GET ww1.lookmovie.pn/assets/b46c9783/img/icon1.svg
200 OK 799 B URL GET ww1.lookmovie.pn/assets/b46c9783/img/icon1.svg
IP
ASN #214576 Berdiev Ruslan Mukhabatovich
Requested by https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Certificate IssuerLet's Encrypt
Subjectlookmovie.pn
Fingerprint2C:94:ED:3D:94:53:45:DE:47:16:D7:79:5B:BF:59:0A:90:A8:82:01
ValiditySun, 23 Feb 2025 06:43:05 GMT - Sat, 24 May 2025 06:43:04 GMT
File type SVG Scalable Vector Graphics image
Hash 3ccbb52197f57a23fa712dc11632a658
29d55bb8661fee930219c2aeea40f2522caf084c
2b51d317148a603f637e44a5f0fe8e5028acb7bd768ed8721a55f634fbc8515f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/b46c9783/img/icon1.svg HTTP/1.1
Host: ww1.lookmovie.pn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Cookie: PHPSESSID=jllj0evlsp0v1itjd2830sd949; _csrf=0e83313004c623b386e33565b386a1e858532489439a92d14b8055e40b523feca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22Xg00aRtU-tAfmO81Rbgm8-P1Z81ehees%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 29 Mar 2025 22:05:51 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Thu, 27 Mar 2025 15:07:33 GMT
etag: W/"67e569b5-31f"
expires: Thu, 03 Apr 2025 15:07:33 GMT
cache-control: max-age=604800
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
GET www.gstatic.com/recaptcha/releases/hbAq-YhJxOnlU-7cpgBoAJHb/recaptcha__en.js
200 OK 562 kB URL GET www.gstatic.com/recaptcha/releases/hbAq-YhJxOnlU-7cpgBoAJHb/recaptcha__en.js
IP
Requested by https://www.google.com/recaptcha/api2/bframe?hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb&k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B
ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
Size 562 kB (561652 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /recaptcha/releases/hbAq-YhJxOnlU-7cpgBoAJHb/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 221651
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 28 Mar 2025 10:03:30 GMT
expires: Sat, 28 Mar 2026 10:03:30 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 24 Mar 2025 02:01:29 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 129743
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET ww1.lookmovie.pn/assets/b46c9783/fonts/Dosis-SemiBold.woff2
200 OK 37 kB URL GET ww1.lookmovie.pn/assets/b46c9783/fonts/Dosis-SemiBold.woff2
IP
ASN #214576 Berdiev Ruslan Mukhabatovich
Requested by https://ww1.lookmovie.pn/threat-protection?t=49b51f67e94cdc018266c1e17f3b802139f36bce
Certificate IssuerLet's Encrypt
Subjectlookmovie.pn
Fingerprint2C:94:ED:3D:94:53:45:DE:47:16:D7:79:5B:BF:59:0A:90:A8:82:01
ValiditySun, 23 Feb 2025 06:43:05 GMT - Sat, 24 May 2025 06:43:04 GMT
File type Web Open Font Format (Version 2), TrueType, length 37172, version 1.0
Hash 5cba703e91099b27bdf4d41f6f462623
abcb52e46e7a762d71cb08d088e2d57502887ab3
a3f4ba185cbf12e9fc2a11c24d4beca148543993e8766e704e11c3c5861fc479
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/b46c9783/fonts/Dosis-SemiBold.woff2 HTTP/1.1
Host: ww1.lookmovie.pn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ww1.lookmovie.pn/assets/protection-0a5f2cb002e98723ec414d0eae7ef9ff.css
Cookie: PHPSESSID=jllj0evlsp0v1itjd2830sd949; _csrf=0e83313004c623b386e33565b386a1e858532489439a92d14b8055e40b523feca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22Xg00aRtU-tAfmO81Rbgm8-P1Z81ehees%22%3B%7D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 29 Mar 2025 22:05:48 GMT
content-type: application/octet-stream
content-length: 37172
last-modified: Thu, 27 Mar 2025 17:27:07 GMT
etag: "67e58a6b-9134"
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET www.gstatic.com/recaptcha/api2/logo_48.png
200 OK 2.2 kB URL GET www.gstatic.com/recaptcha/api2/logo_48.png
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc3OL0aAAAAAJhbmY4C3GvXoRvHizdk5YKZK7fg&co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..&hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb&size=invisible&cb=9wyrye20m6dr
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B
ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Hash ef9941290c50cd3866e2ba6b793f010d
4736508c795667dcea21f8d864233031223b7832
1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/hbAq-YhJxOnlU-7cpgBoAJHb/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 27 Mar 2025 09:12:16 GMT
expires: Thu, 03 Apr 2025 09:12:16 GMT
cache-control: public, max-age=604800
age: 219213
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET ww1.lookmovie.pn/assets/protection-0a5f2cb002e98723ec414d0eae7ef9ff.css
200 OK 64 kB URL GET ww1.lookmovie.pn/assets/protection-0a5f2cb002e98723ec414d0eae7ef9ff.css
IP
ASN #214576 Berdiev Ruslan Mukhabatovich
Requested by https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Certificate IssuerLet's Encrypt
Subjectlookmovie.pn
Fingerprint2C:94:ED:3D:94:53:45:DE:47:16:D7:79:5B:BF:59:0A:90:A8:82:01
ValiditySun, 23 Feb 2025 06:43:05 GMT - Sat, 24 May 2025 06:43:04 GMT
File type ASCII text, with very long lines (64508), with no line terminators
Hash 0a5f2cb002e98723ec414d0eae7ef9ff
7cd3dd79fd1781bd14661766ba71332ae74f5cbb
22ce5a7ce476791b70e2d4dc92bf71eeab4a180e11cc7d258da4a534ada9d450
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/protection-0a5f2cb002e98723ec414d0eae7ef9ff.css HTTP/1.1
Host: ww1.lookmovie.pn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Cookie: PHPSESSID=jllj0evlsp0v1itjd2830sd949; _csrf=0e83313004c623b386e33565b386a1e858532489439a92d14b8055e40b523feca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22Xg00aRtU-tAfmO81Rbgm8-P1Z81ehees%22%3B%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 29 Mar 2025 22:05:51 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Thu, 27 Mar 2025 17:29:14 GMT
etag: W/"67e58aea-fbfc"
expires: Thu, 03 Apr 2025 17:29:16 GMT
cache-control: max-age=604800
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
GET ww1.lookmovie.pn/assets/b46c9783/img/robot.png
200 OK 220 kB URL GET ww1.lookmovie.pn/assets/b46c9783/img/robot.png
IP
ASN #214576 Berdiev Ruslan Mukhabatovich
Requested by https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Certificate IssuerLet's Encrypt
Subjectlookmovie.pn
Fingerprint2C:94:ED:3D:94:53:45:DE:47:16:D7:79:5B:BF:59:0A:90:A8:82:01
ValiditySun, 23 Feb 2025 06:43:05 GMT - Sat, 24 May 2025 06:43:04 GMT
File type PNG image data, 537 x 537, 8-bit/color RGBA, non-interlaced
Size 220 kB (220322 bytes)
Hash edccd3a3837e2d1855533f05db4e8802
798a611bd5f9794f6323e3ed64e5542bfbce6c9a
1315f406f9ab54d93d7ee9ef7d8265da9d10d6991b16c04b3b2c0547b4b13cba
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/b46c9783/img/robot.png HTTP/1.1
Host: ww1.lookmovie.pn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Cookie: PHPSESSID=jllj0evlsp0v1itjd2830sd949; _csrf=0e83313004c623b386e33565b386a1e858532489439a92d14b8055e40b523feca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22Xg00aRtU-tAfmO81Rbgm8-P1Z81ehees%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 29 Mar 2025 22:05:51 GMT
content-type: image/png
content-length: 220322
last-modified: Thu, 27 Mar 2025 15:07:33 GMT
etag: "67e569b5-35ca2"
expires: Thu, 03 Apr 2025 15:07:33 GMT
cache-control: max-age=604800
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
200 OK 14 kB URL User Request GET ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
IP
ASN #214576 Berdiev Ruslan Mukhabatovich
Certificate IssuerLet's Encrypt
Subjectlookmovie.pn
Fingerprint2C:94:ED:3D:94:53:45:DE:47:16:D7:79:5B:BF:59:0A:90:A8:82:01
ValiditySun, 23 Feb 2025 06:43:05 GMT - Sat, 24 May 2025 06:43:04 GMT
File type HTML document, ASCII text, with very long lines (433)
Hash d77841ed36bfc4dc4fdf09d76143f1a1
45c8113899be2982fc21473e22b2c9a3259ed172
34bb3ced7c3e13c0710d3a2e8e3f2e9a1bd0c687c522cb5416a690a36e7b7b60
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5 HTTP/1.1
Host: ww1.lookmovie.pn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ww1.lookmovie.pn/threat-protection?t=49b51f67e94cdc018266c1e17f3b802139f36bce
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=jllj0evlsp0v1itjd2830sd949; _csrf=0e83313004c623b386e33565b386a1e858532489439a92d14b8055e40b523feca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22Xg00aRtU-tAfmO81Rbgm8-P1Z81ehees%22%3B%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 29 Mar 2025 22:05:51 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
GET ww1.lookmovie.pn/assets/b46c9783/img/bg-image-tiny.png
200 OK 439 kB URL GET ww1.lookmovie.pn/assets/b46c9783/img/bg-image-tiny.png
IP
ASN #214576 Berdiev Ruslan Mukhabatovich
Requested by https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Certificate IssuerLet's Encrypt
Subjectlookmovie.pn
Fingerprint2C:94:ED:3D:94:53:45:DE:47:16:D7:79:5B:BF:59:0A:90:A8:82:01
ValiditySun, 23 Feb 2025 06:43:05 GMT - Sat, 24 May 2025 06:43:04 GMT
File type PNG image data, 1440 x 786, 8-bit colormap, non-interlaced
Size 439 kB (439389 bytes)
Hash f6bb8259d8316e104864b7dff648f81e
4defa9b0f35ed9486262c50e517b27cde735a48d
3c1533a02f9daa8f08308b8398d0c8c63f2176ffc7f882a5335faf2a72e74a91
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/b46c9783/img/bg-image-tiny.png HTTP/1.1
Host: ww1.lookmovie.pn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww1.lookmovie.pn/assets/protection-0a5f2cb002e98723ec414d0eae7ef9ff.css
Cookie: PHPSESSID=jllj0evlsp0v1itjd2830sd949; _csrf=0e83313004c623b386e33565b386a1e858532489439a92d14b8055e40b523feca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22Xg00aRtU-tAfmO81Rbgm8-P1Z81ehees%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 29 Mar 2025 22:05:51 GMT
content-type: image/png
content-length: 439389
last-modified: Thu, 27 Mar 2025 15:07:33 GMT
etag: "67e569b5-6b45d"
expires: Thu, 03 Apr 2025 15:07:33 GMT
cache-control: max-age=604800
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET ww1.lookmovie.pn/assets/protection-0a5f2cb002e98723ec414d0eae7ef9ff.css
200 OK 64 kB URL GET ww1.lookmovie.pn/assets/protection-0a5f2cb002e98723ec414d0eae7ef9ff.css
IP
ASN #214576 Berdiev Ruslan Mukhabatovich
Requested by https://ww1.lookmovie.pn/threat-protection?t=49b51f67e94cdc018266c1e17f3b802139f36bce
Certificate IssuerLet's Encrypt
Subjectlookmovie.pn
Fingerprint2C:94:ED:3D:94:53:45:DE:47:16:D7:79:5B:BF:59:0A:90:A8:82:01
ValiditySun, 23 Feb 2025 06:43:05 GMT - Sat, 24 May 2025 06:43:04 GMT
File type ASCII text, with very long lines (64508), with no line terminators
Hash 0a5f2cb002e98723ec414d0eae7ef9ff
7cd3dd79fd1781bd14661766ba71332ae74f5cbb
22ce5a7ce476791b70e2d4dc92bf71eeab4a180e11cc7d258da4a534ada9d450
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/protection-0a5f2cb002e98723ec414d0eae7ef9ff.css HTTP/1.1
Host: ww1.lookmovie.pn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww1.lookmovie.pn/threat-protection?t=49b51f67e94cdc018266c1e17f3b802139f36bce
Cookie: PHPSESSID=jllj0evlsp0v1itjd2830sd949; _csrf=0e83313004c623b386e33565b386a1e858532489439a92d14b8055e40b523feca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22Xg00aRtU-tAfmO81Rbgm8-P1Z81ehees%22%3B%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 29 Mar 2025 22:05:48 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Thu, 27 Mar 2025 17:29:14 GMT
etag: W/"67e58aea-fbfc"
expires: Thu, 03 Apr 2025 17:29:16 GMT
cache-control: max-age=604800
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
GET www.google.com/recaptcha/api.js?render=6Lc3OL0aAAAAAJhbmY4C3GvXoRvHizdk5YKZK7fg
200 OK 945 B URL GET www.google.com/recaptcha/api.js?render=6Lc3OL0aAAAAAJhbmY4C3GvXoRvHizdk5YKZK7fg
IP
Requested by https://ww1.lookmovie.pn/threat-protection?t=49b51f67e94cdc018266c1e17f3b802139f36bce
Certificate IssuerGoogle Trust Services
Subjectwww.google.com
Fingerprint2F:CC:05:C5:14:C4:CD:A4:26:05:31:F9:67:40:7C:D3:39:74:34:0C
ValidityMon, 10 Mar 2025 08:37:46 GMT - Mon, 02 Jun 2025 08:37:45 GMT
File type JavaScript source, ASCII text, with very long lines (945), with no line terminators
Hash 57a19eb694ccd9e443a82b9bcf7b1d2e
5297d531260a4e4bbcbd6a456bffe3b6387e06ca
caeef08d036c56290e06ea853afe0d8a08e0cce7552868271985aec4af50117d
GET /recaptcha/api.js?render=6Lc3OL0aAAAAAJhbmY4C3GvXoRvHizdk5YKZK7fg HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww1.lookmovie.pn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Sat, 29 Mar 2025 22:05:48 GMT
date: Sat, 29 Mar 2025 22:05:48 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET ww1.lookmovie.pn/android-icon-192x192.png
200 OK 12 kB URL GET ww1.lookmovie.pn/android-icon-192x192.png
IP
ASN #214576 Berdiev Ruslan Mukhabatovich
Requested by https://ww1.lookmovie.pn/threat-protection?t=49b51f67e94cdc018266c1e17f3b802139f36bce
Certificate IssuerLet's Encrypt
Subjectlookmovie.pn
Fingerprint2C:94:ED:3D:94:53:45:DE:47:16:D7:79:5B:BF:59:0A:90:A8:82:01
ValiditySun, 23 Feb 2025 06:43:05 GMT - Sat, 24 May 2025 06:43:04 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Hash 3a60f6127d6c7e4c05e4984679c2e923
9271ccd51604b6f88cd9f806dab113a3a149a9d7
a83e583931d4d3e34189732010661b00c11ad1cb6455da23032d957269a39026
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /android-icon-192x192.png HTTP/1.1
Host: ww1.lookmovie.pn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww1.lookmovie.pn/threat-protection?t=49b51f67e94cdc018266c1e17f3b802139f36bce
Cookie: PHPSESSID=jllj0evlsp0v1itjd2830sd949; _csrf=0e83313004c623b386e33565b386a1e858532489439a92d14b8055e40b523feca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22Xg00aRtU-tAfmO81Rbgm8-P1Z81ehees%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 29 Mar 2025 22:05:48 GMT
content-type: image/png
content-length: 11644
last-modified: Thu, 04 Apr 2024 12:00:05 GMT
etag: "660e9645-2d7c"
expires: Sun, 30 Mar 2025 10:21:00 GMT
cache-control: max-age=604800
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc3OL0aAAAAAJhbmY4C3GvXoRvHizdk5YKZK7fg&co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..&hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb&size=invisible&cb=9wyrye20m6dr
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B
ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 27 Mar 2025 09:18:45 GMT
expires: Fri, 27 Mar 2026 09:18:45 GMT
cache-control: public, max-age=31536000
age: 218824
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
POST www.google.com/recaptcha/api2/clr?k=6Lc3OL0aAAAAAJhbmY4C3GvXoRvHizdk5YKZK7fg
200 OK 0 B URL POST www.google.com/recaptcha/api2/clr?k=6Lc3OL0aAAAAAJhbmY4C3GvXoRvHizdk5YKZK7fg
IP
Requested by https://ww1.lookmovie.pn/threat-protection?t=49b51f67e94cdc018266c1e17f3b802139f36bce
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintB5:4D:C5:27:B4:49:22:F3:21:DF:88:3D:E6:05:D6:A1:02:98:C7:E2
ValidityMon, 10 Mar 2025 08:35:59 GMT - Mon, 02 Jun 2025 08:35:58 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /recaptcha/api2/clr?k=6Lc3OL0aAAAAAJhbmY4C3GvXoRvHizdk5YKZK7fg HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ww1.lookmovie.pn/
Content-Length: 1575
Origin: https://ww1.lookmovie.pn
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/binary
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cross-origin-resource-policy: cross-origin
date: Sat, 29 Mar 2025 22:05:51 GMT
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET ww1.lookmovie.pn/assets/b46c9783/img/icon8.svg
200 OK 1.8 kB URL GET ww1.lookmovie.pn/assets/b46c9783/img/icon8.svg
IP
ASN #214576 Berdiev Ruslan Mukhabatovich
Requested by https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Certificate IssuerLet's Encrypt
Subjectlookmovie.pn
Fingerprint2C:94:ED:3D:94:53:45:DE:47:16:D7:79:5B:BF:59:0A:90:A8:82:01
ValiditySun, 23 Feb 2025 06:43:05 GMT - Sat, 24 May 2025 06:43:04 GMT
File type SVG Scalable Vector Graphics image
Hash 758f075ad175a942df489b40f691aa45
9910191a365eed01d5018519b503ec549159e0ff
d3d6daced02b4818443ac9b7dc3d2b8c18a1e9ec54d1f1b07f36019b5248477f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/b46c9783/img/icon8.svg HTTP/1.1
Host: ww1.lookmovie.pn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Cookie: PHPSESSID=jllj0evlsp0v1itjd2830sd949; _csrf=0e83313004c623b386e33565b386a1e858532489439a92d14b8055e40b523feca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22Xg00aRtU-tAfmO81Rbgm8-P1Z81ehees%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 29 Mar 2025 22:05:51 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Thu, 27 Mar 2025 15:07:33 GMT
etag: W/"67e569b5-6f7"
expires: Thu, 03 Apr 2025 15:07:33 GMT
cache-control: max-age=604800
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL GET fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b&co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..&hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb&size=normal&cb=89rsnfmf4hl7
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B
ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 27 Mar 2025 09:35:39 GMT
expires: Fri, 27 Mar 2026 09:35:39 GMT
cache-control: public, max-age=31536000
age: 217813
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.gstatic.com/recaptcha/releases/hbAq-YhJxOnlU-7cpgBoAJHb/recaptcha__en.js
200 OK 562 kB URL GET www.gstatic.com/recaptcha/releases/hbAq-YhJxOnlU-7cpgBoAJHb/recaptcha__en.js
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b&co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..&hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb&size=normal&cb=89rsnfmf4hl7
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B
ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
Size 562 kB (561652 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /recaptcha/releases/hbAq-YhJxOnlU-7cpgBoAJHb/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 221651
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 28 Mar 2025 10:03:30 GMT
expires: Sat, 28 Mar 2026 10:03:30 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 24 Mar 2025 02:01:29 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 129742
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET ww1.lookmovie.pn/assets/b46c9783/fonts/Dosis-Regular.woff2
200 OK 37 kB URL GET ww1.lookmovie.pn/assets/b46c9783/fonts/Dosis-Regular.woff2
IP
ASN #214576 Berdiev Ruslan Mukhabatovich
Requested by https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Certificate IssuerLet's Encrypt
Subjectlookmovie.pn
Fingerprint2C:94:ED:3D:94:53:45:DE:47:16:D7:79:5B:BF:59:0A:90:A8:82:01
ValiditySun, 23 Feb 2025 06:43:05 GMT - Sat, 24 May 2025 06:43:04 GMT
File type Web Open Font Format (Version 2), TrueType, length 37020, version 1.0
Hash 543e79101c7511e831f2a28ecd1937b3
9d53f72b8d46bf9773adcc4a66ec2a5b8c1c0e88
b596c23b02a2eaebabbc65f4924efa188fd1116f54cbc37a9eca85cf770c1e07
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/b46c9783/fonts/Dosis-Regular.woff2 HTTP/1.1
Host: ww1.lookmovie.pn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ww1.lookmovie.pn/assets/protection-0a5f2cb002e98723ec414d0eae7ef9ff.css
Cookie: PHPSESSID=jllj0evlsp0v1itjd2830sd949; _csrf=0e83313004c623b386e33565b386a1e858532489439a92d14b8055e40b523feca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22Xg00aRtU-tAfmO81Rbgm8-P1Z81ehees%22%3B%7D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 29 Mar 2025 22:05:52 GMT
content-type: application/octet-stream
content-length: 37020
last-modified: Thu, 27 Mar 2025 17:27:07 GMT
etag: "67e58a6b-909c"
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc3OL0aAAAAAJhbmY4C3GvXoRvHizdk5YKZK7fg&co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..&hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb&size=invisible&cb=9wyrye20m6dr
200 OK 73 kB URL GET www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc3OL0aAAAAAJhbmY4C3GvXoRvHizdk5YKZK7fg&co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..&hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb&size=invisible&cb=9wyrye20m6dr
IP
Requested by https://ww1.lookmovie.pn/threat-protection?t=49b51f67e94cdc018266c1e17f3b802139f36bce
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintB5:4D:C5:27:B4:49:22:F3:21:DF:88:3D:E6:05:D6:A1:02:98:C7:E2
ValidityMon, 10 Mar 2025 08:35:59 GMT - Mon, 02 Jun 2025 08:35:58 GMT
File type HTML document, ASCII text, with very long lines (56645)
Hash c6b16922dd4f349f1fb894a10be2b27b
24bb248eb7c59566f5da39e28536f58add3e9594
c1295e58e762f247cfbbac30d3d879ae54dec0821ece327acf95af088685a151
GET /recaptcha/api2/anchor?ar=1&k=6Lc3OL0aAAAAAJhbmY4C3GvXoRvHizdk5YKZK7fg&co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..&hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb&size=invisible&cb=9wyrye20m6dr HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww1.lookmovie.pn/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}, {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 29 Mar 2025 22:05:49 GMT
content-security-policy: script-src 'nonce-sH8DuYmtlTtJ0bWdRRwxAg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET www.gstatic.com/recaptcha/api2/logo_48.png
200 OK 2.2 kB URL GET www.gstatic.com/recaptcha/api2/logo_48.png
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b&co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..&hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb&size=normal&cb=89rsnfmf4hl7
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B
ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Hash ef9941290c50cd3866e2ba6b793f010d
4736508c795667dcea21f8d864233031223b7832
1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/hbAq-YhJxOnlU-7cpgBoAJHb/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 27 Mar 2025 09:12:16 GMT
expires: Thu, 03 Apr 2025 09:12:16 GMT
cache-control: public, max-age=604800
age: 219216
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET ww1.lookmovie.pn/assets/b46c9783/fonts/Dosis-Regular.woff2
200 OK 37 kB URL GET ww1.lookmovie.pn/assets/b46c9783/fonts/Dosis-Regular.woff2
IP
ASN #214576 Berdiev Ruslan Mukhabatovich
Requested by https://ww1.lookmovie.pn/threat-protection?t=49b51f67e94cdc018266c1e17f3b802139f36bce
Certificate IssuerLet's Encrypt
Subjectlookmovie.pn
Fingerprint2C:94:ED:3D:94:53:45:DE:47:16:D7:79:5B:BF:59:0A:90:A8:82:01
ValiditySun, 23 Feb 2025 06:43:05 GMT - Sat, 24 May 2025 06:43:04 GMT
File type Web Open Font Format (Version 2), TrueType, length 37020, version 1.0
Hash 543e79101c7511e831f2a28ecd1937b3
9d53f72b8d46bf9773adcc4a66ec2a5b8c1c0e88
b596c23b02a2eaebabbc65f4924efa188fd1116f54cbc37a9eca85cf770c1e07
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/b46c9783/fonts/Dosis-Regular.woff2 HTTP/1.1
Host: ww1.lookmovie.pn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ww1.lookmovie.pn/assets/protection-0a5f2cb002e98723ec414d0eae7ef9ff.css
Cookie: PHPSESSID=jllj0evlsp0v1itjd2830sd949; _csrf=0e83313004c623b386e33565b386a1e858532489439a92d14b8055e40b523feca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22Xg00aRtU-tAfmO81Rbgm8-P1Z81ehees%22%3B%7D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 29 Mar 2025 22:05:48 GMT
content-type: application/octet-stream
content-length: 37020
last-modified: Thu, 27 Mar 2025 17:27:07 GMT
etag: "67e58a6b-909c"
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET www.google.com/recaptcha/api2/webworker.js?hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb
200 OK 102 B URL GET www.google.com/recaptcha/api2/webworker.js?hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc3OL0aAAAAAJhbmY4C3GvXoRvHizdk5YKZK7fg&co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..&hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb&size=invisible&cb=9wyrye20m6dr
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintB5:4D:C5:27:B4:49:22:F3:21:DF:88:3D:E6:05:D6:A1:02:98:C7:E2
ValidityMon, 10 Mar 2025 08:35:59 GMT - Mon, 02 Jun 2025 08:35:58 GMT
File type ASCII text, with no line terminators
Hash e8fea68fc4f3bad81518a42ff35f72a9
2c32b99f6c1675cc7f0ed5c0c323c5192726d558
b67733509d82d3aa189d99fa0fa466b48b82265b9a701cb150410cbf35f55aab
GET /recaptcha/api2/webworker.js?hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc3OL0aAAAAAJhbmY4C3GvXoRvHizdk5YKZK7fg&co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..&hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb&size=invisible&cb=9wyrye20m6dr
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}, {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
expires: Sat, 29 Mar 2025 22:05:49 GMT
date: Sat, 29 Mar 2025 22:05:49 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: same-site
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET www.gstatic.com/recaptcha/releases/hbAq-YhJxOnlU-7cpgBoAJHb/recaptcha__en.js
200 OK 562 kB URL GET www.gstatic.com/recaptcha/releases/hbAq-YhJxOnlU-7cpgBoAJHb/recaptcha__en.js
IP
Requested by https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B
ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
Size 562 kB (561652 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /recaptcha/releases/hbAq-YhJxOnlU-7cpgBoAJHb/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 221651
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 28 Mar 2025 10:03:30 GMT
expires: Sat, 28 Mar 2026 10:03:30 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 24 Mar 2025 02:01:29 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 129742
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET www.gstatic.com/recaptcha/releases/hbAq-YhJxOnlU-7cpgBoAJHb/styles__ltr.css
200 OK 79 kB URL GET www.gstatic.com/recaptcha/releases/hbAq-YhJxOnlU-7cpgBoAJHb/styles__ltr.css
IP
Requested by https://www.google.com/recaptcha/api2/bframe?hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb&k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B
ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash ada37a51f2c5a7fc2d0a7e8e01ee2089
74095bb0eaa20a9b7636fd4e9361fb41115a5cbc
cc4b8a3c3cbb7f77dbc336386223eb1e26dc401a9d754e8630ee0989846261a4
GET /recaptcha/releases/hbAq-YhJxOnlU-7cpgBoAJHb/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 42057
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 28 Mar 2025 10:03:30 GMT
expires: Sat, 28 Mar 2026 10:03:30 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 24 Mar 2025 02:01:29 GMT
content-type: text/css
vary: Accept-Encoding
age: 129743
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET ww1.lookmovie.pn/android-icon-192x192.png
200 OK 12 kB URL GET ww1.lookmovie.pn/android-icon-192x192.png
IP
ASN #214576 Berdiev Ruslan Mukhabatovich
Requested by https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Certificate IssuerLet's Encrypt
Subjectlookmovie.pn
Fingerprint2C:94:ED:3D:94:53:45:DE:47:16:D7:79:5B:BF:59:0A:90:A8:82:01
ValiditySun, 23 Feb 2025 06:43:05 GMT - Sat, 24 May 2025 06:43:04 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Hash 3a60f6127d6c7e4c05e4984679c2e923
9271ccd51604b6f88cd9f806dab113a3a149a9d7
a83e583931d4d3e34189732010661b00c11ad1cb6455da23032d957269a39026
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /android-icon-192x192.png HTTP/1.1
Host: ww1.lookmovie.pn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Cookie: PHPSESSID=jllj0evlsp0v1itjd2830sd949; _csrf=0e83313004c623b386e33565b386a1e858532489439a92d14b8055e40b523feca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22Xg00aRtU-tAfmO81Rbgm8-P1Z81ehees%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 29 Mar 2025 22:05:51 GMT
content-type: image/png
content-length: 11644
last-modified: Thu, 04 Apr 2024 12:00:05 GMT
etag: "660e9645-2d7c"
expires: Sun, 30 Mar 2025 10:21:00 GMT
cache-control: max-age=604800
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET www.gstatic.com/recaptcha/releases/hbAq-YhJxOnlU-7cpgBoAJHb/recaptcha__en.js
200 OK 562 kB URL GET www.gstatic.com/recaptcha/releases/hbAq-YhJxOnlU-7cpgBoAJHb/recaptcha__en.js
IP
Requested by https://ww1.lookmovie.pn/threat-protection?t=49b51f67e94cdc018266c1e17f3b802139f36bce
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B
ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
Size 562 kB (561652 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /recaptcha/releases/hbAq-YhJxOnlU-7cpgBoAJHb/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ww1.lookmovie.pn
DNT: 1
Connection: keep-alive
Referer: https://ww1.lookmovie.pn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 221651
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 28 Mar 2025 10:03:30 GMT
expires: Sat, 28 Mar 2026 10:03:30 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 24 Mar 2025 02:01:29 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 129738
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
POST ww1.lookmovie.pn/threat-protection?t=49b51f67e94cdc018266c1e17f3b802139f36bce
302 Found 14 kB URL User Request POST ww1.lookmovie.pn/threat-protection?t=49b51f67e94cdc018266c1e17f3b802139f36bce
IP
ASN #214576 Berdiev Ruslan Mukhabatovich
Certificate IssuerLet's Encrypt
Subjectlookmovie.pn
Fingerprint2C:94:ED:3D:94:53:45:DE:47:16:D7:79:5B:BF:59:0A:90:A8:82:01
ValiditySun, 23 Feb 2025 06:43:05 GMT - Sat, 24 May 2025 06:43:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /threat-protection?t=49b51f67e94cdc018266c1e17f3b802139f36bce HTTP/1.1
Host: ww1.lookmovie.pn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1055
Origin: https://ww1.lookmovie.pn
DNT: 1
Connection: keep-alive
Referer: https://ww1.lookmovie.pn/threat-protection?t=49b51f67e94cdc018266c1e17f3b802139f36bce
Cookie: PHPSESSID=jllj0evlsp0v1itjd2830sd949; _csrf=0e83313004c623b386e33565b386a1e858532489439a92d14b8055e40b523feca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22Xg00aRtU-tAfmO81Rbgm8-P1Z81ehees%22%3B%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Sat, 29 Mar 2025 22:05:51 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
location: /threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
X-Firefox-Spdy: h2
GET ww1.lookmovie.pn/assets/b46c9783/img/icon3.svg
200 OK 354 B URL GET ww1.lookmovie.pn/assets/b46c9783/img/icon3.svg
IP
ASN #214576 Berdiev Ruslan Mukhabatovich
Requested by https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Certificate IssuerLet's Encrypt
Subjectlookmovie.pn
Fingerprint2C:94:ED:3D:94:53:45:DE:47:16:D7:79:5B:BF:59:0A:90:A8:82:01
ValiditySun, 23 Feb 2025 06:43:05 GMT - Sat, 24 May 2025 06:43:04 GMT
File type SVG Scalable Vector Graphics image
Hash 13400c035dbc6fd1cb3d7debba254b48
34d977877e512e73dba34bf465f8f23ae285ddf5
ed4a87875fedd349aaae60536277bb247f16abd160e4b38fdc0a882d08ccd937
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/b46c9783/img/icon3.svg HTTP/1.1
Host: ww1.lookmovie.pn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Cookie: PHPSESSID=jllj0evlsp0v1itjd2830sd949; _csrf=0e83313004c623b386e33565b386a1e858532489439a92d14b8055e40b523feca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22Xg00aRtU-tAfmO81Rbgm8-P1Z81ehees%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 29 Mar 2025 22:05:51 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Thu, 27 Mar 2025 15:07:33 GMT
etag: W/"67e569b5-162"
expires: Thu, 03 Apr 2025 15:07:33 GMT
cache-control: max-age=604800
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
GET ww1.lookmovie.pn/assets/b46c9783/img/icon10.svg
200 OK 1.4 kB URL GET ww1.lookmovie.pn/assets/b46c9783/img/icon10.svg
IP
ASN #214576 Berdiev Ruslan Mukhabatovich
Requested by https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Certificate IssuerLet's Encrypt
Subjectlookmovie.pn
Fingerprint2C:94:ED:3D:94:53:45:DE:47:16:D7:79:5B:BF:59:0A:90:A8:82:01
ValiditySun, 23 Feb 2025 06:43:05 GMT - Sat, 24 May 2025 06:43:04 GMT
File type SVG Scalable Vector Graphics image
Hash e3dfa320c8bdd0c29c5272eda6afd2be
444c4a820faf5204341be32b02a451eb6524348b
c041829f751aa3949c3e32ade9502fc91e5dead06f7913544832ae9abdaed479
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/b46c9783/img/icon10.svg HTTP/1.1
Host: ww1.lookmovie.pn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Cookie: PHPSESSID=jllj0evlsp0v1itjd2830sd949; _csrf=0e83313004c623b386e33565b386a1e858532489439a92d14b8055e40b523feca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22Xg00aRtU-tAfmO81Rbgm8-P1Z81ehees%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 29 Mar 2025 22:05:51 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Thu, 27 Mar 2025 15:07:33 GMT
etag: W/"67e569b5-54a"
expires: Thu, 03 Apr 2025 15:07:33 GMT
cache-control: max-age=604800
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
GET ww1.lookmovie.pn/assets/b46c9783/img/hero-bg.jpeg
200 OK 16 kB URL GET ww1.lookmovie.pn/assets/b46c9783/img/hero-bg.jpeg
IP
ASN #214576 Berdiev Ruslan Mukhabatovich
Requested by https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Certificate IssuerLet's Encrypt
Subjectlookmovie.pn
Fingerprint2C:94:ED:3D:94:53:45:DE:47:16:D7:79:5B:BF:59:0A:90:A8:82:01
ValiditySun, 23 Feb 2025 06:43:05 GMT - Sat, 24 May 2025 06:43:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2880x1652, components 3
Hash 90fe26bdfc6f62a3ed6a49dc6ccceb5e
c5204a54c41336ff784acb3e5a7e7551a39c36eb
2dada7e0cc4c4a8b2802f9c76374bdfc44fa99910e341aa3afa5a25843efc6c2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/b46c9783/img/hero-bg.jpeg HTTP/1.1
Host: ww1.lookmovie.pn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww1.lookmovie.pn/assets/protection-0a5f2cb002e98723ec414d0eae7ef9ff.css
Cookie: PHPSESSID=jllj0evlsp0v1itjd2830sd949; _csrf=0e83313004c623b386e33565b386a1e858532489439a92d14b8055e40b523feca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22Xg00aRtU-tAfmO81Rbgm8-P1Z81ehees%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 29 Mar 2025 22:05:51 GMT
content-type: image/jpeg
content-length: 15839
last-modified: Tue, 11 Mar 2025 13:34:13 GMT
etag: "67d03bd5-3ddf"
expires: Sun, 30 Mar 2025 19:21:15 GMT
cache-control: max-age=604800
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
POST www.google.com/recaptcha/api2/reload?k=6Lc3OL0aAAAAAJhbmY4C3GvXoRvHizdk5YKZK7fg
200 OK 37 kB URL POST www.google.com/recaptcha/api2/reload?k=6Lc3OL0aAAAAAJhbmY4C3GvXoRvHizdk5YKZK7fg
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc3OL0aAAAAAJhbmY4C3GvXoRvHizdk5YKZK7fg&co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..&hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb&size=invisible&cb=9wyrye20m6dr
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintB5:4D:C5:27:B4:49:22:F3:21:DF:88:3D:E6:05:D6:A1:02:98:C7:E2
ValidityMon, 10 Mar 2025 08:35:59 GMT - Mon, 02 Jun 2025 08:35:58 GMT
File type ASCII text, with very long lines (37379)
Hash 2ba5e97b8f69842abfa0aaf1e0eac40d
d155e6ee76504486c4826d6f3ff5183f222e9f74
947f20d02fe02776da42042d03b17251d6271b1b689d678d333149730348e2e7
POST /recaptcha/api2/reload?k=6Lc3OL0aAAAAAJhbmY4C3GvXoRvHizdk5YKZK7fg HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-protobuffer
Content-Length: 12401
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc3OL0aAAAAAJhbmY4C3GvXoRvHizdk5YKZK7fg&co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..&hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb&size=invisible&cb=9wyrye20m6dr
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/json; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
x-content-type-options: nosniff
cross-origin-resource-policy: same-site
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
content-encoding: gzip
date: Sat, 29 Mar 2025 22:05:51 GMT
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: _GRECAPTCHA=09ALcxeyqvLHbrn25jJgyAvGWYH2AlZ6Wcl4waycNYwhACK95wWr8dGhSYWb4Pw3WPCSfPxxkuMQVravFJUFv48q0; Expires=Thu, 25-Sep-2025 22:05:51 GMT; Path=/recaptcha; Secure; HttpOnly; Priority=HIGH; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Sat, 29 Mar 2025 22:05:51 GMT
cache-control: private
GET ww1.lookmovie.pn/favicon-16x16.png
200 OK 1.4 kB URL GET ww1.lookmovie.pn/favicon-16x16.png
IP
ASN #214576 Berdiev Ruslan Mukhabatovich
Requested by https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Certificate IssuerLet's Encrypt
Subjectlookmovie.pn
Fingerprint2C:94:ED:3D:94:53:45:DE:47:16:D7:79:5B:BF:59:0A:90:A8:82:01
ValiditySun, 23 Feb 2025 06:43:05 GMT - Sat, 24 May 2025 06:43:04 GMT
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Hash 733b20b53ffbc74cc5dd6b4abd8e6d05
3271e2f142f4fd1a5c5f32b5401be31d360bd9d1
f9005bac0961a03007c553bf6d2d4638ee3d4d09320ecc08c821798fb17623d9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon-16x16.png HTTP/1.1
Host: ww1.lookmovie.pn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Cookie: PHPSESSID=jllj0evlsp0v1itjd2830sd949; _csrf=0e83313004c623b386e33565b386a1e858532489439a92d14b8055e40b523feca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22Xg00aRtU-tAfmO81Rbgm8-P1Z81ehees%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 29 Mar 2025 22:05:51 GMT
content-type: image/png
content-length: 1360
last-modified: Thu, 04 Apr 2024 12:00:06 GMT
etag: "660e9646-550"
expires: Sun, 30 Mar 2025 19:21:18 GMT
cache-control: max-age=604800
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET www.gstatic.com/recaptcha/releases/hbAq-YhJxOnlU-7cpgBoAJHb/styles__ltr.css
200 OK 79 kB URL GET www.gstatic.com/recaptcha/releases/hbAq-YhJxOnlU-7cpgBoAJHb/styles__ltr.css
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b&co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..&hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb&size=normal&cb=89rsnfmf4hl7
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B
ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash ada37a51f2c5a7fc2d0a7e8e01ee2089
74095bb0eaa20a9b7636fd4e9361fb41115a5cbc
cc4b8a3c3cbb7f77dbc336386223eb1e26dc401a9d754e8630ee0989846261a4
GET /recaptcha/releases/hbAq-YhJxOnlU-7cpgBoAJHb/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 42057
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 28 Mar 2025 10:03:30 GMT
expires: Sat, 28 Mar 2026 10:03:30 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 24 Mar 2025 02:01:29 GMT
content-type: text/css
vary: Accept-Encoding
age: 129742
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET www.google.com/recaptcha/api2/webworker.js?hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb
200 OK 102 B URL GET www.google.com/recaptcha/api2/webworker.js?hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b&co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..&hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb&size=normal&cb=89rsnfmf4hl7
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintB5:4D:C5:27:B4:49:22:F3:21:DF:88:3D:E6:05:D6:A1:02:98:C7:E2
ValidityMon, 10 Mar 2025 08:35:59 GMT - Mon, 02 Jun 2025 08:35:58 GMT
File type ASCII text, with no line terminators
Hash e8fea68fc4f3bad81518a42ff35f72a9
2c32b99f6c1675cc7f0ed5c0c323c5192726d558
b67733509d82d3aa189d99fa0fa466b48b82265b9a701cb150410cbf35f55aab
GET /recaptcha/api2/webworker.js?hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b&co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..&hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb&size=normal&cb=89rsnfmf4hl7
Cookie: _GRECAPTCHA=09ALcxeyqvLHbrn25jJgyAvGWYH2AlZ6Wcl4waycNYwhACK95wWr8dGhSYWb4Pw3WPCSfPxxkuMQVravFJUFv48q0
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}, {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
expires: Sat, 29 Mar 2025 22:05:52 GMT
date: Sat, 29 Mar 2025 22:05:52 GMT
cache-control: private, max-age=300
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
cross-origin-resource-policy: same-site
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET ww1.lookmovie.pn/threat-protection?t=49b51f67e94cdc018266c1e17f3b802139f36bce
200 OK 5.0 kB URL User Request GET ww1.lookmovie.pn/threat-protection?t=49b51f67e94cdc018266c1e17f3b802139f36bce
IP
ASN #214576 Berdiev Ruslan Mukhabatovich
Certificate IssuerLet's Encrypt
Subjectlookmovie.pn
Fingerprint2C:94:ED:3D:94:53:45:DE:47:16:D7:79:5B:BF:59:0A:90:A8:82:01
ValiditySun, 23 Feb 2025 06:43:05 GMT - Sat, 24 May 2025 06:43:04 GMT
File type HTML document, ASCII text, with very long lines (5338), with no line terminators
Hash 8574b17d29c9b60f52e2a2c0111e0247
e387e1eb6e302769fda3c7f2b6005b139cd3ec85
52684efac641478df5aa48c3379cdbcd53949cdcff2583fc7d816827814d8f41
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /threat-protection?t=49b51f67e94cdc018266c1e17f3b802139f36bce HTTP/1.1
Host: ww1.lookmovie.pn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=jllj0evlsp0v1itjd2830sd949
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 29 Mar 2025 22:05:48 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: _csrf=0e83313004c623b386e33565b386a1e858532489439a92d14b8055e40b523feca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22Xg00aRtU-tAfmO81Rbgm8-P1Z81ehees%22%3B%7D; path=/; HttpOnly; SameSite=Lax
content-encoding: gzip
X-Firefox-Spdy: h2
GET ww1.lookmovie.pn/assets/b46c9783/img/logo.png
200 OK 20 kB URL GET ww1.lookmovie.pn/assets/b46c9783/img/logo.png
IP
ASN #214576 Berdiev Ruslan Mukhabatovich
Requested by https://ww1.lookmovie.pn/threat-protection?t=49b51f67e94cdc018266c1e17f3b802139f36bce
Certificate IssuerLet's Encrypt
Subjectlookmovie.pn
Fingerprint2C:94:ED:3D:94:53:45:DE:47:16:D7:79:5B:BF:59:0A:90:A8:82:01
ValiditySun, 23 Feb 2025 06:43:05 GMT - Sat, 24 May 2025 06:43:04 GMT
File type PNG image data, 400 x 116, 8-bit/color RGBA, non-interlaced
Hash d4390c09379d767a33c4a9dec37e313b
abfa742bc76e7caa874b333f79ad0ea32e1275d0
1c0f47252522016f69dd195bf630b16b2d52b493909ebb87f21e335504db7719
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/b46c9783/img/logo.png HTTP/1.1
Host: ww1.lookmovie.pn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww1.lookmovie.pn/threat-protection?t=49b51f67e94cdc018266c1e17f3b802139f36bce
Cookie: PHPSESSID=jllj0evlsp0v1itjd2830sd949; _csrf=0e83313004c623b386e33565b386a1e858532489439a92d14b8055e40b523feca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22Xg00aRtU-tAfmO81Rbgm8-P1Z81ehees%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 29 Mar 2025 22:05:48 GMT
content-type: image/png
content-length: 19893
last-modified: Tue, 11 Mar 2025 13:34:13 GMT
etag: "67d03bd5-4db5"
expires: Sun, 30 Mar 2025 19:21:16 GMT
cache-control: max-age=604800
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET ww1.lookmovie.pn/assets/b46c9783/img/icon5.svg
200 OK 467 B URL GET ww1.lookmovie.pn/assets/b46c9783/img/icon5.svg
IP
ASN #214576 Berdiev Ruslan Mukhabatovich
Requested by https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Certificate IssuerLet's Encrypt
Subjectlookmovie.pn
Fingerprint2C:94:ED:3D:94:53:45:DE:47:16:D7:79:5B:BF:59:0A:90:A8:82:01
ValiditySun, 23 Feb 2025 06:43:05 GMT - Sat, 24 May 2025 06:43:04 GMT
File type SVG Scalable Vector Graphics image
Hash 61133fc6a2447587067415701c871378
15b018bc567864d3ef30e2e8a0583f2143abbb85
c85318757e322118e2fe32505835488b3140f211321565c451fccacf4ff24b1b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/b46c9783/img/icon5.svg HTTP/1.1
Host: ww1.lookmovie.pn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Cookie: PHPSESSID=jllj0evlsp0v1itjd2830sd949; _csrf=0e83313004c623b386e33565b386a1e858532489439a92d14b8055e40b523feca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22Xg00aRtU-tAfmO81Rbgm8-P1Z81ehees%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 29 Mar 2025 22:05:51 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Thu, 27 Mar 2025 15:07:33 GMT
etag: W/"67e569b5-1d3"
expires: Thu, 03 Apr 2025 15:07:33 GMT
cache-control: max-age=604800
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
GET www.google.com/recaptcha/api.js
200 OK 911 B URL GET www.google.com/recaptcha/api.js
IP
Requested by https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintB5:4D:C5:27:B4:49:22:F3:21:DF:88:3D:E6:05:D6:A1:02:98:C7:E2
ValidityMon, 10 Mar 2025 08:35:59 GMT - Mon, 02 Jun 2025 08:35:58 GMT
File type JavaScript source, ASCII text, with very long lines (911), with no line terminators
Hash 135f37843e2c07df0c7a27c7d3e73042
7cd76532ce4a294c87be1d89a03c62deaa305316
89021fb494eebf4825f0072a390cf555191b27a45f7ef77f07b598e1e4876915
GET /recaptcha/api.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww1.lookmovie.pn/
Cookie: _GRECAPTCHA=09ALcxeyqvLHbrn25jJgyAvGWYH2AlZ6Wcl4waycNYwhACK95wWr8dGhSYWb4Pw3WPCSfPxxkuMQVravFJUFv48q0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
expires: Sat, 29 Mar 2025 22:05:51 GMT
date: Sat, 29 Mar 2025 22:05:51 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL GET fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc3OL0aAAAAAJhbmY4C3GvXoRvHizdk5YKZK7fg&co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..&hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb&size=invisible&cb=9wyrye20m6dr
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B
ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 27 Mar 2025 09:35:39 GMT
expires: Fri, 27 Mar 2026 09:35:39 GMT
cache-control: public, max-age=31536000
age: 217810
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.gstatic.com/recaptcha/releases/hbAq-YhJxOnlU-7cpgBoAJHb/recaptcha__en.js
200 OK 562 kB URL GET www.gstatic.com/recaptcha/releases/hbAq-YhJxOnlU-7cpgBoAJHb/recaptcha__en.js
IP
Requested by https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B
ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
Size 562 kB (561652 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /recaptcha/releases/hbAq-YhJxOnlU-7cpgBoAJHb/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 221651
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 28 Mar 2025 10:03:30 GMT
expires: Sat, 28 Mar 2026 10:03:30 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 24 Mar 2025 02:01:29 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 129739
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET ww1.lookmovie.pn/assets/b46c9783/img/icon9.svg
200 OK 414 B URL GET ww1.lookmovie.pn/assets/b46c9783/img/icon9.svg
IP
ASN #214576 Berdiev Ruslan Mukhabatovich
Requested by https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Certificate IssuerLet's Encrypt
Subjectlookmovie.pn
Fingerprint2C:94:ED:3D:94:53:45:DE:47:16:D7:79:5B:BF:59:0A:90:A8:82:01
ValiditySun, 23 Feb 2025 06:43:05 GMT - Sat, 24 May 2025 06:43:04 GMT
File type SVG Scalable Vector Graphics image
Hash 9d87fefa25935907d29f119c12280e11
4e91c46b3051982a2563052e76c646c8646a5d7c
ff2c0d584bd01a3000e3e2d3e916bc5669245c39ed73e56562b19f053f09d45b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/b46c9783/img/icon9.svg HTTP/1.1
Host: ww1.lookmovie.pn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Cookie: PHPSESSID=jllj0evlsp0v1itjd2830sd949; _csrf=0e83313004c623b386e33565b386a1e858532489439a92d14b8055e40b523feca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22Xg00aRtU-tAfmO81Rbgm8-P1Z81ehees%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 29 Mar 2025 22:05:51 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Thu, 27 Mar 2025 15:07:33 GMT
etag: W/"67e569b5-19e"
expires: Thu, 03 Apr 2025 15:07:33 GMT
cache-control: max-age=604800
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
GET ww1.lookmovie.pn/assets/b46c9783/img/hero-bg.jpeg
200 OK 16 kB URL GET ww1.lookmovie.pn/assets/b46c9783/img/hero-bg.jpeg
IP
ASN #214576 Berdiev Ruslan Mukhabatovich
Requested by https://ww1.lookmovie.pn/threat-protection?t=49b51f67e94cdc018266c1e17f3b802139f36bce
Certificate IssuerLet's Encrypt
Subjectlookmovie.pn
Fingerprint2C:94:ED:3D:94:53:45:DE:47:16:D7:79:5B:BF:59:0A:90:A8:82:01
ValiditySun, 23 Feb 2025 06:43:05 GMT - Sat, 24 May 2025 06:43:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2880x1652, components 3
Hash 90fe26bdfc6f62a3ed6a49dc6ccceb5e
c5204a54c41336ff784acb3e5a7e7551a39c36eb
2dada7e0cc4c4a8b2802f9c76374bdfc44fa99910e341aa3afa5a25843efc6c2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/b46c9783/img/hero-bg.jpeg HTTP/1.1
Host: ww1.lookmovie.pn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww1.lookmovie.pn/assets/protection-0a5f2cb002e98723ec414d0eae7ef9ff.css
Cookie: PHPSESSID=jllj0evlsp0v1itjd2830sd949; _csrf=0e83313004c623b386e33565b386a1e858532489439a92d14b8055e40b523feca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22Xg00aRtU-tAfmO81Rbgm8-P1Z81ehees%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 29 Mar 2025 22:05:48 GMT
content-type: image/jpeg
content-length: 15839
last-modified: Tue, 11 Mar 2025 13:34:13 GMT
etag: "67d03bd5-3ddf"
expires: Sun, 30 Mar 2025 19:21:15 GMT
cache-control: max-age=604800
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET ww1.lookmovie.pn/assets/b46c9783/img/icon7.svg
200 OK 1.7 kB URL GET ww1.lookmovie.pn/assets/b46c9783/img/icon7.svg
IP
ASN #214576 Berdiev Ruslan Mukhabatovich
Requested by https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Certificate IssuerLet's Encrypt
Subjectlookmovie.pn
Fingerprint2C:94:ED:3D:94:53:45:DE:47:16:D7:79:5B:BF:59:0A:90:A8:82:01
ValiditySun, 23 Feb 2025 06:43:05 GMT - Sat, 24 May 2025 06:43:04 GMT
File type SVG Scalable Vector Graphics image
Hash 20cecb0afb124a9e812746dcdb13f189
4b0a99369c9ebef173f3a5e8d1840da9400ac012
c9e73a9bbb59bc1a46ed10c31a633f6c4518e1910840ea7b9727ded2d049309d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/b46c9783/img/icon7.svg HTTP/1.1
Host: ww1.lookmovie.pn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Cookie: PHPSESSID=jllj0evlsp0v1itjd2830sd949; _csrf=0e83313004c623b386e33565b386a1e858532489439a92d14b8055e40b523feca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22Xg00aRtU-tAfmO81Rbgm8-P1Z81ehees%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 29 Mar 2025 22:05:51 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Thu, 27 Mar 2025 15:07:33 GMT
etag: W/"67e569b5-6ae"
expires: Thu, 03 Apr 2025 15:07:33 GMT
cache-control: max-age=604800
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
GET ww1.lookmovie.pn/favicon-16x16.png
200 OK 1.4 kB URL GET ww1.lookmovie.pn/favicon-16x16.png
IP
ASN #214576 Berdiev Ruslan Mukhabatovich
Requested by https://ww1.lookmovie.pn/threat-protection?t=49b51f67e94cdc018266c1e17f3b802139f36bce
Certificate IssuerLet's Encrypt
Subjectlookmovie.pn
Fingerprint2C:94:ED:3D:94:53:45:DE:47:16:D7:79:5B:BF:59:0A:90:A8:82:01
ValiditySun, 23 Feb 2025 06:43:05 GMT - Sat, 24 May 2025 06:43:04 GMT
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Hash 733b20b53ffbc74cc5dd6b4abd8e6d05
3271e2f142f4fd1a5c5f32b5401be31d360bd9d1
f9005bac0961a03007c553bf6d2d4638ee3d4d09320ecc08c821798fb17623d9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon-16x16.png HTTP/1.1
Host: ww1.lookmovie.pn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww1.lookmovie.pn/threat-protection?t=49b51f67e94cdc018266c1e17f3b802139f36bce
Cookie: PHPSESSID=jllj0evlsp0v1itjd2830sd949; _csrf=0e83313004c623b386e33565b386a1e858532489439a92d14b8055e40b523feca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22Xg00aRtU-tAfmO81Rbgm8-P1Z81ehees%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 29 Mar 2025 22:05:48 GMT
content-type: image/png
content-length: 1360
last-modified: Thu, 04 Apr 2024 12:00:06 GMT
etag: "660e9646-550"
expires: Sun, 30 Mar 2025 19:21:18 GMT
cache-control: max-age=604800
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET ww1.lookmovie.pn/assets/b46c9783/img/icon2.svg
200 OK 1.2 kB URL GET ww1.lookmovie.pn/assets/b46c9783/img/icon2.svg
IP
ASN #214576 Berdiev Ruslan Mukhabatovich
Requested by https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Certificate IssuerLet's Encrypt
Subjectlookmovie.pn
Fingerprint2C:94:ED:3D:94:53:45:DE:47:16:D7:79:5B:BF:59:0A:90:A8:82:01
ValiditySun, 23 Feb 2025 06:43:05 GMT - Sat, 24 May 2025 06:43:04 GMT
File type SVG Scalable Vector Graphics image
Hash 2c888359bdb68fa3f177a448095a882a
a87c6acc694b53042186f3c2e40bac99337b3665
5b31275b4b5b7cd3f4c0ceb76239d051a4c3af58b1bb97a9c78ecade5bf52f03
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/b46c9783/img/icon2.svg HTTP/1.1
Host: ww1.lookmovie.pn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Cookie: PHPSESSID=jllj0evlsp0v1itjd2830sd949; _csrf=0e83313004c623b386e33565b386a1e858532489439a92d14b8055e40b523feca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22Xg00aRtU-tAfmO81Rbgm8-P1Z81ehees%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 29 Mar 2025 22:05:51 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Thu, 27 Mar 2025 15:07:33 GMT
etag: W/"67e569b5-4dc"
expires: Thu, 03 Apr 2025 15:07:33 GMT
cache-control: max-age=604800
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
GET ww1.lookmovie.pn/assets/b46c9783/img/icon4.svg
200 OK 1.3 kB URL GET ww1.lookmovie.pn/assets/b46c9783/img/icon4.svg
IP
ASN #214576 Berdiev Ruslan Mukhabatovich
Requested by https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Certificate IssuerLet's Encrypt
Subjectlookmovie.pn
Fingerprint2C:94:ED:3D:94:53:45:DE:47:16:D7:79:5B:BF:59:0A:90:A8:82:01
ValiditySun, 23 Feb 2025 06:43:05 GMT - Sat, 24 May 2025 06:43:04 GMT
File type SVG Scalable Vector Graphics image
Hash a501edc7636dc2e7506602f3675cd1e3
5beb23f92ab83ad5896a87754a5ed35d0c46ede2
fec8cb49fb22ac0625fa9ea883aa0fbb0ac8fb023c25e2389588e9215397de7e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/b46c9783/img/icon4.svg HTTP/1.1
Host: ww1.lookmovie.pn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Cookie: PHPSESSID=jllj0evlsp0v1itjd2830sd949; _csrf=0e83313004c623b386e33565b386a1e858532489439a92d14b8055e40b523feca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22Xg00aRtU-tAfmO81Rbgm8-P1Z81ehees%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 29 Mar 2025 22:05:51 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Thu, 27 Mar 2025 15:07:33 GMT
etag: W/"67e569b5-528"
expires: Thu, 03 Apr 2025 15:07:33 GMT
cache-control: max-age=604800
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
GET www.gstatic.com/recaptcha/releases/hbAq-YhJxOnlU-7cpgBoAJHb/styles__ltr.css
200 OK 79 kB URL GET www.gstatic.com/recaptcha/releases/hbAq-YhJxOnlU-7cpgBoAJHb/styles__ltr.css
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc3OL0aAAAAAJhbmY4C3GvXoRvHizdk5YKZK7fg&co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..&hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb&size=invisible&cb=9wyrye20m6dr
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B
ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash ada37a51f2c5a7fc2d0a7e8e01ee2089
74095bb0eaa20a9b7636fd4e9361fb41115a5cbc
cc4b8a3c3cbb7f77dbc336386223eb1e26dc401a9d754e8630ee0989846261a4
GET /recaptcha/releases/hbAq-YhJxOnlU-7cpgBoAJHb/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 42057
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 28 Mar 2025 10:03:30 GMT
expires: Sat, 28 Mar 2026 10:03:30 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 24 Mar 2025 02:01:29 GMT
content-type: text/css
vary: Accept-Encoding
age: 129739
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
POST www.google.com/recaptcha/api2/clr?k=6Lc3OL0aAAAAAJhbmY4C3GvXoRvHizdk5YKZK7fg
200 OK 0 B URL POST www.google.com/recaptcha/api2/clr?k=6Lc3OL0aAAAAAJhbmY4C3GvXoRvHizdk5YKZK7fg
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc3OL0aAAAAAJhbmY4C3GvXoRvHizdk5YKZK7fg&co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..&hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb&size=invisible&cb=9wyrye20m6dr
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintB5:4D:C5:27:B4:49:22:F3:21:DF:88:3D:E6:05:D6:A1:02:98:C7:E2
ValidityMon, 10 Mar 2025 08:35:59 GMT - Mon, 02 Jun 2025 08:35:58 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /recaptcha/api2/clr?k=6Lc3OL0aAAAAAJhbmY4C3GvXoRvHizdk5YKZK7fg HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-protobuf
Content-Length: 1558
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc3OL0aAAAAAJhbmY4C3GvXoRvHizdk5YKZK7fg&co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..&hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb&size=invisible&cb=9wyrye20m6dr
Cookie: _GRECAPTCHA=09ALcxeyqvLHbrn25jJgyAvGWYH2AlZ6Wcl4waycNYwhACK95wWr8dGhSYWb4Pw3WPCSfPxxkuMQVravFJUFv48q0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
GET www.google.com/recaptcha/api2/anchor?ar=1&k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b&co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..&hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb&size=normal&cb=89rsnfmf4hl7
200 OK 74 kB URL GET www.google.com/recaptcha/api2/anchor?ar=1&k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b&co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..&hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb&size=normal&cb=89rsnfmf4hl7
IP
Requested by https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintB5:4D:C5:27:B4:49:22:F3:21:DF:88:3D:E6:05:D6:A1:02:98:C7:E2
ValidityMon, 10 Mar 2025 08:35:59 GMT - Mon, 02 Jun 2025 08:35:58 GMT
File type HTML document, ASCII text, with very long lines (56645)
Hash 0b5b38b3dca330375d00ef258a349fec
b3c2440ccad3dcc41c270884724dedf22fc91235
325076c819820cb8a8dd6e397a2e4abce48ac27a55029099938ab0fd08e3da44
GET /recaptcha/api2/anchor?ar=1&k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b&co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..&hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb&size=normal&cb=89rsnfmf4hl7 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww1.lookmovie.pn/
Cookie: _GRECAPTCHA=09ALcxeyqvLHbrn25jJgyAvGWYH2AlZ6Wcl4waycNYwhACK95wWr8dGhSYWb4Pw3WPCSfPxxkuMQVravFJUFv48q0
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}, {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 29 Mar 2025 22:05:51 GMT
content-security-policy: script-src 'nonce-hgeLes8FDw3gdXNlXVw45w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET www.google.com/recaptcha/api2/bframe?hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb&k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b
200 OK 7.7 kB URL GET www.google.com/recaptcha/api2/bframe?hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb&k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b
IP
Requested by https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintB5:4D:C5:27:B4:49:22:F3:21:DF:88:3D:E6:05:D6:A1:02:98:C7:E2
ValidityMon, 10 Mar 2025 08:35:59 GMT - Mon, 02 Jun 2025 08:35:58 GMT
File type HTML document, ASCII text, with very long lines (7931), with no line terminators
Hash fe3284839fb5ea45a34c4ab0aeefb005
c35eb9fb4e6ab3e6eddfb1f34d76c2924722571b
f91603604c44bcb08afbb2756fe5a141deb209fdf80a459044b85a70fae9c862
GET /recaptcha/api2/bframe?hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb&k=6LdPO70aAAAAAPLTFBiLkiyTlzco6VNnD0Y6jP3b HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww1.lookmovie.pn/
Cookie: _GRECAPTCHA=09ALcxeyqvLHbrn25jJgyAvGWYH2AlZ6Wcl4waycNYwhACK95wWr8dGhSYWb4Pw3WPCSfPxxkuMQVravFJUFv48q0
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}, {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 29 Mar 2025 22:05:53 GMT
content-security-policy: script-src 'nonce-LHI16Uzq-BX2gjMTDYMjWg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET ww1.lookmovie.pn/movies/play/0070040-lx27esprit-de-la-ruche-1973?ref=os&utm_source=osub_sub&imdb=tt0070040&term=The+Spirit+of+the+Beehive&sub=4952627/threat-protection?t=9f1a42c6f96678c1030e7276b5342223a08c0b80
302 Found 5.0 kB URL User Request GET ww1.lookmovie.pn/movies/play/0070040-lx27esprit-de-la-ruche-1973?ref=os&utm_source=osub_sub&imdb=tt0070040&term=The+Spirit+of+the+Beehive&sub=4952627/threat-protection?t=9f1a42c6f96678c1030e7276b5342223a08c0b80
IP
ASN #214576 Berdiev Ruslan Mukhabatovich
Certificate IssuerLet's Encrypt
Subjectlookmovie.pn
Fingerprint2C:94:ED:3D:94:53:45:DE:47:16:D7:79:5B:BF:59:0A:90:A8:82:01
ValiditySun, 23 Feb 2025 06:43:05 GMT - Sat, 24 May 2025 06:43:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /movies/play/0070040-lx27esprit-de-la-ruche-1973?ref=os&utm_source=osub_sub&imdb=tt0070040&term=The+Spirit+of+the+Beehive&sub=4952627/threat-protection?t=9f1a42c6f96678c1030e7276b5342223a08c0b80 HTTP/1.1
Host: ww1.lookmovie.pn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Sat, 29 Mar 2025 22:05:48 GMT
content-type: text/html; charset=UTF-8
set-cookie: PHPSESSID=jllj0evlsp0v1itjd2830sd949; expires=Sun, 29-Mar-2026 22:05:48 GMT; Max-Age=31536000; path=/; HttpOnly
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
location: /threat-protection?t=49b51f67e94cdc018266c1e17f3b802139f36bce
X-Firefox-Spdy: h2
GET www.gstatic.com/recaptcha/releases/hbAq-YhJxOnlU-7cpgBoAJHb/recaptcha__en.js
200 OK 562 kB URL GET www.gstatic.com/recaptcha/releases/hbAq-YhJxOnlU-7cpgBoAJHb/recaptcha__en.js
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc3OL0aAAAAAJhbmY4C3GvXoRvHizdk5YKZK7fg&co=aHR0cHM6Ly93dzEubG9va21vdmllLnBuOjQ0Mw..&hl=en&v=hbAq-YhJxOnlU-7cpgBoAJHb&size=invisible&cb=9wyrye20m6dr
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B
ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
Size 562 kB (561652 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /recaptcha/releases/hbAq-YhJxOnlU-7cpgBoAJHb/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 221651
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 28 Mar 2025 10:03:30 GMT
expires: Sat, 28 Mar 2026 10:03:30 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 24 Mar 2025 02:01:29 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 129739
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET ww1.lookmovie.pn/assets/b46c9783/img/icon6.svg
200 OK 741 B URL GET ww1.lookmovie.pn/assets/b46c9783/img/icon6.svg
IP
ASN #214576 Berdiev Ruslan Mukhabatovich
Requested by https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Certificate IssuerLet's Encrypt
Subjectlookmovie.pn
Fingerprint2C:94:ED:3D:94:53:45:DE:47:16:D7:79:5B:BF:59:0A:90:A8:82:01
ValiditySun, 23 Feb 2025 06:43:05 GMT - Sat, 24 May 2025 06:43:04 GMT
File type SVG Scalable Vector Graphics image
Hash 431cd7adabd80356146590b8e5d29ed6
82d3bebfbf640cbd290f0556537a8a883e42ddc5
468aab0da68613eef46dd29397ebf6f5f4b3b25e97bee4e163ac671a595470d0
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/b46c9783/img/icon6.svg HTTP/1.1
Host: ww1.lookmovie.pn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Cookie: PHPSESSID=jllj0evlsp0v1itjd2830sd949; _csrf=0e83313004c623b386e33565b386a1e858532489439a92d14b8055e40b523feca%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22Xg00aRtU-tAfmO81Rbgm8-P1Z81ehees%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 29 Mar 2025 22:05:51 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Thu, 27 Mar 2025 15:07:33 GMT
etag: W/"67e569b5-2e5"
expires: Thu, 03 Apr 2025 15:07:33 GMT
cache-control: max-age=604800
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
GET www.gstatic.com/recaptcha/releases/hbAq-YhJxOnlU-7cpgBoAJHb/recaptcha__en.js
200 OK 562 kB URL GET www.gstatic.com/recaptcha/releases/hbAq-YhJxOnlU-7cpgBoAJHb/recaptcha__en.js
IP
Requested by https://ww1.lookmovie.pn/threat-protection/second?t=10d600d8f79a4b0ed92fbcef5d1d575377e99fa5
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B
ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
Size 562 kB (561652 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /recaptcha/releases/hbAq-YhJxOnlU-7cpgBoAJHb/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ww1.lookmovie.pn
DNT: 1
Connection: keep-alive
Referer: https://ww1.lookmovie.pn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 221651
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 28 Mar 2025 10:03:30 GMT
expires: Sat, 28 Mar 2026 10:03:30 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 24 Mar 2025 02:01:29 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 129741
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
185.40.4.130
142.250.74.99