488cd1bad85572008b05c7c15750e539d69950d","sha512":"338337a01a1ccfebbadb742c4de020f5ff2e9305dba3dd8cf0eb420d55c211f9ad2efc9e54345b738b4ba696d041579a34417d5e6e48aa444090b2d368aa5a2c","ssdeep":"192:nxDYNMtKwb/4/y9r1OTiGf0LGe7inrK6n6oBIbKptU/UTEHsY94OCt:nFYNg7bg69rJGf0LBmeq6oB3U/Uo9hCt","tlshash":"5d22bf7c1d3b1355ea77de349cb02f9dd26d592ccb222b486d302b0512aa4e4748d5df","first_seen":"2023-05-07T19:35:35Z","last_seen":"2026-03-23T15:21:39.743708Z","times_seen":75,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/assets/all-68a77a7c6b8e9ce10ad35bb20ee11ac0.css","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:29.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /assets/all-68a77a7c6b8e9ce10ad35bb20ee11ac0.css HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/page/11\r\nCookie: PHPSESSID=oph1a5iau6n3ujf3fnkl69n12u; _csrf=551efa9d1b8b64e3fa214be982477d402dacba5c23550d42c9e751e6ce31ccc5a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22PWg7eZcuKkG2xqXJWl0RTSPz3UzYyzj5%22%3B%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 12:30:29 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\ncache-control: max-age=604800\r\netag: W/\"68e50e72-6b651\"\r\nexpires: Wed, 15 Oct 2025 09:29:51 GMT\r\nlast-modified: Tue, 07 Oct 2025 12:58:26 GMT\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":439889,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65510), with no line terminators","md5":"68a77a7c6b8e9ce10ad35bb20ee11ac0","sha1":"69143941db6cf2785669d21911fd2683c86e7a1e","sha256":"c482e8e6b76168ebaa0f1d509f986522ad28abc6692e09cb1011b3be09f7ee73","sha512":"4d7ae14ca561377b6c1c37b4f877a7552f4678d7ce9210c4e50973c2491287629015c7dd1b50151c0cb3c51f45f2e6e9055f8ac9273bb8a23941f7ec746b1970","ssdeep":"6144:tF+3OSjtrFvXdZ38p2LUfCqdZ0gWS3Gi5wAzlA+oWUuF783z92jcpD7z+lcv2x2a:tFRiXWUuF783z92yuGYIo","tlshash":"cf94da61e51424edba33c066b7c0bb8d3525f192d6260efef52b605c8ac72d616b3b1c","first_seen":"2025-10-08T12:31:01.357641Z","last_seen":"2025-10-08T12:52:38.511276Z","times_seen":4,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/bGi-DxR800F5_ueMVcTwXc6q/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:30.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /recaptcha/releases/bGi-DxR800F5_ueMVcTwXc6q/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ww1.lookmovie.pn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 352219\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 08 Oct 2025 10:10:21 GMT\r\nexpires: Thu, 08 Oct 2026 10:10:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 06 Oct 2025 04:00:11 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 8409\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":824931,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"5bce9e85f38aa11d35ab51517f8d07e4","sha1":"44102e17b879843f3ce36a51c0f132d11a24588a","sha256":"1a828972d3e667311b0fe5662301cc433f2c5e97d5018cbd331c4c59ad34d311","sha512":"08489944c9e40c9f71bad98402a22467e3de06545feab6314b08a2510224d75eae877604b64bb37f281f3bb5e1408b3a3c2ef71ec9c742120c002fe553b751b0","ssdeep":"12288:l4zpNa1FTCz4BpuKYXsrFoCvL67G1+zEnHYJ7HlEiU9J:OzBkruKYsuyO7G1gs4JBhk","tlshash":"66054ad87112b5e59322b9f2a067201da37ea535c84c4c5eb29588f12ef1c4e70b6ef7","first_seen":"2025-10-07T06:40:38.110565Z","last_seen":"2026-03-30T18:12:53.501353Z","times_seen":16338,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":55,"dns":4,"connect":21,"send":0,"wait":23,"receive":90,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/p/w400/bacaa1f874fe32fc8b39df5dc5bb81c0.webp","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:32.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/p/w400/bacaa1f874fe32fc8b39df5dc5bb81c0.webp HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/page/11\r\nCookie: PHPSESSID=oph1a5iau6n3ujf3fnkl69n12u; _csrf=551efa9d1b8b64e3fa214be982477d402dacba5c23550d42c9e751e6ce31ccc5a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22PWg7eZcuKkG2xqXJWl0RTSPz3UzYyzj5%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 12:30:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19520\r\netag: W/\"4c40-c9NYmmSxH7mamvpPv/4aRYvRzD4\"\r\nx-powered-by: Express\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19520,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d7d7c26d5f9948126f0044440721a784","sha1":"73d3589a64b11fb99a9afa4fbffe1a458bd1cc3e","sha256":"171828e15291bc7d42395cc20b8311ffd8bc902bd1669bfc92e8583304918037","sha512":"964d5d430158f5f04e4e61022648928a94e553d84c909b07a60bc14c1c4c78369e3768e711959154ae3bbc8d462592e14dd572fd0656218985039a1bc72cc0d6","ssdeep":"384:0ok68J02nqyu95kYgs+tR9Kf2z/1ctv1u4AvPB3BmnSQVemexcF:048aV39ngntR9K+z/r4AXmSEemeGF","tlshash":"c292e094af0e159ef9f2bc5c0ce12134d84a78343f22d78096c596223e6307eebd28d6","first_seen":"2025-10-08T12:31:01.359934Z","last_seen":"2025-10-08T12:51:27.98725Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/ft-bg.webp","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:29.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/ft-bg.webp HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/assets/all-68a77a7c6b8e9ce10ad35bb20ee11ac0.css\r\nCookie: PHPSESSID=oph1a5iau6n3ujf3fnkl69n12u; _csrf=551efa9d1b8b64e3fa214be982477d402dacba5c23550d42c9e751e6ce31ccc5a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22PWg7eZcuKkG2xqXJWl0RTSPz3UzYyzj5%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 12:30:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22956\r\netag: \"660e9646-59ac\"\r\nlast-modified: Thu, 04 Apr 2024 12:00:06 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22956,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x426, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d7e8d36e3a04cdee49fd9e453197dc5f","sha1":"2b974a466e166d95e9fed637a7a75034f5ba1648","sha256":"5a79deb011ce6daa86a9a7efd7d788bf63d8b267ac1e2282a71cb49072d93a54","sha512":"92b427bfaaed77e71876cfb98e6e2f1d29ea61f59924ca7e3925aa1af15180bd9371968fb8bdd05cf2e067947ef925b300bcf38b9e1466d041053d5cc7214816","ssdeep":"384:RZ81G9JtrAm0DeTrI1MPqd9uXBE+FOxv94tx8FHAnDHm/k2t6z5wfv/D:RCSxf0us1MCmTQv94tx8+DG/kG6z5Gr","tlshash":"7da2e05f3860f6e0566b3e19624644cb5cc24e74780072e36f59a498afe9f18e3f21a2","first_seen":"2023-05-07T19:35:35Z","last_seen":"2026-03-23T15:21:39.676972Z","times_seen":69,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/p/w400/b8b9df862219704ba4343e163f6fb83a.webp","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:32.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/p/w400/b8b9df862219704ba4343e163f6fb83a.webp HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/page/11\r\nCookie: PHPSESSID=oph1a5iau6n3ujf3fnkl69n12u; _csrf=551efa9d1b8b64e3fa214be982477d402dacba5c23550d42c9e751e6ce31ccc5a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22PWg7eZcuKkG2xqXJWl0RTSPz3UzYyzj5%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 12:30:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26250\r\netag: W/\"668a-MpPnDKyU/qk0UhOjkN6yQ/RSeFE\"\r\nx-powered-by: Express\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26250,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"852c94b93bd893c38b0a23a199587647","sha1":"3293e70cac94fea9345213a390deb243f4527851","sha256":"18b737d8b03cae2e73af6fa6cf749175ec6d39f897e3c7bcf6360c615a1fbeb2","sha512":"a2c842bb4d53cff06be50091e0838a724eeee17df95b55928c09311eef49a725ec4366d47929074b37d3b4f05e6e289a8ea5f8815f1b69164803462b80ade1e0","ssdeep":"384:4+zWDihXK3YEeb60zuv24FunS8IO/Is6cjkAltGAFHSc/nNDHgQC+5LM/5IzXfF6:WDBhq69sfn/IVwIoHvC0L+5KdiqY","tlshash":"b6c2f0ac8ba1b310fac5582ff51d09b59450e6f6e4dcca7128b133712c4d6ae12b4fc4","first_seen":"2025-10-08T12:31:01.36531Z","last_seen":"2025-10-08T12:51:27.98066Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:29.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ww1.lookmovie.pn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:57:50 GMT\r\nexpires: Fri, 02 Oct 2026 12:57:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 516760\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-04-04T04:46:10.184667Z","times_seen":203150,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":85,"dns":1,"connect":24,"send":0,"wait":57,"receive":2,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ley5moUAAAAAJxloiuF--u_uS28aYUj-0E6tSfZ\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=bGi-DxR800F5_ueMVcTwXc6q\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=jpu8rhsfwtv","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:30.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:18 GMT","end":"Mon, 08 Dec 2025 08:34:17 GMT"},"fingerprint":{"sha1":"33:09:D4:D3:61:83:44:73:CF:04:5A:44:53:2E:B5:36:64:BB:FC:7F","sha256":"86:F0:16:7D:8B:24:BC:17:6C:2B:06:E6:05:A6:33:43:10:A0:61:A6:BA:81:FB:58:ED:0A:DC:0B:AE:5D:08:C6"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6Ley5moUAAAAAJxloiuF--u_uS28aYUj-0E6tSfZ\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=bGi-DxR800F5_ueMVcTwXc6q\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=jpu8rhsfwtv HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 08 Oct 2025 12:30:30 GMT\r\ncontent-security-policy: script-src 'nonce-_OBbXPaqzopy9SC958FNZA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7448,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"fb37d81192cd469351aa5251fcf5cc89","sha1":"d313664b707d70454b2d65f5d34987b38bb9b77e","sha256":"f532150664990fb200ec362d173979b9a88ff7845b09cd11e3769b4555be46b2","sha512":"653de3d57f32c3d0bd7ad537f51e3bb104d404fc92d142e00cb8b64dc43de274f6ccaf18cf673de8566460a14ae878148ed7f4873f37b5cdf02952c3f0e4a873","ssdeep":"192:rjK+QK9KyK03XK/KIqKI4Kn7KSKBKC3sKUKoNK8KGnKrKEKT3AKrKFpKeN9fH:C+tI/y6yekn+f8QZRtpGKuBjdu+yP","tlshash":"51e1bc80081a9410ab930cc673cf3e36fd4f51227186c8b6abfd58a8ede7d27925974d","first_seen":"2025-10-08T12:31:01.368915Z","last_seen":"2025-10-08T12:31:01.368915Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/bGi-DxR800F5_ueMVcTwXc6q/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=bGi-DxR800F5_ueMVcTwXc6q\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026bft=0dAFcWeA6rZ6BOgoONWbfrJwq6_EtaA7ghDcCVpMN0WJwOuZ1MDzevgNtOPOqMXvOUjcp2cnreGHRvvJXgRiR_1uVysMqwWJrp7A","date":"2025-10-08T12:30:32.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /recaptcha/releases/bGi-DxR800F5_ueMVcTwXc6q/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42514\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 07 Oct 2025 10:29:29 GMT\r\nexpires: Wed, 07 Oct 2026 10:29:29 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 06 Oct 2025 04:00:11 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 93663\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82951,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1dad30337202f6db53b8d7916218b39a","sha1":"99407cbb64189004ef4c7122251f569fdc2d8d8d","sha256":"60870879fe9da0249afa57c27bc3e76b009269faf9d3c774d63d08bb82a0e0ad","sha512":"9c43c9c9e390a6bda5fa0824e7e691661c265e2c5ba12ee2a1abea4ff74744c92dda1937c7c313edf03509a764c584f14e462ccdaeaf68ab339b911e680d0ad4","ssdeep":"1536:1fGNbFoZJSUYOOaLnAW8+IcTOIsCdthXwW5l1Dx7:1GRFauOxLA/+IcTOsLX1","tlshash":"c4838e7338513b39fc2b9b616186b9edf22cc423e5514bfab5457a20c3db1968253b07","first_seen":"2025-10-07T06:40:38.165447Z","last_seen":"2026-03-30T18:12:53.578199Z","times_seen":16354,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/page/11","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-08T12:30:29.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /page/11 HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 12:30:29 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: no-store, no-cache, must-revalidate\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\nset-cookie: PHPSESSID=oph1a5iau6n3ujf3fnkl69n12u; expires=Thu, 08-Oct-2026 12:30:29 GMT; Max-Age=31536000; path=/; HttpOnly\n_csrf=551efa9d1b8b64e3fa214be982477d402dacba5c23550d42c9e751e6ce31ccc5a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22PWg7eZcuKkG2xqXJWl0RTSPz3UzYyzj5%22%3B%7D; path=/; HttpOnly; SameSite=Lax\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]}],"data":{"size":380720,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (313)","md5":"f3619fc026204c1a218f28f26cdbdb9c","sha1":"1e46c612d0e2962b052dae95c230b62d58a9db4b","sha256":"7b8ecfc3787c21d405e711a412c4f140c3684918ff86a5d7313db7ea6cd04fef","sha512":"e0013300f8d01a59aef14a6f65401e987b68ac48c34f1668dda229b7c4a0aa987b583f8502dc2c48b9c40768021f4472afaa3ea2d8659c656109fa9569c78595","ssdeep":"768:LYnYKlo2SkLjhjGxwY8QyTqaVqHmQ2RbrZlZ7qibzEtgTquorzqNNPsYUaBeE:LkYK6wqxoPVNQ27mGEjyNB3UaBeE","tlshash":"6e848723a4f215bb0953e1c0ba364717aec8d603e60a5290b2fc47cb4fd6f46dd2765a","first_seen":"2025-10-08T12:31:01.372028Z","last_seen":"2025-10-08T12:31:01.372028Z","times_seen":1,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":68,"dns":24,"connect":17,"send":0,"wait":67,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/premium-banner/right-cartoons.png","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:29.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/premium-banner/right-cartoons.png HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/page/11\r\nCookie: PHPSESSID=oph1a5iau6n3ujf3fnkl69n12u; _csrf=551efa9d1b8b64e3fa214be982477d402dacba5c23550d42c9e751e6ce31ccc5a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22PWg7eZcuKkG2xqXJWl0RTSPz3UzYyzj5%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 12:30:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 184800\r\ncache-control: max-age=604800\r\netag: \"68e50da4-2d1e0\"\r\nexpires: Wed, 15 Oct 2025 09:29:51 GMT\r\nlast-modified: Tue, 07 Oct 2025 12:55:00 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":184800,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 264 x 265, 8-bit/color RGBA, non-interlaced","md5":"d24e981df4842a7cbeb8c4ef27e793f1","sha1":"793cd3d8a2b200676a6d852f0a67c6cc61f5b528","sha256":"edf0d742f0d7f293404909a56381d372928c751e4aa1e0ac6cb27dea518868fa","sha512":"3f6abcf7014a6878ebee4c6ff2e2c731d96099832839525f3fdd60c1f86bc4ce4e3c82950b6f5c9b43592785673cb4894b2a25025f60b1eba2190a8c5a9d76d6","ssdeep":"3072:N1IhsvQuohpUE52YDhL2xdJa+UYFctXIXkJ0Y5aIItcSSEsXQ4YuprYr1O8SHQJp:NKyAGyarJaYFaXMk2Y5ytYJe1/DH","tlshash":"fa04227a1abde9e0ddb7c42b830f809055a7cb826f338c75b495af862d2401b0875f59","first_seen":"2025-10-08T12:31:01.374302Z","last_seen":"2026-03-23T15:21:39.77062Z","times_seen":8,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/premium-banner/icons/rounded-heart.svg","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:29.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/premium-banner/icons/rounded-heart.svg HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/page/11\r\nCookie: PHPSESSID=oph1a5iau6n3ujf3fnkl69n12u; _csrf=551efa9d1b8b64e3fa214be982477d402dacba5c23550d42c9e751e6ce31ccc5a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22PWg7eZcuKkG2xqXJWl0RTSPz3UzYyzj5%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 12:30:29 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncache-control: max-age=604800\r\netag: W/\"68e50da4-59d\"\r\nexpires: Wed, 15 Oct 2025 09:29:51 GMT\r\nlast-modified: Tue, 07 Oct 2025 12:55:00 GMT\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1437,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1235e38f979ce6429c48746fb237ff5f","sha1":"aad6fefd9cd735b096417e30990062175f240ed1","sha256":"3123df1befeae3ea72f3b30606a1fa8813cb44be315b23ba714cc92c8ee862a9","sha512":"c28d21f67e1b6fb80260222fc46225997e6c68141d15a86e8c4300b5eddf0361eb37a6ba563cc5cf5a6b622f8edd3a2bca92bb0517f3fa7d0947c06a02d496c6","ssdeep":"","tlshash":"2c2112fb6344e579f406cb60e629d438f5ae317a7359522480f0ef99b1950cec5cde80","first_seen":"2025-10-08T12:31:01.376577Z","last_seen":"2026-03-23T15:21:39.784411Z","times_seen":8,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/assets/all-95a4e9f7a44334777e7bb0710359334a.js","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:29.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /assets/all-95a4e9f7a44334777e7bb0710359334a.js HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/page/11\r\nCookie: PHPSESSID=oph1a5iau6n3ujf3fnkl69n12u; _csrf=551efa9d1b8b64e3fa214be982477d402dacba5c23550d42c9e751e6ce31ccc5a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22PWg7eZcuKkG2xqXJWl0RTSPz3UzYyzj5%22%3B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 12:30:29 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\ncache-control: max-age=604800\r\netag: W/\"68e50e71-3acd3\"\r\nexpires: Wed, 15 Oct 2025 09:29:51 GMT\r\nlast-modified: Tue, 07 Oct 2025 12:58:25 GMT\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":240851,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65361)","md5":"95a4e9f7a44334777e7bb0710359334a","sha1":"8711739b02553f10447a02da82a033d1f48edee1","sha256":"1782296d2bee4597337783e8b9e53dd862758846f7508926d6b333623e63700b","sha512":"a3054753d03338b150e938c26697129928b4213efc0a0e18b45ff3ba4428955099dc4d80035e86c33d5d9af7c92a03182d2640972f67f38771b0187832b446d6","ssdeep":"6144:ay8G6RujcHX6MQ47GKa4++ARbgZsd000iYj4PO4ILXmZItTXp4HDi:aywRuI369+ARMZsd000iY2O4Io8Xp4H2","tlshash":"f334e7dcb2a5b071526771b5503f120bb33b187aa80c9464f179e8e17db8989827bf3d","first_seen":"2025-06-30T14:55:15.047837Z","last_seen":"2025-10-09T14:44:51.974625Z","times_seen":11,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/uploads/drop-icon.png","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:29.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/uploads/drop-icon.png HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/assets/all-68a77a7c6b8e9ce10ad35bb20ee11ac0.css\r\nCookie: PHPSESSID=oph1a5iau6n3ujf3fnkl69n12u; _csrf=551efa9d1b8b64e3fa214be982477d402dacba5c23550d42c9e751e6ce31ccc5a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22PWg7eZcuKkG2xqXJWl0RTSPz3UzYyzj5%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 12:30:29 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":162,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"37d5c3a24983196361e6ce9b1a499464","sha1":"2dd5878df894f3c648e42408879e9a61c112d1b3","sha256":"766c1d6bcb81d3e983fb7adbc19c616d7fc01dafb7893738edc242e2adc59c07","sha512":"cc140d1f61a01ba5f282d682dfeb19229426c7164b147a3031d3b5544c2d7213ce19b075a81d5e00750bdac7b1d9232b8b971e026d838ccae9466523338b09a9","ssdeep":"","tlshash":"eac08c6e2513bd4cc663217432c36490c08b93a7a4ea42228440805331cb2aa8ac7396","first_seen":"2023-11-07T17:46:00Z","last_seen":"2026-04-04T04:09:36.669432Z","times_seen":19660,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/b/w1280/2e8fa387b1d1ed9b428760617703bb32.webp","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:30.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/b/w1280/2e8fa387b1d1ed9b428760617703bb32.webp HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/page/11\r\nCookie: PHPSESSID=oph1a5iau6n3ujf3fnkl69n12u; _csrf=551efa9d1b8b64e3fa214be982477d402dacba5c23550d42c9e751e6ce31ccc5a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22PWg7eZcuKkG2xqXJWl0RTSPz3UzYyzj5%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 12:30:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19614\r\netag: W/\"4c9e-1VvLCAFLQio8ijySjAi313Mhnqw\"\r\nx-powered-by: Express\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19614,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d143833a68a4d253806a118cffdb80b9","sha1":"d55bcb08014b422a3c8a3c928c08b7d773219eac","sha256":"3113cae871302b041c7a7f868efd1884ef17ad0341303266efa92a7e51ae547a","sha512":"a78170a49e9fef444cbc6ac188d75a711fa53738de0e347a08072e209df6a61c876329111419f4942073698381d93f9c8bf9f19372759eb0a5621a20bca2e20e","ssdeep":"384:djmaSBcxjUZLWdgqMONG3BKc3XU+MyP2+4hZ6mwgQUTQbZinV5QP:1maeiUZSdL5c4HhZhQufV5w","tlshash":"8f92e251d85c2c4052dc80e824b679390dea5fda93c751400585bbae44d3be4efa2e96","first_seen":"2025-10-08T12:31:01.381172Z","last_seen":"2025-10-09T14:44:51.973442Z","times_seen":4,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/star.png","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:29.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/star.png HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/page/11\r\nCookie: PHPSESSID=oph1a5iau6n3ujf3fnkl69n12u; _csrf=551efa9d1b8b64e3fa214be982477d402dacba5c23550d42c9e751e6ce31ccc5a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22PWg7eZcuKkG2xqXJWl0RTSPz3UzYyzj5%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 12:30:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 420\r\ncache-control: max-age=604800\r\netag: \"660e9646-1a4\"\r\nexpires: Wed, 15 Oct 2025 09:31:47 GMT\r\nlast-modified: Thu, 04 Apr 2024 12:00:06 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":420,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 18 x 17, 8-bit/color RGBA, non-interlaced","md5":"8928875bd0eb9cdf6a843bc904cf600c","sha1":"32a1f50a29f12233987f2f970959794b67717478","sha256":"d6c54d138d98bd5fd2b30a65455b394545465af2f01d78f3fdf85dc759977923","sha512":"37420a645064d5a22352449699fcee3061a84582f101aa39af6d14301065b7bdb1948d34115f14628cccbc3b1a12c42a37cbd6c007b0a53ddd73eb31bc650920","ssdeep":"","tlshash":"1ce0f1fd8a16bcc9075815614c8b5348f8f70c9d4d6e74344c1cac2829e2b84b5877d9","first_seen":"2023-05-21T11:23:07Z","last_seen":"2026-03-23T15:21:39.659967Z","times_seen":36,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/assets/vendor-24ed5e5a3f933dd90aaca8fb28a5f615.js","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:29.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /assets/vendor-24ed5e5a3f933dd90aaca8fb28a5f615.js HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/page/11\r\nCookie: PHPSESSID=oph1a5iau6n3ujf3fnkl69n12u; _csrf=551efa9d1b8b64e3fa214be982477d402dacba5c23550d42c9e751e6ce31ccc5a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22PWg7eZcuKkG2xqXJWl0RTSPz3UzYyzj5%22%3B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 12:30:29 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\ncache-control: max-age=604800\r\netag: W/\"68e50e75-2761e\"\r\nexpires: Wed, 15 Oct 2025 09:29:51 GMT\r\nlast-modified: Tue, 07 Oct 2025 12:58:29 GMT\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":161310,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31997)","md5":"24ed5e5a3f933dd90aaca8fb28a5f615","sha1":"aa7d3884928c571b363631d7ad575e64c8aa42b3","sha256":"6688d65430a12167920da2f05aca9769087529d2ec7db7a72f5498bbbdc0faa8","sha512":"ac894e208f4461c29308d10ba5df7f9092baae96423df9536ebe16998ff2d953651d424cabfe8c6c73bea3484920b50b875bebeaa538decba6066bda2dee91f3","ssdeep":"1536:NITMFC4dbMVRSGcgRDdUsY7qfIDMIL2u0lgK44R82g9p5q2lMVkxPDs4g2ib8vGH:NVbmwpcPYegDM62uqiq2wkxL+2ibaGea","tlshash":"4cf328997255782653eb21f1113f150bb23b2919e80980acb536e4ee7cb9c4c217bfbd","first_seen":"2024-08-22T17:16:37.457423Z","last_seen":"2026-03-23T15:21:39.663798Z","times_seen":30,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Dosis:300,400,600,700|Nunito:400,600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:29.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"54:09:EF:2E:96:03:5C:86:DF:F0:DA:AC:A6:7A:0D:35:49:4E:68:90","sha256":"0E:84:83:07:1D:C1:46:17:EB:EA:2F:15:CE:88:56:D2:FF:9E:AE:31:D2:C3:FC:DA:00:24:46:48:43:CD:11:1F"}}},"request":{"raw":"GET /css?family=Dosis:300,400,600,700|Nunito:400,600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 08 Oct 2025 12:30:29 GMT\r\ndate: Wed, 08 Oct 2025 12:30:29 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8490,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f510a56ba2344b6f9a605a3ed31c2473","sha1":"ac5f92242d7128cf836d9824da514c1ca9604f1d","sha256":"7925b737eea83356dcc92ba76911c5e9ff2a50a38a214284164338f65e1184bb","sha512":"b3496ad8960fef35cab62b40502e679bf06a211bae7dddf0d63d9082989776d1a7aeb8d5fe6fd694341a76e197511e422d2bc40aa6bce36771435974faf7b658","ssdeep":"192:ctnBySgOBTSqEB1SZrBWEH+yptkUkH0yXLkeH:cRSg/l6DT","tlshash":"0102cd91046ba400eb871dc223ce7e32ed5ea2557454c57daffd4888ec9bc362366b0e","first_seen":"2025-09-22T15:37:58.618477Z","last_seen":"2026-03-23T15:21:39.749238Z","times_seen":23,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:29.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ww1.lookmovie.pn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:44:41 GMT\r\nexpires: Fri, 02 Oct 2026 12:44:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 517549\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-04-04T04:44:45.25066Z","times_seen":295187,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":119,"dns":1,"connect":20,"send":0,"wait":23,"receive":1,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/assets/4c256fd5/fonts/ionicons.ttf?v=2.0.1","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:29.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /assets/4c256fd5/fonts/ionicons.ttf?v=2.0.1 HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/assets/all-68a77a7c6b8e9ce10ad35bb20ee11ac0.css\r\nCookie: PHPSESSID=oph1a5iau6n3ujf3fnkl69n12u; _csrf=551efa9d1b8b64e3fa214be982477d402dacba5c23550d42c9e751e6ce31ccc5a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22PWg7eZcuKkG2xqXJWl0RTSPz3UzYyzj5%22%3B%7D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 12:30:29 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 188508\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\netag: \"68e6368c-2e05c\"\r\nexpires: Wed, 15 Oct 2025 12:30:29 GMT\r\nlast-modified: Wed, 08 Oct 2025 10:01:48 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":188508,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 14 names, Macintosh","md5":"dd4781d1acc57ba4c4808d1b44301201","sha1":"956116ebe4b3a315b1a43009567e6f8ad0a9a720","sha256":"5e700835ec05293a3d0f9e354e7d038319d34521cd279e782198dff6d1dd58f2","sha512":"96ffdedf1fbcd54d957bb218bb6cc8dca1873443f37dc51071c75bbef4698d3b974c9864546614c8e859b6a23f12ad9e54057a08c485a12213ce550f351dd262","ssdeep":"3072:devphGNEm96ksZlU9WZEwXnwY3Xv8KLyVT8s+mW0uu2r9FsysMgWp/:dBEm9Z26kXWb+mN+cp2/","tlshash":"25048e0bf7cfda4bd125a67e44f69b1319a8d0106e2353dbebce364994e76c40c6a0c9","first_seen":"2023-04-08T05:42:46Z","last_seen":"2026-04-04T04:36:04.792224Z","times_seen":2809,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/favicon-16x16.png","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:30.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/page/11\r\nCookie: PHPSESSID=oph1a5iau6n3ujf3fnkl69n12u; _csrf=551efa9d1b8b64e3fa214be982477d402dacba5c23550d42c9e751e6ce31ccc5a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22PWg7eZcuKkG2xqXJWl0RTSPz3UzYyzj5%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 12:30:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 1360\r\ncache-control: max-age=604800\r\netag: \"660e9646-550\"\r\nexpires: Wed, 15 Oct 2025 09:41:12 GMT\r\nlast-modified: Thu, 04 Apr 2024 12:00:06 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1360,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"733b20b53ffbc74cc5dd6b4abd8e6d05","sha1":"3271e2f142f4fd1a5c5f32b5401be31d360bd9d1","sha256":"f9005bac0961a03007c553bf6d2d4638ee3d4d09320ecc08c821798fb17623d9","sha512":"71a3d0d532e9421853048c8406e4c2727002e83318181609e070000cdf781aa27be6cab88b6bb6d2a4e9b3cdfd55208084e273a56c932ea5e31e6d79243c0056","ssdeep":"","tlshash":"d92186cae326b41181ae4dc2ba3271828ba572d7664dcbddea31d010461f63896f6f85","first_seen":"2023-05-07T19:35:35Z","last_seen":"2026-03-23T15:21:39.782293Z","times_seen":81,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/bGi-DxR800F5_ueMVcTwXc6q/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ley5moUAAAAAJxloiuF--u_uS28aYUj-0E6tSfZ\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=bGi-DxR800F5_ueMVcTwXc6q\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=jpu8rhsfwtv","date":"2025-10-08T12:30:31.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /recaptcha/releases/bGi-DxR800F5_ueMVcTwXc6q/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 352219\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 08 Oct 2025 10:10:21 GMT\r\nexpires: Thu, 08 Oct 2026 10:10:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 06 Oct 2025 04:00:11 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 8410\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":824931,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"5bce9e85f38aa11d35ab51517f8d07e4","sha1":"44102e17b879843f3ce36a51c0f132d11a24588a","sha256":"1a828972d3e667311b0fe5662301cc433f2c5e97d5018cbd331c4c59ad34d311","sha512":"08489944c9e40c9f71bad98402a22467e3de06545feab6314b08a2510224d75eae877604b64bb37f281f3bb5e1408b3a3c2ef71ec9c742120c002fe553b751b0","ssdeep":"12288:l4zpNa1FTCz4BpuKYXsrFoCvL67G1+zEnHYJ7HlEiU9J:OzBkruKYsuyO7G1gs4JBhk","tlshash":"66054ad87112b5e59322b9f2a067201da37ea535c84c4c5eb29588f12ef1c4e70b6ef7","first_seen":"2025-10-07T06:40:38.110565Z","last_seen":"2026-03-30T18:12:53.501353Z","times_seen":16338,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/bGi-DxR800F5_ueMVcTwXc6q/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=bGi-DxR800F5_ueMVcTwXc6q","date":"2025-10-08T12:30:31.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /recaptcha/releases/bGi-DxR800F5_ueMVcTwXc6q/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 352219\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 08 Oct 2025 10:10:21 GMT\r\nexpires: Thu, 08 Oct 2026 10:10:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 06 Oct 2025 04:00:11 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 8410\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":824931,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"5bce9e85f38aa11d35ab51517f8d07e4","sha1":"44102e17b879843f3ce36a51c0f132d11a24588a","sha256":"1a828972d3e667311b0fe5662301cc433f2c5e97d5018cbd331c4c59ad34d311","sha512":"08489944c9e40c9f71bad98402a22467e3de06545feab6314b08a2510224d75eae877604b64bb37f281f3bb5e1408b3a3c2ef71ec9c742120c002fe553b751b0","ssdeep":"12288:l4zpNa1FTCz4BpuKYXsrFoCvL67G1+zEnHYJ7HlEiU9J:OzBkruKYsuyO7G1gs4JBhk","tlshash":"66054ad87112b5e59322b9f2a067201da37ea535c84c4c5eb29588f12ef1c4e70b6ef7","first_seen":"2025-10-07T06:40:38.110565Z","last_seen":"2026-03-30T18:12:53.501353Z","times_seen":16338,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.lmofficial.to/api/send","fqdn":"stats.lmofficial.to","domain":"lmofficial.to","tld":"to"},"ip":{"addr":"38.246.114.236","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:32.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmofficial.to","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 15:49:46 GMT","end":"Thu, 23 Oct 2025 15:49:45 GMT"},"fingerprint":{"sha1":"EB:A0:FB:23:50:BF:AD:36:49:AE:70:55:50:B5:25:89:3C:0E:B3:61","sha256":"72:39:1A:53:4E:D1:3D:77:78:A8:81:60:CA:BD:84:DA:35:37:A3:B4:E1:4E:E9:0C:EA:9A:91:74:DA:8B:EE:23"}}},"request":{"raw":"POST /api/send HTTP/1.1\r\nHost: stats.lmofficial.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww1.lookmovie.pn/\r\nContent-Type: application/json\r\nContent-Length: 260\r\nOrigin: https://ww1.lookmovie.pn\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Oct 2025 12:30:32 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: *\r\nAccess-Control-Allow-Methods: GET, DELETE, POST, PUT\r\nAccess-Control-Max-Age: 86400\r\nCache-Control: no-cache\r\nX-DNS-Prefetch-Control: on\r\nContent-Security-Policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is cloud.umami.is;frame-ancestors 'self'\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":419,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"37eae1ed4bb7c4a7050ddbb209f502dd","sha1":"d138bec595212820410d45f3b63c63c9c67be633","sha256":"02d7ffad8343b5a905090c5a3406d2599ed12683ddb08e782122acdac3923f9d","sha512":"e64c9ea9bf23745e6e871fb7f90288d4729511d0281d2b741509762b1d3afc21a3ea50ccbbcde0c6e5a61f37ade7b8cf3c6a1a541bd7c4a3784b8fec9be85a87","ssdeep":"","tlshash":"18e0ab285a8e7eadf46072d4aa49424a4f99c183a8fa01b48cf53114bf32cdb4606659","first_seen":"2025-10-08T12:31:01.390154Z","last_seen":"2025-10-08T12:31:01.390154Z","times_seen":1,"resource_available":false,"data":null}},"time_used":574,"timings":{"blocked":-1,"dns":3,"connect":134,"send":0,"wait":152,"receive":0,"ssl":148},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/p/w400/214acfb434b37660f0aec446145560fd.webp","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:32.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/p/w400/214acfb434b37660f0aec446145560fd.webp HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/page/11\r\nCookie: PHPSESSID=oph1a5iau6n3ujf3fnkl69n12u; _csrf=551efa9d1b8b64e3fa214be982477d402dacba5c23550d42c9e751e6ce31ccc5a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22PWg7eZcuKkG2xqXJWl0RTSPz3UzYyzj5%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 12:30:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12714\r\netag: W/\"31aa-wr7CVzQ76KIAfI5wgP3KGCT2CLI\"\r\nx-powered-by: Express\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":12714,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3ec3f0a61fd0ef7ada706cbcfbb883e6","sha1":"c2bec257343be8a2007c8e7080fdca1824f608b2","sha256":"2d54e138db4483512ea2a613d9b26a2f499b8ac8719ebd23e7aac64b68ac7706","sha512":"2cc57fd143f54e969d7517b90fd686aca6a0f970abcbbe70fa014bef738f4098531d55d5bf41fa0686f34b0ce5ecbd05b3e018d3979781452b047d2fda897a60","ssdeep":"192:mto1T4hzaRY8p6gbTwW+K6rpCf9h6yxLqVkz9lJAvkjNGMDDcWu+SMTYMiRS:mG0zcYagNpCfXtxWVkzXJTUWaMTiRS","tlshash":"1c42c0454d2675ec87c57fe0c1bacd2d24004fc62ad65ec49b50ae9b428f637247384f","first_seen":"2025-10-08T12:31:01.391521Z","last_seen":"2025-10-08T12:51:27.907934Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/clock.png","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:29.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/clock.png HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/page/11\r\nCookie: PHPSESSID=oph1a5iau6n3ujf3fnkl69n12u; _csrf=551efa9d1b8b64e3fa214be982477d402dacba5c23550d42c9e751e6ce31ccc5a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22PWg7eZcuKkG2xqXJWl0RTSPz3UzYyzj5%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 12:30:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 519\r\ncache-control: max-age=604800\r\netag: \"660e9646-207\"\r\nexpires: Wed, 15 Oct 2025 09:31:47 GMT\r\nlast-modified: Thu, 04 Apr 2024 12:00:06 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":519,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"68c0de6a2ea016cee1ad53585811ab5f","sha1":"1cce075f4e02ded0d15374b8a30a210e96edb7ae","sha256":"34a9a4835ebde4574ac07e670c090a0917867089dd289d46d17e40089134242e","sha512":"4bad4bef7c6d32cdd00c32ba512be45956abcf6006281d148368462ce8d2e584db18a4066dbcea8966b31c631aa7557cf4c7290d919e517dd8b6bfb74ca73bd9","ssdeep":"","tlshash":"0ef075c56ec3266fca3f843ed19fa3667d12a8bd25000ccd54a3a87c30dfdb80004612","first_seen":"2023-05-21T11:23:07Z","last_seen":"2026-03-23T15:21:39.698475Z","times_seen":36,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dosis/v34/HhyaU5sn9vOmLzloC_U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:30.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/dosis/v34/HhyaU5sn9vOmLzloC_U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ww1.lookmovie.pn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30744\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 07 Oct 2025 15:25:15 GMT\r\nexpires: Wed, 07 Oct 2026 15:25:15 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 17:03:39 GMT\r\ncontent-type: font/woff2\r\nage: 75915\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30744,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30744, version 1.0","md5":"87bc734caa77a6aa60700bab80b18f44","sha1":"3d65ee80d4a6cf3a4d435dc8327dc97ea8be3511","sha256":"1db3f2316b3766392a12f4a4e88221e3ce9e70b170fa4390994c47a9db10352e","sha512":"7d4a224248447a3f5cc12e592c393f2a69dc5bb8c56c3f8ecdb0bbe4a334ce708915339503afdebf6d4550de1df7a6a64feca7bc2b31030cb6ea030a67c34bd2","ssdeep":"768:/8sHNQDk7eXaE/AFBdtU5WxXCF9CvyMGHNfkqSrM4D0AvO0l:nHNI7XqrtU5OXCmwHqqSrjDvBl","tlshash":"a8d2f130c98b6d597b971c7db823156ecdbeb40d5fa78ee01c062e38a0afd150712a38","first_seen":"2025-06-03T03:08:20.355522Z","last_seen":"2026-04-04T01:19:31.617088Z","times_seen":2419,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=bGi-DxR800F5_ueMVcTwXc6q\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=3lkmomgdxy2u","date":"2025-10-08T12:30:31.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/bGi-DxR800F5_ueMVcTwXc6q/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 16:20:59 GMT\r\nexpires: Thu, 09 Oct 2025 16:20:59 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nage: 504572\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-04-04T04:43:52.005614Z","times_seen":540949,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/assets/vendor-0b877cf9fbfaf139a9d0a99f439b5a5a.css","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:29.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /assets/vendor-0b877cf9fbfaf139a9d0a99f439b5a5a.css HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/page/11\r\nCookie: PHPSESSID=oph1a5iau6n3ujf3fnkl69n12u; _csrf=551efa9d1b8b64e3fa214be982477d402dacba5c23550d42c9e751e6ce31ccc5a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22PWg7eZcuKkG2xqXJWl0RTSPz3UzYyzj5%22%3B%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 12:30:29 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\ncache-control: max-age=604800\r\netag: W/\"68e50e75-1ddb\"\r\nexpires: Wed, 15 Oct 2025 09:29:51 GMT\r\nlast-modified: Tue, 07 Oct 2025 12:58:29 GMT\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7643,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7643), with no line terminators","md5":"0b877cf9fbfaf139a9d0a99f439b5a5a","sha1":"d011e0510399ac6fc6aa5c5efe755553de8c4406","sha256":"50b6247975b3f796c4573e6aeeb4fc5ed0de6b26233e713cec67224ecc646566","sha512":"a5dd405dad6211e23da1abec23350e6d95b6b45d879b523423cf8b281f7f712bb949d682c396ee9bca27dda661e60de0efd2d49d7151f8345e6bf2bac16938cc","ssdeep":"96:jgA6eA2+AbdEK7pcXVxZaIUCNMkSR+Ir9/4OKn5k8HOyLaN7QPSwHYz8oy:jiHc2KxSMr+4qLk8H7L47QPSwHYz8oy","tlshash":"abf134f8a1d5211d4e1ed3320d942ac6293e9c59d4225aede1f7da18e3cb988141ff8f","first_seen":"2025-06-30T14:55:15.031567Z","last_seen":"2026-03-23T15:21:39.705151Z","times_seen":25,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"push-sdk.com/f/sdk.js?z=1500787","fqdn":"push-sdk.com","domain":"push-sdk.com","tld":"com"},"ip":{"addr":"178.63.248.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:29.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"push-sdk.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 11:06:22 GMT","end":"Tue, 25 Nov 2025 11:06:21 GMT"},"fingerprint":{"sha1":"BD:DD:75:88:5F:0F:2F:A6:EA:FF:1B:29:49:86:BB:EC:C1:90:4A:79","sha256":"89:8C:73:02:C1:8B:65:46:0D:EE:E7:41:24:34:AE:25:5A:28:56:20:4F:E2:7C:EB:1C:D8:91:6C:BC:2A:16:12"}}},"request":{"raw":"GET /f/sdk.js?z=1500787 HTTP/1.1\r\nHost: push-sdk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Wed, 08 Oct 2025 12:30:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 15242\r\ncontent-encoding: gzip\r\ncache-control: no-cache, max-age=0, must-revalidate, proxy-revalidate\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":54787,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54745), with no line terminators","md5":"f4d87b22393ed5eef57d01d86c6a88f6","sha1":"5e1aaee78cd735c23cc423fc863decca30aee219","sha256":"91cf9b34af48f3b62d706127b1140c89d8bb3a5455120acd2cfcfc41ab4ad5ee","sha512":"bba6ac4eafefb3415063cea1a572f7b56625300e5e671bedeb71eee84b72c532bd7815491602cc3a7059a2bfc1ace5a35ff6065709b60bbf9891e3849c82767c","ssdeep":"1536:/7LMSZcnLitlCr8WoeisV69SDG3nY+kH+sYK:/7L1Y2NViBYK","tlshash":"a933818877c6713412a7a4ac056f50daeb2b3c34944e890adc53f3a2297576eef23d74","first_seen":"2025-04-01T19:54:23.10118Z","last_seen":"2026-04-04T02:03:24.468958Z","times_seen":7948,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":115,"dns":34,"connect":25,"send":0,"wait":28,"receive":1,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dosis/v34/HhyaU5sn9vOmLzloC_U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:29.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/dosis/v34/HhyaU5sn9vOmLzloC_U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ww1.lookmovie.pn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30744\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 07 Oct 2025 15:25:15 GMT\r\nexpires: Wed, 07 Oct 2026 15:25:15 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 17:03:39 GMT\r\ncontent-type: font/woff2\r\nage: 75915\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30744,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30744, version 1.0","md5":"87bc734caa77a6aa60700bab80b18f44","sha1":"3d65ee80d4a6cf3a4d435dc8327dc97ea8be3511","sha256":"1db3f2316b3766392a12f4a4e88221e3ce9e70b170fa4390994c47a9db10352e","sha512":"7d4a224248447a3f5cc12e592c393f2a69dc5bb8c56c3f8ecdb0bbe4a334ce708915339503afdebf6d4550de1df7a6a64feca7bc2b31030cb6ea030a67c34bd2","ssdeep":"768:/8sHNQDk7eXaE/AFBdtU5WxXCF9CvyMGHNfkqSrM4D0AvO0l:nHNI7XqrtU5OXCmwHqqSrjDvBl","tlshash":"a8d2f130c98b6d597b971c7db823156ecdbeb40d5fa78ee01c062e38a0afd150712a38","first_seen":"2025-06-03T03:08:20.355522Z","last_seen":"2026-04-04T01:19:31.617088Z","times_seen":2419,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":25,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/android-icon-192x192.png","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:30.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /android-icon-192x192.png HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/page/11\r\nCookie: PHPSESSID=oph1a5iau6n3ujf3fnkl69n12u; _csrf=551efa9d1b8b64e3fa214be982477d402dacba5c23550d42c9e751e6ce31ccc5a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22PWg7eZcuKkG2xqXJWl0RTSPz3UzYyzj5%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 12:30:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 11644\r\ncache-control: max-age=604800\r\netag: \"660e9645-2d7c\"\r\nexpires: Wed, 15 Oct 2025 09:33:43 GMT\r\nlast-modified: Thu, 04 Apr 2024 12:00:05 GMT\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11644,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"3a60f6127d6c7e4c05e4984679c2e923","sha1":"9271ccd51604b6f88cd9f806dab113a3a149a9d7","sha256":"a83e583931d4d3e34189732010661b00c11ad1cb6455da23032d957269a39026","sha512":"3a0ddf32720e4b19aa2d969061a6f2ebb99c9c49b0328321fd0bb138ec6d49d479b92c1e8aee5bf555cef6de639a499d1a84ff4b35c1cadaba63c2c78dd5e1a0","ssdeep":"192:ZRBnpbXTI/d1dnB6yK2cu4VSPa6M47V/13rcjz9S8nuBfdfptxqe10pECMwkEek1:/XC16lw4VSPa6VR/1IjxJnIOe1JCVem","tlshash":"7132afcbc3857eab46c016a7ddd775d3938ddbc4aa73a0443108f59869a0f4a7b7901c","first_seen":"2023-05-07T19:35:35Z","last_seen":"2026-03-23T15:21:39.705754Z","times_seen":80,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=bGi-DxR800F5_ueMVcTwXc6q","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=bGi-DxR800F5_ueMVcTwXc6q\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=3lkmomgdxy2u","date":"2025-10-08T12:30:31.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:18 GMT","end":"Mon, 08 Dec 2025 08:34:17 GMT"},"fingerprint":{"sha1":"33:09:D4:D3:61:83:44:73:CF:04:5A:44:53:2E:B5:36:64:BB:FC:7F","sha256":"86:F0:16:7D:8B:24:BC:17:6C:2B:06:E6:05:A6:33:43:10:A0:61:A6:BA:81:FB:58:ED:0A:DC:0B:AE:5D:08:C6"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=bGi-DxR800F5_ueMVcTwXc6q HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=bGi-DxR800F5_ueMVcTwXc6q\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=3lkmomgdxy2u\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Wed, 08 Oct 2025 12:30:31 GMT\r\ndate: Wed, 08 Oct 2025 12:30:31 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"490babe8a94aa3f4de88d222cfc7ecbc","sha1":"c765a73f577ff7011fcdfc15bff3bec5a436a7bc","sha256":"d8a123e769b7af496332c2bf1e93af5b0dc071bc9b84ec3a13213f4f76180351","sha512":"294f4f9c9051788d2b1ca967cbb1ada2568cf73b3385a0e1b035b7a25e241095ba76888cedab2255011acca04f8c09ab892cddb581e911b343ad1315fe6c0b4b","ssdeep":"","tlshash":"c8b012370910c51c4c000206c867a7f9f0018424e79090f5907d0fd587641b38002714","first_seen":"2025-10-07T06:40:38.151057Z","last_seen":"2025-11-24T07:53:44.502854Z","times_seen":13551,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=bGi-DxR800F5_ueMVcTwXc6q\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026bft=0dAFcWeA6rZ6BOgoONWbfrJwq6_EtaA7ghDcCVpMN0WJwOuZ1MDzevgNtOPOqMXvOUjcp2cnreGHRvvJXgRiR_1uVysMqwWJrp7A","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:32.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:18 GMT","end":"Mon, 08 Dec 2025 08:34:17 GMT"},"fingerprint":{"sha1":"33:09:D4:D3:61:83:44:73:CF:04:5A:44:53:2E:B5:36:64:BB:FC:7F","sha256":"86:F0:16:7D:8B:24:BC:17:6C:2B:06:E6:05:A6:33:43:10:A0:61:A6:BA:81:FB:58:ED:0A:DC:0B:AE:5D:08:C6"}}},"request":{"raw":"GET /recaptcha/api2/bframe?hl=en\u0026v=bGi-DxR800F5_ueMVcTwXc6q\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026bft=0dAFcWeA6rZ6BOgoONWbfrJwq6_EtaA7ghDcCVpMN0WJwOuZ1MDzevgNtOPOqMXvOUjcp2cnreGHRvvJXgRiR_1uVysMqwWJrp7A HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 08 Oct 2025 12:30:32 GMT\r\ncontent-security-policy: script-src 'nonce-MTuz2oECSe2a7_qBtw-Kag' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7623,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"49804a8a34c26248bf10784bca79bbcc","sha1":"15bb0f5f41bcd952f781aaa19f14c539c25a0726","sha256":"760eded860b6069c22605ddd371ed9914ce103ccce38f221729f913f66bf1e9f","sha512":"ac0bf90948082a56826cd2e39d9a9bb4083405d5fb41839ad3816a8d57ecb482fec1830fd3d577615d826ac66e0f76aa1f8ed81af0efbf06f83be6f950a68d91","ssdeep":"192:NjK+QK9KyK03XK/KIqKI4Kn7KSKBKC3sKUKoNK8KGnKrKEKT3AKrKFpKejalw:M+tI/y6yekn+f8QZRtpGKuBjdu+gSw","tlshash":"15f19b90081a9400ab930cd273cf3e36ed4f51167146c8b6affe58a8eee7d27925974d","first_seen":"2025-10-08T12:31:01.398571Z","last_seen":"2025-10-08T12:31:01.398571Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/p/w400/947e6bfcf1a3384c944718cc6450e7c7.webp","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:32.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/p/w400/947e6bfcf1a3384c944718cc6450e7c7.webp HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/page/11\r\nCookie: PHPSESSID=oph1a5iau6n3ujf3fnkl69n12u; _csrf=551efa9d1b8b64e3fa214be982477d402dacba5c23550d42c9e751e6ce31ccc5a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22PWg7eZcuKkG2xqXJWl0RTSPz3UzYyzj5%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 12:30:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 57006\r\netag: W/\"deae-PGVSxfDzoh12RW/0epKUPDffQvA\"\r\nx-powered-by: Express\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57006,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"02723e18d9e635f876ae460c6e50ad7b","sha1":"3c6552c5f0f3a21d76456ff47a92943c37df42f0","sha256":"9d03dfb97939442d26dedd530b896cf45d235af684fc341c4648407f62ea3a31","sha512":"9dcdbcc28777c7ed0e3140aa4e8dca201d9fdfda359de1a03da4ed48682d9b441af0be1e32a503ceae817a6c54a5ea53c0e54cc1858fd73f30a5e4ef26feecf2","ssdeep":"1536:xZ3w8QLMJJOXcol4ANHOiz1rg7UbVP1QcI4tZFNtb2:73HQLMSbvZOiz5g4d2cIuZFHS","tlshash":"3d4301e5904cce3c7606dc24b3a310e5908f4471b2879b39de2a84bef6b5956caf44de","first_seen":"2025-10-08T12:31:01.399988Z","last_seen":"2025-10-08T12:51:28.012643Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?onload=onRecaptchaLoaded\u0026render=6Ley5moUAAAAAJxloiuF--u_uS28aYUj-0E6tSfZ","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:29.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:37:19 GMT","end":"Mon, 08 Dec 2025 08:37:18 GMT"},"fingerprint":{"sha1":"71:09:AD:C8:6A:D2:25:DB:C9:D9:5E:5B:C1:06:E1:0D:D6:39:D6:F0","sha256":"A9:72:F7:39:49:86:27:92:AA:EE:65:04:99:A9:0E:A8:02:70:01:E6:72:46:C2:FB:DC:5E:5E:6B:DC:B8:27:A0"}}},"request":{"raw":"GET /recaptcha/api.js?onload=onRecaptchaLoaded\u0026render=6Ley5moUAAAAAJxloiuF--u_uS28aYUj-0E6tSfZ HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Wed, 08 Oct 2025 12:30:29 GMT\r\ndate: Wed, 08 Oct 2025 12:30:29 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1152,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1152), with no line terminators","md5":"91b08a3d51c333b1fff7c9d56a4c3f5c","sha1":"58c4f549978309dcbec1e0d577101edbb057910a","sha256":"2d972145025973766eae525059b1bd3c1508d7256467fe0125ff7655b18b8680","sha512":"345e713c36e73ddde4834c80aef364188d677743a7da37ac65fa5c4e820a090d7d6b66711665dcfb275dceaad6b13001ab64cae0e8324c39406f9237cd89ff2d","ssdeep":"","tlshash":"e32130762b09e03d4b7219d1b1fedbb1e881740db11844dcb542dac42ebaccbce00549","first_seen":"2025-10-08T12:31:01.40137Z","last_seen":"2025-10-09T14:44:51.992034Z","times_seen":5,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":110,"dns":0,"connect":23,"send":0,"wait":35,"receive":0,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/premium-banner/icons/rounded-rating.svg","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:29.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/premium-banner/icons/rounded-rating.svg HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/page/11\r\nCookie: PHPSESSID=oph1a5iau6n3ujf3fnkl69n12u; _csrf=551efa9d1b8b64e3fa214be982477d402dacba5c23550d42c9e751e6ce31ccc5a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22PWg7eZcuKkG2xqXJWl0RTSPz3UzYyzj5%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 12:30:29 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncache-control: max-age=604800\r\netag: W/\"68e50da4-87e\"\r\nexpires: Wed, 15 Oct 2025 09:29:51 GMT\r\nlast-modified: Tue, 07 Oct 2025 12:55:00 GMT\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2174,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aa9cbe7d66628f12b61ded2059c3c570","sha1":"ee605d2d726eb377b16ce58b245d52ee6291485b","sha256":"ebec674ffc2237f5049dcca87d486059025d1df71df5ccd24eebf0a2ef66fb1d","sha512":"6fdf6558d99c3dbecb4dc8104e7357c72a25dc40a6ce68b2ac944552131b10494ff9f880f7d71cfb2712e27bdcdbcaade564322e37f4bfea9fa111eaf61c3655","ssdeep":"","tlshash":"334134f2a2ccb6b99107ebb0c9200275b5df3c7a3b9863058391dfd5f215094889dec8","first_seen":"2025-10-08T12:31:01.40259Z","last_seen":"2026-03-23T15:21:39.699179Z","times_seen":8,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/premium-banner/icons/heart.svg","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:29.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/premium-banner/icons/heart.svg HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/page/11\r\nCookie: PHPSESSID=oph1a5iau6n3ujf3fnkl69n12u; _csrf=551efa9d1b8b64e3fa214be982477d402dacba5c23550d42c9e751e6ce31ccc5a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22PWg7eZcuKkG2xqXJWl0RTSPz3UzYyzj5%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 12:30:29 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncache-control: max-age=604800\r\netag: W/\"68e50da4-462\"\r\nexpires: Wed, 15 Oct 2025 09:29:51 GMT\r\nlast-modified: Tue, 07 Oct 2025 12:55:00 GMT\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1122,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f3f0423a57a4d73bca0c291118336ab5","sha1":"8cdec3d7d748f9a4f9a29ae961e3e241c27f5ae2","sha256":"8b11843d103a2c4fbeffedbf8393949ac0bab462f0010a8e4959f42c16cfeb15","sha512":"c3d70da31a12885f457c0bd875bc0c5bab15ec8045359a3e31675fb499c32cbf187a4ae8f308271d633862e79ecc210fcbed30ca2a68b3b7f2b6d6d96f269db6","ssdeep":"","tlshash":"742123ed97cc80dd910f8f80c0376469595a4cf27f8697928ed0716021276e6c197efd","first_seen":"2025-10-08T12:31:01.404229Z","last_seen":"2026-03-23T15:21:39.739206Z","times_seen":8,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:29.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ww1.lookmovie.pn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 10:18:14 GMT\r\nexpires: Fri, 02 Oct 2026 10:18:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 526336\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-04-04T04:47:32.143591Z","times_seen":16050,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":105,"dns":0,"connect":0,"send":0,"wait":44,"receive":14,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:30.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ww1.lookmovie.pn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 10:18:14 GMT\r\nexpires: Fri, 02 Oct 2026 10:18:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 526336\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-04-04T04:47:32.143591Z","times_seen":16050,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.lmofficial.to/api/send","fqdn":"stats.lmofficial.to","domain":"lmofficial.to","tld":"to"},"ip":{"addr":"38.246.114.236","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:31.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmofficial.to","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 15:49:46 GMT","end":"Thu, 23 Oct 2025 15:49:45 GMT"},"fingerprint":{"sha1":"EB:A0:FB:23:50:BF:AD:36:49:AE:70:55:50:B5:25:89:3C:0E:B3:61","sha256":"72:39:1A:53:4E:D1:3D:77:78:A8:81:60:CA:BD:84:DA:35:37:A3:B4:E1:4E:E9:0C:EA:9A:91:74:DA:8B:EE:23"}}},"request":{"raw":"OPTIONS /api/send HTTP/1.1\r\nHost: stats.lmofficial.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://ww1.lookmovie.pn/\r\nOrigin: https://ww1.lookmovie.pn\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Oct 2025 12:30:32 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: *\r\nAccess-Control-Allow-Methods: GET, DELETE, POST, PUT\r\nAccess-Control-Max-Age: 86400\r\nCache-Control: no-cache\r\nX-DNS-Prefetch-Control: on\r\nContent-Security-Policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is cloud.umami.is;frame-ancestors 'self'\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch\r\nallow: OPTIONS, POST\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":701,"timings":{"blocked":279,"dns":1,"connect":133,"send":0,"wait":139,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/premium-banner/icons/blue-gems.svg","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:29.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/premium-banner/icons/blue-gems.svg HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/page/11\r\nCookie: PHPSESSID=oph1a5iau6n3ujf3fnkl69n12u; _csrf=551efa9d1b8b64e3fa214be982477d402dacba5c23550d42c9e751e6ce31ccc5a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22PWg7eZcuKkG2xqXJWl0RTSPz3UzYyzj5%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 12:30:29 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncache-control: max-age=604800\r\netag: W/\"68e50da4-7f8\"\r\nexpires: Wed, 15 Oct 2025 09:29:51 GMT\r\nlast-modified: Tue, 07 Oct 2025 12:55:00 GMT\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2040,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c271ffaf15d4bae925bc930c853b01a8","sha1":"94a45d8bd1ead6ade4a38bbd8c42dae3c8a3b787","sha256":"b8e7447ddbe4e5bc1bcf8232b0f279412eecb3970e038deccece6c5d9e49cc41","sha512":"eec5cf13a4db6e39dbf2ebe3e5cc8fae81a31563c340b5e09af8b29f302e0373e9cf901cf19d386ea49bf793b52f4179b60ceb04517b2d934c97b08407f75ee3","ssdeep":"","tlshash":"124131eb93486aecf4275b00ed1a3435547e20ff2b98ef9089205e25a2052cde5bbcd0","first_seen":"2025-10-08T12:31:01.406121Z","last_seen":"2026-03-23T15:21:39.716624Z","times_seen":8,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/premium-banner/icons/gems-star.svg","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:29.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/premium-banner/icons/gems-star.svg HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/page/11\r\nCookie: PHPSESSID=oph1a5iau6n3ujf3fnkl69n12u; _csrf=551efa9d1b8b64e3fa214be982477d402dacba5c23550d42c9e751e6ce31ccc5a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22PWg7eZcuKkG2xqXJWl0RTSPz3UzYyzj5%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 12:30:29 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncache-control: max-age=604800\r\netag: W/\"68e50da4-8a1\"\r\nexpires: Wed, 15 Oct 2025 09:29:51 GMT\r\nlast-modified: Tue, 07 Oct 2025 12:55:00 GMT\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2209,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b13d14e8c943844b24b8ae66d94bc94c","sha1":"899746460ff2c084a79a4c35dee188400d324a74","sha256":"432f146426aa83179394b2c155d52dc7b3a3d36a9346e52df2ff2d05b86a6cc5","sha512":"19f9f25e3664334c251447af0e2f05d485e32605ef218afc3e34c4ba198e3bb5666d9e92f3679b125a1f8dd3b6e5415232e1c39b6d37a415e4d86fd689f3e1e3","ssdeep":"","tlshash":"654134fd732895ed76126b00db32353288ae1ca62fcc99d683f7686ba51414dd63bcc4","first_seen":"2025-10-08T12:31:01.407352Z","last_seen":"2026-03-23T15:21:39.706492Z","times_seen":8,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/bGi-DxR800F5_ueMVcTwXc6q/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..\u0026hl=en\u0026v=bGi-DxR800F5_ueMVcTwXc6q\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=3lkmomgdxy2u","date":"2025-10-08T12:30:31.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /recaptcha/releases/bGi-DxR800F5_ueMVcTwXc6q/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42514\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 07 Oct 2025 10:29:29 GMT\r\nexpires: Wed, 07 Oct 2026 10:29:29 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 06 Oct 2025 04:00:11 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 93662\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82951,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1dad30337202f6db53b8d7916218b39a","sha1":"99407cbb64189004ef4c7122251f569fdc2d8d8d","sha256":"60870879fe9da0249afa57c27bc3e76b009269faf9d3c774d63d08bb82a0e0ad","sha512":"9c43c9c9e390a6bda5fa0824e7e691661c265e2c5ba12ee2a1abea4ff74744c92dda1937c7c313edf03509a764c584f14e462ccdaeaf68ab339b911e680d0ad4","ssdeep":"1536:1fGNbFoZJSUYOOaLnAW8+IcTOIsCdthXwW5l1Dx7:1GRFauOxLA/+IcTOsLX1","tlshash":"c4838e7338513b39fc2b9b616186b9edf22cc423e5514bfab5457a20c3db1968253b07","first_seen":"2025-10-07T06:40:38.165447Z","last_seen":"2026-03-30T18:12:53.578199Z","times_seen":16354,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.lookmovie.pn/images/premium-banner/icons/rating-star.svg","fqdn":"ww1.lookmovie.pn","domain":"lookmovie.pn","tld":"pn"},"ip":{"addr":"178.215.227.42","port":443,"asn":16276,"as":"OVH SAS","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.lookmovie.pn/page/11","date":"2025-10-08T12:30:29.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmovie.pn","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 06:20:56 GMT","end":"Sat, 15 Nov 2025 06:20:55 GMT"},"fingerprint":{"sha1":"EF:DB:8A:E2:93:2D:EA:46:24:4C:55:5F:2F:96:42:B5:EA:2B:05:25","sha256":"FA:BE:36:B0:17:36:0D:6C:96:A5:85:50:BF:67:97:98:83:55:C8:95:85:94:20:CA:A4:C1:59:2C:6C:CB:CD:02"}}},"request":{"raw":"GET /images/premium-banner/icons/rating-star.svg HTTP/1.1\r\nHost: ww1.lookmovie.pn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.lookmovie.pn/page/11\r\nCookie: PHPSESSID=oph1a5iau6n3ujf3fnkl69n12u; _csrf=551efa9d1b8b64e3fa214be982477d402dacba5c23550d42c9e751e6ce31ccc5a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22PWg7eZcuKkG2xqXJWl0RTSPz3UzYyzj5%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 12:30:29 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncache-control: max-age=604800\r\netag: W/\"68e50da4-716\"\r\nexpires: Wed, 15 Oct 2025 09:29:51 GMT\r\nlast-modified: Tue, 07 Oct 2025 12:55:00 GMT\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1814,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2f7a3d22c6ea0ff3f55035b6dc0831f7","sha1":"7f005b73ef6c42bbe2b7870b34f26dc1611afe18","sha256":"bda487ab5c43e4a279e4f0c3e54ea4b0a3237eb7434c96d5f1208de69b5243e4","sha512":"aa7c695909070b937d84b9a70d451190cc746f373dd0a6f9e11d1d5b968db3dfb5169820d16628d91620a8e63f63efcc08ef36232c8e26e97e6ffb4418ca5184","ssdeep":"","tlshash":"103131fad3d8a4e9c906cbf0672a2038773f38b327585a69815848f18b6505edd54cc4","first_seen":"2025-10-08T12:31:01.408609Z","last_seen":"2026-03-23T15:21:39.769188Z","times_seen":8,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"ww1.lookmovie.pn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/bGi-DxR800F5_ueMVcTwXc6q/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=bGi-DxR800F5_ueMVcTwXc6q\u0026k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b\u0026bft=0dAFcWeA6rZ6BOgoONWbfrJwq6_EtaA7ghDcCVpMN0WJwOuZ1MDzevgNtOPOqMXvOUjcp2cnreGHRvvJXgRiR_1uVysMqwWJrp7A","date":"2025-10-08T12:30:32.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /recaptcha/releases/bGi-DxR800F5_ueMVcTwXc6q/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 352219\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 08 Oct 2025 10:10:21 GMT\r\nexpires: Thu, 08 Oct 2026 10:10:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 06 Oct 2025 04:00:11 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 8411\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":824931,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"5bce9e85f38aa11d35ab51517f8d07e4","sha1":"44102e17b879843f3ce36a51c0f132d11a24588a","sha256":"1a828972d3e667311b0fe5662301cc433f2c5e97d5018cbd331c4c59ad34d311","sha512":"08489944c9e40c9f71bad98402a22467e3de06545feab6314b08a2510224d75eae877604b64bb37f281f3bb5e1408b3a3c2ef71ec9c742120c002fe553b751b0","ssdeep":"12288:l4zpNa1FTCz4BpuKYXsrFoCvL67G1+zEnHYJ7HlEiU9J:OzBkruKYsuyO7G1gs4JBhk","tlshash":"66054ad87112b5e59322b9f2a067201da37ea535c84c4c5eb29588f12ef1c4e70b6ef7","first_seen":"2025-10-07T06:40:38.110565Z","last_seen":"2026-03-30T18:12:53.501353Z","times_seen":16338,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
