{"report_id":"12959234-f865-4b84-80a0-aa6b406e152c","version":6,"status":"done","tags":[],"date":"2026-03-03T17:07:11Z","url":{"schema":"http","addr":"winvidplay.com/ip129jk?id=61333461336c786233637635","fqdn":"winvidplay.com","domain":"winvidplay.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"winvidplay.com/ip129jk?id=61333461336c786233637635","fqdn":"winvidplay.com","domain":"winvidplay.com","tld":"com"},"title":"2 MBAK DIA JAGA WARUNG ADA PELANGGAN DIKASIH MMEW","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"winvidplay.com/ip129jk?id=61333461336c786233637635","fqdn":"winvidplay.com","domain":"winvidplay.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-07T17:07:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-03T17:06:48Z","timestamp":1772557608,"ip_dst":{"addr":"54.240.174.127","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":54746,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed FingerprintJS Domain (openfpcdn .io in TLS SNI)","source":"{\"timestamp\":\"2026-03-03T17:06:48.812379+0000\",\"flow_id\":794588632077727,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.34\",\"src_port\":54746,\"dest_ip\":\"54.240.174.127\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2049251,\"rev\":1,\"signature\":\"ET INFO Observed FingerprintJS Domain (openfpcdn .io in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_11_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_11_17\"]}},\"tls\":{\"sni\":\"openfpcdn.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":4622,\"start\":\"2026-03-03T17:06:48.808351+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"winvidplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"winvidplay.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-26","domain_rank":0,"first_seen":"2026-03-03T03:03:48.186383Z","last_seen":"2026-03-03T03:03:48.186383Z","alert_count":4,"request_count":4,"received_data":62272,"sent_data":2426,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}]},{"fqdn":"pagead2.googlesyndication.com","ip":{"addr":"142.251.142.226","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2003-01-21","domain_rank":610,"first_seen":"2012-05-21T07:15:40Z","last_seen":"2026-03-02T06:20:18.160293Z","alert_count":0,"request_count":1,"received_data":163249,"sent_data":469,"comment":"","tags":null,"fingerprints":null},{"fqdn":"vidoy.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2012-03-14","domain_rank":0,"first_seen":"2025-10-29T10:52:39.448577Z","last_seen":"2026-03-03T03:03:48.747848Z","alert_count":0,"request_count":1,"received_data":1855,"sent_data":439,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-01T22:28:03.022415Z","alert_count":0,"request_count":1,"received_data":90498,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"openfpcdn.io","ip":{"addr":"54.240.174.127","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-11-10","domain_rank":9255,"first_seen":"2021-11-11T13:02:44Z","last_seen":"2026-02-25T21:08:17.503403Z","alert_count":0,"request_count":1,"received_data":34142,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"winvidplay.com/ip129jk?id=61333461336c786233637635","fqdn":"winvidplay.com","domain":"winvidplay.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad62fdd3427e44fb9689c0d58806470e","sha1":"e59681d144d9d83387a625fec34a88f1b7ba7122","sha256":"e1e92a22284e21d8b1cc40008f9d14fe1eb389f1df7392014f2e6d37b33d8748","sha512":"ea12d5b5c3575c0e0dc2929187cc5ea45dec19719a7f01c19fc90557bca3315478ee2322f93a3484c3bd78d543e2b93652304c467cea450e9c3f8530e88bc9a9","ssdeep":"","tlshash":"0cc02b5d8de331c40db70b5003f9106070be53c761048e0c740cd218cb18628c0b8d8d","size":161,"data":"","first_seen":"2025-12-30T07:31:01.302757Z","last_seen":"2026-04-03T10:56:28.996093Z","times_seen":161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winvidplay.com/ip129jk?id=61333461336c786233637635","fqdn":"winvidplay.com","domain":"winvidplay.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"af7ae8225121ed9d99eef91dcc1dc860","sha1":"d7f0ff2f625e8be252af7427b00cf8ad94f5d80c","sha256":"a7a0904a724e1a6be30ab17a6892c6da027205a31402e1d42c2a2069b98e3a58","sha512":"adeeb73407ba92106fe4e7484277a9eb43d43b84f7814d8f916babafc9d075e80b5fca5dad15d1703e8939657455b314a0170eecbb6efad81c521d0fedc9c08e","ssdeep":"","tlshash":"2d5163ab257214a6491778f69d6721037073834b2c05b8927f9d13a01f2d71e3ab1fbd","size":3020,"data":"","first_seen":"2026-03-03T17:07:12.039625Z","last_seen":"2026-03-03T17:07:12.039625Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winvidplay.com/ip129jk?id=61333461336c786233637635","fqdn":"winvidplay.com","domain":"winvidplay.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5b31595447eb4cabc208d8785f5b29b5","sha1":"79c37f72834483a1cd6a6f33f83065b82919add1","sha256":"c2006d46700a1ca6ba51229dc120de53c7dc00cfe2140fdc78349d42b297d6bd","sha512":"e3671cfeeaa9e94db498d6558ff4f56aeffc482a56937ec4277bf40b3027e31ba8accc8f899fc468eadaa868229af29da28c84c10b49435bfef6496fa24d60bf","ssdeep":"","tlshash":"a311dc793a2a1534d685908b317ee7a93d3260217e02d084c26ccc299958e8314efcbe","size":902,"data":"","first_seen":"2026-03-03T17:07:12.041486Z","last_seen":"2026-03-03T17:07:12.041486Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"565b5824902c1cf747e6a2a5739255a7","sha1":"d41fbf6e8cadb7ce058b89a4a1e8bbbed1ab6e4b","sha256":"447309069f5225832c6af3832e726d39256dd23978c618fe82c53f8a28955dbf","sha512":"8d709fd6182775ef1f9fc36a9aa0ea8f21aacd6fb58b65e66a548309b3a58e91b83d2fc3f79d9e367995a1f553234a3592e2c8761eb8173a602612585a4700ab","ssdeep":"","tlshash":"ecd0a79d2c7984327298014610b5e3ac256025507b11d644c5c8cc2b6b12ed244a1958","size":217,"data":"","first_seen":"2026-03-03T17:07:12.042984Z","last_seen":"2026-03-03T17:07:12.042984Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-04T13:46:00.042103Z","times_seen":217618,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winvidplay.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"winvidplay.com","domain":"winvidplay.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"01c25de683db74bd4d121c4e0cbf9324","sha1":"96c8120f4fb5cab544a80e4eb7eb13c16c6df655","sha256":"51ad685efb16f23717c34d1364cced76c306ba7a435a04c0287b6c10c9fb43aa","sha512":"151be1cce6f8cfaa4a80adb8c608da30d1c4a16e98220dc148b0e4855e91680809407e62676ebdfff988b42067271681a06260effd2df051ba78cc2e647a1535","ssdeep":"768:FXPlYoPwxxQ6UjqI6FxSR5G51Zpldoas4lt:FtYoP8DUH6+G7roB4lt","tlshash":"28c2c78b79d5705aa2677871243738cab27b7cb0704c6d59c220d4f8b87535db8abe2c","size":26804,"data":"","first_seen":"2026-03-03T17:07:12.022352Z","last_seen":"2026-03-03T17:07:12.022352Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/fingerprintjs/v3","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"54.240.174.127","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef5a1ccf6a53cc40021bfd4647f82b4a","sha1":"86eaf1a45275873266f2b85249408c8297a54f61","sha256":"57281521094dd6fe0d1997e31eab51a203b0f338d39e730d260fdfecce621905","sha512":"16923eaa089ee9d2d5a4e7a02cdbd31da35c8ce7d61e0d7e1bc8a6aa0648c358ad5d5f9ce5aaec4c5247475b8192af167e7fa6941d4fe181c5e01f28ff8537d7","ssdeep":"384:fQQYf1KNHRJijKLE6wXegKHqHTBMmwZCKQLFKA5+pCqNFaiE8E0QIQfJJcChs9RW:fR1HRxf6Hc9NwlJJAbc1GPgJN","tlshash":"9be2f6d8b2c3b02a227368b6497f6007b63bbd54241d4843d57bd4c17ca5e9a813bfb9","size":33442,"data":"","first_seen":"2023-07-07T06:15:03Z","last_seen":"2026-04-04T13:23:41.55351Z","times_seen":4290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"winvidplay.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?","fqdn":"winvidplay.com","domain":"winvidplay.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winvidplay.com/ip129jk?id=61333461336c786233637635","date":"2026-03-03T17:06:48.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winvidplay.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:33:07 GMT","end":"Wed, 27 May 2026 09:33:06 GMT"},"fingerprint":{"sha1":"9D:1B:D5:EB:27:A2:9B:4C:DE:3A:18:C6:59:65:C7:30:DE:13:CF:E2","sha256":"CD:05:1A:2D:1A:F8:16:84:88:50:E3:B8:35:40:7B:07:FA:E7:01:7A:BF:5D:35:60:93:98:6B:5E:23:2D:09:04"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js? HTTP/1.1\r\nHost: winvidplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: vf=5vc3bxl3a43a%7C1772557648%7CIiu5KvUQLVEQ8OLp-tmccbyMu1SeTJkZaNhuduYwzKk.hfpHIFrwDyh-b5_3NtzX1ZTcqSM1nK0Y8Dt8l4SZkVc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 03 Mar 2026 17:06:48 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d6a3bdf1fece9c1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26804,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (26804), with no line terminators","md5":"01c25de683db74bd4d121c4e0cbf9324","sha1":"96c8120f4fb5cab544a80e4eb7eb13c16c6df655","sha256":"51ad685efb16f23717c34d1364cced76c306ba7a435a04c0287b6c10c9fb43aa","sha512":"151be1cce6f8cfaa4a80adb8c608da30d1c4a16e98220dc148b0e4855e91680809407e62676ebdfff988b42067271681a06260effd2df051ba78cc2e647a1535","ssdeep":"768:FXPlYoPwxxQ6UjqI6FxSR5G51Zpldoas4lt:FtYoP8DUH6+G7roB4lt","tlshash":"28c2c78b79d5705aa2677871243738cab27b7cb0704c6d59c220d4f8b87535db8abe2c","first_seen":"2026-03-03T17:07:12.022352Z","last_seen":"2026-03-03T17:07:12.022352Z","times_seen":1,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"winvidplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pagead2.googlesyndication.com/pagead/js/adsbygoogle.js","fqdn":"pagead2.googlesyndication.com","domain":"googlesyndication.com","tld":"com"},"ip":{"addr":"142.251.142.226","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winvidplay.com/ip129jk?id=61333461336c786233637635","date":"2026-03-03T17:06:48.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.doubleclick.net","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:37 GMT","end":"Mon, 27 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"70:27:EA:DF:2A:3A:5A:35:72:C4:71:9B:4C:E8:EC:20:92:E2:43:CC","sha256":"B0:50:8B:ED:3C:8B:D6:63:89:33:BF:36:1C:CF:65:5F:F4:F2:A6:3D:01:05:40:BB:18:F2:25:F1:3E:93:3F:BA"}}},"request":{"raw":"GET /pagead/js/adsbygoogle.js HTTP/1.1\r\nHost: pagead2.googlesyndication.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winvidplay.com/\r\nOrigin: https://winvidplay.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nlink: \u003chttps://googleads.g.doubleclick.net\u003e; rel=\"preconnect\"; crossorigin\r\nvary: Accept-Encoding\r\ndate: Tue, 03 Mar 2026 17:06:48 GMT\r\nexpires: Tue, 03 Mar 2026 17:06:48 GMT\r\ncache-control: private, max-age=3600, stale-while-revalidate=3600\r\ncontent-type: text/javascript; charset=UTF-8\r\netag: 11429817898524657760\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\nserver: cafe\r\ncontent-length: 55761\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":162458,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4830)","md5":"3e65cd1b24a52d8c85232f80702df529","sha1":"dc3f803ab1f7ad575461628b7d5f07a2a9a3b26f","sha256":"df610d9b8bbd8c3276a730679fbbf571b56233b6fafefc345118ab0ba8cbf3d9","sha512":"1725927df7919e39e56cedf29cfd9149548168deb77c35135d6463ef8e5beecb2fe090b2b12c02365e97ed45178ae35e27e0979fe6cc0696f000b7ab20ec0c06","ssdeep":"3072:9C4n18wBARcSZql37U204nsmrSVfkhOuBhJMSzjbKmVLwfGdpEKTHkSPvpOEm1Rd:9C4n1/BC9ql37U20G9SVfkhOuBhJMS3w","tlshash":"04f319d971a2bcb7876389e5006f4107b02da863f40cc8b0f2d8ded97a249655277fad","first_seen":"2026-03-03T17:07:12.025145Z","last_seen":"2026-03-03T17:07:12.025145Z","times_seen":1,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":82,"dns":32,"connect":21,"send":0,"wait":53,"receive":43,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidoy.com/img/favicon-32x32.png","fqdn":"vidoy.com","domain":"vidoy.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winvidplay.com/ip129jk?id=61333461336c786233637635","date":"2026-03-03T17:06:48.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidoy.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 19:06:51 GMT","end":"Sat, 30 May 2026 19:06:50 GMT"},"fingerprint":{"sha1":"D8:F6:86:82:E7:30:2F:7A:2C:C2:1E:AC:CF:48:80:C9:5E:5A:BE:59","sha256":"CC:AE:4F:8C:02:72:D3:8C:A6:4D:7D:C5:10:DE:68:C6:B3:85:D2:9F:E9:E4:4D:E8:F1:FD:BA:01:2A:CC:F1:17"}}},"request":{"raw":"GET /img/favicon-32x32.png HTTP/1.1\r\nHost: vidoy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winvidplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 17:06:49 GMT\r\ncontent-type: image/webp\r\ncontent-length: 856\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4839192\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=1200\r\nlast-modified: Tue, 03 Mar 2026 17:06:48 GMT\r\nx-bo-server: DE-262\r\nx-downloadsize: 1960\r\nx-bo-origindownloadtime: 159\r\nx-bo-compressionratio: 56.33%\r\nx-bo-processingtime: 1\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 03/03/2026 17:06:49\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c4f794db21d81ba4127c429991dc74ab\r\ncdn-cache: EXPIRED\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":856,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0969aeb86b42684868e7c04778fc0c34","sha1":"5c3ea7c9891e67d22c4f3de59fc8eaa49fec6edc","sha256":"fcb667badab1de7d11083989385551fde2fbc47bb597fa1aedea93366001b246","sha512":"e25867661c543ed5d428f0861e915400bd2b0d966e4d5f745c1130f70900c37b88c90a430ceafeb5e0a1d569bd23694ebef331f8b74bbe5cd17d23b9dd081d57","ssdeep":"","tlshash":"241196d3c9acd5ccc8b8be6b2855f85c21af01f229b0d0710e1648dd69f46814e6e3bc","first_seen":"2026-03-03T03:03:51.131168Z","last_seen":"2026-03-08T23:23:04.483794Z","times_seen":8,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":20,"connect":1,"send":0,"wait":215,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winvidplay.com/cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.5554231564888709:1772554080:I1TEOIEPqGp4XMsgvne1zeklPVNlhxd670nV_pfn3NU/9d6a3bdba83937c2","fqdn":"winvidplay.com","domain":"winvidplay.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winvidplay.com/ip129jk?id=61333461336c786233637635","date":"2026-03-03T17:06:48.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winvidplay.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:33:07 GMT","end":"Wed, 27 May 2026 09:33:06 GMT"},"fingerprint":{"sha1":"9D:1B:D5:EB:27:A2:9B:4C:DE:3A:18:C6:59:65:C7:30:DE:13:CF:E2","sha256":"CD:05:1A:2D:1A:F8:16:84:88:50:E3:B8:35:40:7B:07:FA:E7:01:7A:BF:5D:35:60:93:98:6B:5E:23:2D:09:04"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.5554231564888709:1772554080:I1TEOIEPqGp4XMsgvne1zeklPVNlhxd670nV_pfn3NU/9d6a3bdba83937c2 HTTP/1.1\r\nHost: winvidplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12195\r\nOrigin: https://winvidplay.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winvidplay.com/ip129jk?id=61333461336c786233637635\r\nCookie: vf=5vc3bxl3a43a%7C1772557648%7CIiu5KvUQLVEQ8OLp-tmccbyMu1SeTJkZaNhuduYwzKk.hfpHIFrwDyh-b5_3NtzX1ZTcqSM1nK0Y8Dt8l4SZkVc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12195,"data":"GP$W0yeCXwFssXYXsoYFYTwT5TGXTGWeYe5b$TNWaYFET8xkk4d-9YFV$hATFWkt-TBCgWF5TbBIeD-CvOAdATk7AzATXtn-36T3HXYZW9wINoyOPsVYPW9uhmrEYi2yTXo3RFNX9N3oycvDPTeMxXKtyI-F1TW0yvyeUTbaTxx9raprfCV$kpV$3TFkyTqqUepIT6ioCtgr3Kl7ZexZPT0lbTOPTrMlVTw8G0$HW9ocRf$vaOmEkQK9PT00rTePDp-g067wsT9nizRVHrK-TXi-VYX$WT0MPH0KWmx$Tl81pYzhL6E0PTa8rwXLmNxGp7ajL4ezTXyUFal-wYTTIq-VTrI+FXiFOiXT96uTFjd6yTeOKmF+ypKryT6KPQaaHAn48+p8+66PWrr78RkaCS9-M3umarEAPeXvwaT-bzZoUS-T-DoNbophpL3XzlojYpxp1EnB32Rep0d8yT5kyrTTtrZdEOIbkf0kuKT09mrpptu6X4ce-l5C7cbR6+pj2D+CBVhB5-Tf66O-Mn3fx1cSae$5HncrMTq3Ev-PEPM9-cbdRGK0vPqGZLqMEeEHAQmq-QKsyHasSR5bHKbfEiV8Thz609bFDVN7bnfZnWwagqPzu+zHToDi03KBHzyxPYWMVgFF6FudWErWhrcYl9ZnpMc0fQoHThAAFe79slUbgGYP4RIZ07eYZ6NZ4i4fTme6IT1+FHD4uUI2YXBnOTrOop+G82QXRK09vuKHGlMOZ50a+nTIcUDgkOdZDlKro+$C2BE-N13$G-T9+x0aOaVarVNy3xlDOevFTa9+OLjFTmfSaLlIoI-0TBBHCo8Fsefo9o2O9rrOnfFzwTmDwTnzePjPLXY2yBezTIB3amIarrmWVTa2NyFmw$TDmlWaxPYN0DXmWnFTnYfeaa-wDS6-hFT2yf3NOAanwreMDNCNfOyU6BTyweUZUwnkXee1wi1OavvKw-c9jweZ9XHtTn5$6cOPCWBTj50zxmjWPKu-pL3xanhajw-EMjP0U8a0zjqx$$kdp4TN8x3lf8Io6pn6CNm9ItOze6yo1szdOMKV08XWsY6FzX08oDXN6UK3jKd$riaBOKlWcaeoyiK5OWcTpM1gieVWv0z2$QN3BKz9EPmTa+m3XsedDb5arVa4e69$p-5Ty7D4qNf9r+nR3B3xm9YmZONhT546VODYN1TnwfkOYFALOkLqTVe6xmlMPld3KYWI3NvDhlwpWR6m8WRwK$3IazCxf9aUqrd$3Va2ZSfCZjXoyehY-OlatyGhsl2LFwYxYCV+PTDTO6wtTCKSdjTP$Wu2WIT5VM4FTYNDyyjYcXnO-8TwS$oxsi-YoyiODKXWf8akUa5Myy5IXDN7YPc2WnTbwToDpfjLTumNTDcZWBekGjBOfT96ForT6MLKIBeeIfKnV+E-TOWkpFITSyeYY-5jOgTMbw-fMrwGjej7RdDCqfgVTyVhLeeWn8TwFAOR8f-HuVF4icSFhm2ZFhMoPM-OuKV$mPc8ToAM7z-eMpPlRvUUGYWEUZFwnUH24ZUBTcDX9R774BT$TgUheYIzae3TdUtN$3zFT3WuH-XgAvSR8o2CmWb9AHLe8keEX-F5HwXTQePFX3P0ByTbPT-uDSfs98GW1IE7t-p326ETTc2WYNVkx9j$KGKGeDtP9Kh-GW0XBFb6ENqmzsY0FX9jxBe1oCwjhBK-IAhoWnXPq$eMvT3+tOrIrdrYWPNP3Txwh$FVtNWKwcSaR6I4WhFuVhvttPNRdDV5PMdw-7D-pAVLhPPzvw8Xb02WaUb-p96$Dw6PpKyfXydO+gWVaLkKZPOy4arr6Cbr$rK4unz3LwxO9jTKOW5pHrWX64rLWAo69R9Yhm4K8a2YABN0rN$no6NyeV3TaUhimrk31vWajbMmTGVKaadaZGCPk3XvafkYedTWEkWO3kCoXWrxC8ZvpfeOTF0wkb3x0TnX3nCq2vV8rLXq3s3HF54b9$k-zZu4KNTXDkfbVsBkgT2D7vphsEwgwEyQkTayGs6kmeKW39iw-4fc8uVz-Tmoa$Ke6npO-MnyxHyMIn0KxeliAY6R1pA25s6CBj9IKyb9aO83dno2F3yft-UNZeBpO9diHQxpCBTsIMdB3ttWrpUHn$cb-Rc1TqpqgbfMdnW2+ekTzpZTT8ltOuhluoxCbjI$8nMoceVEmO01SxGEXsaqp4BPx2bAsXIUx8x$qailoe6ukX0wVM-6NAusHoRFKw-FPdkg3L$mo1ijdcjj3aFYHBEONFTMHUnsrucexjwKpO6r3huW26fN4vbj-LfqTqRCLXGrp-qp15pCjIsY$uAoACx7ZYevYpvOVyttwGuZP9G0ow-XWcFqS8-uvTzzmYnTDhCpPslBblG156H-I0xVszZGVd6gnF0C8B+-3IgwEeo$0+uvuT6Hp2pxnk+NINVEIKNyTvPZnvnWOa$CcWx+hYMKml5s-00XDsGsiHKep8irngG90eazDWu2znGCjI2a8Fug7l2VW$iam7wLyX6AG-6Ko1A-5KGtw6tyaVG-mtimLe7KCxTVwhs4tyev4WwRC6BTE9$9OOAoDyT7KOnfwTAIUzbID2IWnWnW27i$EDmzbzdrRwP17+xHlW2u$T$KIcEh5rTsyPnL5DrXiadBQHHImKyYOWf2ZzFNuvb+r0yFLsIUmTskoLv9pLvB-DKIdyWh1yO+x6HryLaLdBTAciUyhF7r$EdFpXfeV$ea9+I6GbrywWFXM9mao+sPRuTFW-D66kYek7Dhea2$8-cOa-oX6PwCL$X-h$6E12-y5hjz8Wu3LSgKs5uSnBNLBD+ooi0XKdPs$XFa-jHbcFOPoss6Ox-F5dz3I$K91CiZbmijSy9IjGgith4pUrz3xue6mI4oduh$dHb5CYtrNOXCwXeZslnoRGY+tDiTdn+VXZf9XEE3alZWyFYvMzE-kkTTyw0uRt7NcFpCC1bWKkIUOKZh2cuOjB4SMsCS6Nbpkh$yOAqYaIu3YtvCV3xsT$GceneYvWhUc12kSvtgZEWD1-izKXQFNBzpjrG0fBDUojNQP$BaXi+-IBTjVY0ka8Dx6xCkXKQYT7U2+cwojvWaMIBjSVOYHnDjOpMbOWu9X0js89YyCEf1POKBfqsMjm20hiGSWyXXlcG903TEAg3-j1AuFpVTstx$l6G6ZlrEDn$R1Hy-l6dWEbDFZocZ+$LsIXpcSgBwpxUtfBupFXHO4hUsoO3BXMtbTBpxVVUVX1qibWtngW-0+RV$t2$eCd6FbfkGKXjvWN-r+nIIOWX9u0olBtPAxXRDtSbMZo9dbucAsFA6EoTfXFQ5loXGIm+8Sd5VpW4r$nGI+dt1yMQsgwH3YNKvTBzj7nzbEosZ7g0z23u87gTj47SKfnE$kopwVFmfaXF0jVzDTx7TTWbbajKDhYhnnXX3EnLSScySmoSNrn2c8SN3VS42rEs9grj2eNNVKOYNDfZZgnOSmowOYD4oYe+Ni-Oolez1bI21PBAuF1zbSerBxS$XnWbaKaNarEXx2V-IzSjezc0Zh9hOISIHK$zpmEAaWfT$CD3Bjc3rMVMoyrxO3W8xLVjacD61qZTEjTUX4ImZhyw-WVW59SNOCOYXAID2oStonOZ2ZoYpKTf-ru+fCq+EV3$eiyyFLaNXDcAr8BcpnbbTaaAxXyP$q2rSIEIwaGZrWvlBK$-wbfbo31qBH0maEVxF1WmIw6UWgpBSpHMNnX7Br-rZNSypXyiNDI0a8VPqGeDcN33VPOprCfgfMDgEfIqu7oHD6bnSZbQnw2tyneZI2ZFEzVqE+1LwdSFf-5ebsv$k2x$abvNXb16-o3ywoSFBzwUIV$iVYW1eMxPa$O36Epp6H1$BlXLkLw72LkT9YuZ3bnW1ZnM3zGOfskLrS9h9KByZPnR-UFVIxvQZcE+Z+NPF4E7EDpQI5-AnVZCpNVxeqHsBqB6xNeYFyfMx1BFSy-uTtud$q2jebatfIk1SKT1H7fYZ2b+BV0mX6HN5IfFb8WaVsa4EHroDufXENT+Z3HCEVew9yVeV-$qE1xFStvUpPpNXjHCBqb6T-FU$QHwaeGxImq$XL6XNXZ3cFBqStZ53Yab9frUcFBcpPWmrMN50cphoNe566o0S2rOkVE6pSxrFTkPWWGZDAEzyOGO5$aKTgWU$OENe6wrXZ3ebP2jEaaPVPnADmHZwmW6vbaeFOxX1sfOTBxP3YTU9mpYVebOnSFHx$57F0brfW1SEPeSfYD31ZpNkAvypZXXXT0N3FcPuSO1r$aNfwe3Na9Y-dXVEFv$9jk0EKTL1eF7rMr816bPVh3K9Hch03N+6MkxHDv3weoowukWcj3P9K9BkdcAoawOwSn8D$He3yy5ShO5EeXDStNerF0TT0Db9gql$SbC6xuqBk$rrqkCNDcuVPOoct2jTIoNTE1DwEuy3MI4Ery76ounwnw6XUF1xyW45N-acHvbIp5E-mIkE7Bo$7cKEauhuUF3Sn2a9l$Z6TsI0NO3vTwnTjHwXf6Kbea$eQBDbze-$Y$$HTgpkBcT6TMM9YTSOYNmwTz4f4fKdyDjwRWdb8vef86SD8kNH2vGOkrwTgpZV5ys3YqGeH1Powkz5iqdNxq26W88fWiE0EbHSgx+utSEvj9r8KFPXwaGvVbt$2ZeHxxtqeva0cZhWq1jWrqjGbKVe8Wr$3yrwGN8Nq5knTXZeKFADCdTGcuYe4SrdeIzuxvK9qwf$znvB+1fNxbgIly2WCM-vj0o5H-naBxaf56zH3WB5xpKvVbowCcT1nOsZPXCNBEzyncj3heVFw38cC1k2+V4HXerG70NHLxwdhxe-p17-A12xgomgCfsnLWTvLs5-69KSI9DBW-HgNa9fNGbowa5GL5NagD1DDbs51bCBLsBoi$D-0ekTX3PXYBbF-$BuZD313d7pZeVTBDIByy3vyb6XKF-ie12kF-GWyXqx+-+ZDGOI11eGGBIe186NSnk$4DUa6eynpr$Xj5Bo3E19zeYaPMpNmskoXZmIpOPge0mOgSu5ygVnrdVwTz62lkTI1sA0PiMZ-yy3n$CM8Z9f+r1KtgyGVW3StscW5o0ok2jkVyaT3fXg4G5sNacZ3k9av1wONzZpxXLSy81VmcZGXNj$z-ue6FuVYzW2FWznk8aMtkLxmz$BnZhb9oXqesXZ1eLrrTpNhBln+E$Ov1fxLzRBVzy5+zLGB$GsK-e9327S96O6dM8yZufbcqYM$zZbysEwifD15Hbawe26Md3$q1TkrBK9aXxTV9hs6XKyEMUgGOwE42GTM58yqyG$WsCH6T1wYiz0nDYexvVnv0EbCB3OTSTE$ea$8vSSFv35sXx5+E+nlWU3xiPpYZRWgwVssf+ofVt0Kvj03I3n7rXB1w6aBnTEgbskniZffzZ0f$-M1Em1yOygKFYf5Fc1DkZDIiGv4bru9WNk+8+KUOpgFV7qZ2QIw9Zp+Kjo6dYxkxXwKnVNuw8E8ISyOHBkFIpMz3hrc1wyxSRKpaR3RXA$nveonT-GK3Do8Dhrw9gZyvbH9fp6w0+6TGANGdUX6v+68nnk$zO$jIn3+vVBDb4MifrEmIlHkoEgF5eo8gnxVF7Wei5iKhPWuao8$MD1N0b3KVXNLzZaBxE-e91rlxgoUaVV1q41qD55g-mvlZ7cjkfwMWRMr0wefprmGZK3bkmdmBqvKONsOo6xOncDnk1WnHTgofNGe6qxj3jFUebHcr8HlKkNIVNqbaXmuSi1TdNaMkNaCBcbUsbXNohqmn5GTfkFyuDXHhvMTOFzYx7BrCrTBqtWeos$pO5FWE51L6ChhFneOniMe5Lpqqlvh$339vT+fscsKp6-0iM8FvMzkztMtMVo0d6XwewXbHsdASFGa4WnK$z83dUc417p4bBH7V72B68$NEadNIBrqD31nfnfw26BcVez4n5$0kg06q3hwOwawgc5Ac1xY9NwYz6nMT5sTKzZ2xKadWxTL6q8nrcrs0WbebsvB8rm0w6aaHGB2b7k1vtr8H7dgobwPrwvs90Nl$Y6K3Y6eeBb$nbaZy9yXz1WXcCCD6R50dscSePNhlsELeeHTzavt9vsXNP3wwOsenlgy2QcKM$sp8s6fyXNpxyDbmOXV0aiXcArE0pI$hrhdlbOdCx496fMaaDds9LgWsAzkMO8VWEqWKLdgV7i7sMZnl3BjwkbYzncDXeYmBwT-CKe2zoxGvi0G5YMzzA48MWcACYd+pKlGKX82noNDNml2brblBjywF3E+u08KB9EcYduclOM$Bbz8seICdiVjF3Ic-VpVoaO3tpdYr1Z2o8vztBcADjcGpW$GGts0BKkVDhTUFYGaCzOPx+6cfG0ogyo6lmeXziSC87sD0650MrY88t8G0g0mF$B6DukPf4umk3+lnoVEmazNS8kMau15VlwDkrdTYkg8tPwlBdG4K8f6S9rMq4dGndDaOwhsXRz-vk8aTy3cHCEuGKOlSLguENT7VMBjZYaccPNKmPNhXjiIHeOGdSznTHlBYU3U2FgMG0gMtuKz+YeCO7G8Chp3XyeLrnFeK92L3ugFCk2C5yhCK4IwFdhI+ICRqI4gZaIAnj1okZ1sXV3sTes8SYCk2BzYlShG-3+b1AzoYEqOgWQ0z8D95+zZnOMaXo5MBHyeVoVb-XDEv3I9sOiLgKOho0hb6ZauIXZfkG-hVgzu4dmT80GavLgvEl2Bm2mbI7-sa8SnV$arolrV3wYa6toGw+$ek$IAuaCE2HLDDQ6o0lFIHjeyEiwne55t4s+YbvtgtIUSN6KzVxhU0+NidLhmm1sw8O-Z2p4bCV2$GW7wCs1o8ikZifEEpbBAKoh4zKKUEKVeF9HbFSdjYp3tVR2nZ13gGdB6WwdbBe+x+3sRX1hzXsOmRMwKoc5hyvG4E-g3f99R4WzkfkBO+SdY7-Kukg0AnEix2x28oB+3tMODGbFSBwQXMpNDExhe-O4knyZH8DukN5OAyNmKKBiU3pV0sFMObyiH1bsTsXdbjelUE9-9-6l-0Ua0WpTeVwDaMrYrKg2l0wTatiNnIXyEqG+XkS9zgZ2$6eCYziKyXalXZLlwSa3Fcglo41G1Fg4gKnn+Dc2Rh3Ehu-Kz+s0dUHoh9vYkPmuF6HkzV0KLHreK4nMZpMhfFYRPU7DkPsLMQg+elneiYUeYo8gbFazn3CyHyZj8EBsxPpThgbTw5LHRGTMs4Sf9O0dVUkBvwXfnpyC0nH0NXb10EPr-fErZCOXExXbna9KoIP8lT-eCUzgf45K1F3S70Zxu6bFuvtIuSgWuTX9bTtWXDSMYA0mHAUfHAXxzzbbwU5uSo+UKXLk9ujWbmbl1Nbhe3vmpKUFjE9wghabSpgkl0l02n+C8Sl$wB6DN26WjhytSby+F43ommqy3n3o2VIMeUzZK6Zvjkks777P+AT9nz3OuhLLQcLAj-KKquyQw$uXL6qPD2Rv-kVw6Fj-Ojtm2zAMk8owa1uAN2xUzosPE4bXm0aG6gypusLZK0Z$yOoRUX0puO35Dx5Qskqap3brxcWeedDe50eeUWxR$DyO96f2OFaree6$WwDm3ehW1qlEToSCY$rvpXkeqGYyGNxeXEPVl8s$WsF2bharGmkNOByIRGcrFTryDwrIt2TVz70aZ67n87oR-LhIGPk-9N0u-RWyzeDFbD7WoPBdhIo6TlEUNxTRWnwk+s1EPtGPLThIwYTeDTF2O8Tcpe-ls9ae4nimmw3F$KksjIfVzCnu--Zer3AenrhrVwrK3S$qtReYLOnGYarnjn7$UTbNN02b37T8YZI3ayWo5AWNwKT1a-OcXKz3TKmO$C$Cxry36eKNbG2avHFyOyRnCy-ReXOOyaoNPNKd0zvFTMeEfKLDxwaXb0SmMFyNPkXpXIw$MFKp6A-xKYGTApuPxNA3+j3Ham9WNxN3TjGGWwRyPXYwY$Cxahom37ecTG-wT5w$zODtENlH-QN5Tza7KMyLkC8vwGg0oTfTLcVhy3Tz3KGW$jFnyNs0aXjCKHBMl-qs5mOqX4$OIyg3r01atFEry-S$p3asDUu1NGkXr6fF9B5k+WvIZE0LTU37Tx$$W39ioWMF+kCKfboj6aGEFaf+rw$IIsa6rabWan02Fj$YbmKHL2$m$Noey6j33aMCh$fTry6UDRTtdojwzXpwn3YygKV5vPbZFcDyed6HIXr3weYo2C1NP$nVwbwyNWbrPXbwaa1$f-B$NndIlMX7a8neTwm7$8KaQytDpyAC-EXCk6$PI2TBw6vpat$$aPsLSrY$Sx5T0E9sYLLFrmxOiODYoNHnEbCsDsNMacALegwasrODX3ATlnOqXr6XwkjqFkTalXraKGNDhD8er$AG5m0mXVy-I5btPV3$D3dDhrESeA5r5v0bTuW75h-bs$CW1aITmYswowwB3E-LCdYjkdbvBOLfpjnYM4xXTkp7WQKaP9WFV0N9oe9ejN-WkXFbFLnzN9-QOFlx5aRX5Nz-dggWe6jny83x0awkZaN7PtfNK$8KxEkSoyy0Tc6YLD8otOcDdTFYECuX9RO+KP1qausud$qFoTVKhPisnpTSeEONrTHYK-9T8BOD+W3CuLWy9397GIxUTvwnATPNcXFHQrmesbk$fGMfn6WmW3I3hN1wq$TlwaaekTqCTKmhuFP0PWqTtIN5HIBi9e0U9zer3IlOIGd5vaB$skGCwaTcF18tIiy26+wXXe4FyeLTTWwI6EvnPz+D$LqX$VY3BIttbYbL2k9exYNNe8Tm5-05f05WKf2bdroCy$TaZPTR$W-CppTX56AuDaOpVp+8B7NCLBhisYt$yFY0ZG3696FudpcZ91eEh7dwI3LOR0PeDUnAhx$2BzT8im1hBe66f0ZIDt-hAW+QFLFbF1MjYOi4OqPawB3YWYlxe1GjGI0bXHXK$TyM-ZYr$r9e3b-Zs$azeHpBTTT62jTCN5eDWm28hxG-Xeln+m6nT7oW66GfTTyulKt2MWv$yPXWS$$PDsoUF+IA5T6CCqH3S$a-mTQ-l324m0yxM+elOrI-ufC$leUITRKESft7e1W+o$a0$9HOmniLzW4agP$nXBR0VMWSYGqDYTFojkciXCkOG73DFrHh9awG+by7Q+dNGTbLMj$CKbNVYa-Cb4X38DMy-I7bDRKe$se8p6-t6CbtArLDyDqWKiFmw4IMXwfXTgwCb4V6x-4pFb8vONeRkszwidN-$eaX+o830MihY$T69z6zZgppwPKyaOXT7aoWq$kytFMd0N9wTTKT1YxCbvSOzeAflHA1Xq1MrbNpt1$exhxODXm-mptShYXO3IjhT0TS-G9O9xM9UXLXZT+s2e1qNWWeTjHb-XzkFeDTZnbIXKkjvsecw8-iTnP6LTz--K4MkHF-5x3mMy-mfGCe1wL33r+TapksU08Bab84t36ZsPm+lGIjbIzTTsHzetarO8wLTFrw1OvTCy3nD$7simXs3xxNw-TSsZCnPeYefuStFw65pznDxse9eyWaITa94mxC9$kIlGF955IEIwA2I8EuPrN-Rk5kwCxKv4TBrIfwAQE35n4-0ZzTxT$CS5uRX9odBEfYbVsV95lqiBUm+CK+wZ3h6R1wWXC2EuSwwFjCW1qCRs4MF8xL-wsuCA1uaWLNPsBdbp+QXgwCyTMUh7syIG9$0rVTDYRW+EuGrbTHFQ6FrYU-pDb3+BDABH+E48ogxqC1KVLWd48o6NTYI1useUhK99rkT9$9-9Lz4v+qQBfTy$YEpI3TbA-3wcbvUl8EvOT0+hzsodnTd9qI641iLWdmfO-MeY9$XWm557$bTQZLOLCWdbq6g1+Bg$ym3S575a9BBKO0Tbg8QvKVWIjO3I6mT2GYumAcAAv4lkueAD9tOTlIC7elvBAyTr37sre--opz+1zk4j+NnyuK2y68YIe0NVgN+Dy0zCFYRE4F0aFv-iX+XrFinWnT66wOPz4Ld$gIaQBBOiKRxwYs7Zj-nPOj9enzwcyf1xYUXAf+YaTbr6vO2sGdaPsdTS$aP7yWkmqwYbLI-Z6X7fpaiTbDBIZtx4d2-Moz0$4OiyFvXQvLDk6-ZzpHuW203ep1tn-IVfoTsjFA6ttVIZIkSaFrkDd$7dle2S3zb3ecA8TV7Okyb0X0xZ1AYAOlTqrMs9HHFuf-T$0rH+DrHFnMuKd68sIgYtLBo9HsMyV6wOUeFxWHK7r5-nteeocXHKCyTD2xw3utYsKEV+0AZqCitp733bbOuAjLjIkbK0qrepWcWl10AT0qufor2mhd$IdhuzK$bRLWdmXw$eO0yCLLmfNa9UVAbGm+XHOVOXd2ZY9$cTV$$Dw7r5nPu5Xs66E627$88M-wEWh-MzFj+0NFrmYa9rMW1PdC2XM12-KNoazP-7Ys-$p8ixIZyCMS+EhvapfkL9$b39ma1M4ANIwPRrvK9ZXOr9pD$gXgP4yKC8FPSKiysa59khV4pk$vI9ykC6ZuRI7ZkyTDMAXNa6zQNvavy$yXQ7KWkNlXiPYA3ZrYckudIvEpmz3e-zktAzz5oPiVZx8QOLpfeimKMXtypxgbW73mztxvGFblK1Wp3TXFPtWbuYqfpDfFV7epZ3GXG405Zx61FTamN1O-aRZ3z4tlzDh-9$qek8mTICq5hxKU2oT+AiCKcl96oqM8pc6MO52-XLFZ8dy$z7y9xzBbG8Q$RmSZ26i+DkA1ctCLit208bR8RuksNdYEzGui1vj$jK+3wzlVDzYZjmH+-riquFM$ZPjD$aCzuuo1EPmjEhtoa+uVTZA2X5anCKOu6z1bBLKcbVK9urfqLLyTRhI3nnh6DuOLzNbEMgrl8luS1KcmQ0FNFCvcDLi-5QGvu68RmzjEcnTggu6z$OwjMinTgqu-lYO-pEFoUb-2WmaOIPAFVWi4V86sOjmSeYziiba6BbnzsibEi$up6ZuOXHhFI1lbH6Ucu3UnNhijN1axc9XRGnIsqu38dOB2vNodba27ZNNizynbhgPHOekOYjMuo$iEMwlAOG3RDbKzMbsluOOjQ8aKI7Z68iOdysCbzKwufY+c7apo6nzaEEDWGnqmfnq5rEzlaHrZhi2aMCVc0sGvysF2NML2K0XGvydeCnMLu$l9GapcFuA8w1-m2G$pxFbmzp2Vl8TEpcCoUKXyNl4bQ$y0CNM6VV81Z5jgkYZKzXdzxc9pdhltK1S06lcxV1xGsgEZ68Li7w$BowM32l8sinzsAmwMbEEzmiZw6thxKmEZldZOjrA-CK1fsmZu9Vr8us8mVRyRZZT+t2czj2wnEiU1Z8nCgo2MmSNlOmIOUvcb6eU$HIdLCi8HBCyXbWyjqvAyYer6I-uW9M0i8A1yl+W3PtPT1$MFi8oXaT+wkbahXZ0PcQZeL2ixxFYbRW0HT-w4BgYjyeuKHIdT-2dPNFReFr2+xRGpHk84iC$EGbaXhHKyAGyaQiq1KA2MNgTy1a-kTTTFHx5AMwQqsekBI-VHnPGl$QtVN1-0POe5MeHpveia3r+wwdWsT9t9WF5If$k9oT1bCcTTTNVeYTHTe$ke$LFEFUnkTLA6H3OcCkG-3$aIRCpy3hXfFc$ubEf9dXZScDA+hTkT0sTIXCjTTOwaX4TTe6-2+0dPFiOEzjY5IXITIN379eYTwZ30zjTp7w+3d82+8KiHHXnTq5QakBivXmjTTSkBKic$kQ+6I$vtBzcWIe8-8Ko248sAHTtHYcTo9-WTIXqNrR1hBql$xxX3-uWx5jTk9scc3j41fTYhGaqoefjETOag-eRKXe3t+zjYTITTOKm-m-z2CIXweTzRI+hZW$SgjTPT8$0hIOu+XiFk8jTDTugnIXWNaakINHfW+KvZeVNHb+U0SdYyWDE-vfWbTG5x3uXfNjRRa0Xkq0z6mIDnA-zhgaadZn1O12yezTS9oFi8w+SWGKwle2EUCH-re6H0D8hezTX+zUdHG+-5TVT8-cIkQCe6PnVWwTcKo9VTCoSX-HTSdETkTTIeKe$T8K24p3XtZPY3KormrhxTNpwjkMZPjrue9e6qZynAaE$FQM3y3TVTjeDg2WewxLTkL+K5WAjszWr3LT+KpYhziEDK15ejYTTwoojCXbaC7mhBMyKjFd3579hQgfHzZX+l-o9uAxWT$TuIyzGWTT9A7TTT2D-XA78-rh7-7Kl-XpeYTg5NTTYhiFKe8-xY6X6D9aXU$lWTT2SsGTT"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 03 Mar 2026 17:06:48 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-chl-out-s: CL8lwt3EsehNwbusZ1WONQ==$pRMw8/rAvlmhtQfiKMMs6g==\r\nset-cookie: cf_clearance=BS8hF8vH4s5c9JmRXGmm4zozDFwsdQzZBH8JSpqUpmA-1772557608-1.2.1.1-cKz1vsk82eP4lCb4osLwXpe.U9LZg_g9T12EJzjR76AcSY9tNPLKKmdJbTdLDJf7SPTfcpWUvscUM6JISR2gVQpjXGMEa_8jaZg5CLPpwNRWhVmuQhh.KdfbktQq1MidiNT2ocjsVL.Ox.0RaW491AYMv28c7kbJGX1KMBs6WSU4d9QmrL10FhWZ3iqq5MjlDgk5ypCEDsIc20QPp2.nNwMYOFyncOelvByiZWTV3L0; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=winvidplay.com; Expires=Wed, 03 Mar 2027 17:06:48 GMT\r\ntiming-allow-origin: https://winvidplay.com\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d6a3bdff9fee9c1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"winvidplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winvidplay.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"winvidplay.com","domain":"winvidplay.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winvidplay.com/ip129jk?id=61333461336c786233637635","date":"2026-03-03T17:06:48.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winvidplay.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:33:07 GMT","end":"Wed, 27 May 2026 09:33:06 GMT"},"fingerprint":{"sha1":"9D:1B:D5:EB:27:A2:9B:4C:DE:3A:18:C6:59:65:C7:30:DE:13:CF:E2","sha256":"CD:05:1A:2D:1A:F8:16:84:88:50:E3:B8:35:40:7B:07:FA:E7:01:7A:BF:5D:35:60:93:98:6B:5E:23:2D:09:04"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: winvidplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: vf=5vc3bxl3a43a%7C1772557648%7CIiu5KvUQLVEQ8OLp-tmccbyMu1SeTJkZaNhuduYwzKk.hfpHIFrwDyh-b5_3NtzX1ZTcqSM1nK0Y8Dt8l4SZkVc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Tue, 03 Mar 2026 17:06:48 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d6a3bdeef83e9c1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26804,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"winvidplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winvidplay.com/ip129jk?id=61333461336c786233637635","fqdn":"winvidplay.com","domain":"winvidplay.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-03T17:06:48.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winvidplay.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:33:07 GMT","end":"Wed, 27 May 2026 09:33:06 GMT"},"fingerprint":{"sha1":"9D:1B:D5:EB:27:A2:9B:4C:DE:3A:18:C6:59:65:C7:30:DE:13:CF:E2","sha256":"CD:05:1A:2D:1A:F8:16:84:88:50:E3:B8:35:40:7B:07:FA:E7:01:7A:BF:5D:35:60:93:98:6B:5E:23:2D:09:04"}}},"request":{"raw":"GET /ip129jk?id=61333461336c786233637635 HTTP/1.1\r\nHost: winvidplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 17:06:48 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nset-cookie: vf=5vc3bxl3a43a%7C1772557648%7CIiu5KvUQLVEQ8OLp-tmccbyMu1SeTJkZaNhuduYwzKk.hfpHIFrwDyh-b5_3NtzX1ZTcqSM1nK0Y8Dt8l4SZkVc; Max-Age=120; Path=/; Secure; HttpOnly; SameSite=None\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VczQU8sAy4%2BqCoMoaUvFyQVyhKmMmG%2FLIukgtFEQNnOvDexb9R9XsH%2BVtL59yGGOIzdM6ZU%2FelrtUykl54Q0R58dejuWH0dc6VQAhquT\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d6a3bdba83937c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":6353,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (930)","md5":"1b1ba8955fac0c8680dc55c3cbae83a8","sha1":"162cd57c3bb5375026fdd35edb4e286339129fff","sha256":"939aec3e92b29c7858a590a683cc68ba51aea333389f530e0dfa929ca082945f","sha512":"ccdda4f74c56a7567ccde2a54fd4504bbec06c40f64c37f918b933196f2871c40de233e69d876d785e69945d236c7ab15f27e3ab885cd475de512125d3b5c4ab","ssdeep":"96:Su0VRo9x+Ki0TtbZZzfHi0vIwtinb0OCFQlHw+JI7uN+aAnx/IZ:mVRo9kKBtZz60Bt+01HCN+nnx/a","tlshash":"05d12b7338b2144a5513a4a59eb362093072c2076e05d84976dea7b88f1df8d08f7efc","first_seen":"2026-03-03T17:07:12.034577Z","last_seen":"2026-03-03T17:07:12.034577Z","times_seen":1,"resource_available":true,"data":null}},"time_used":353,"timings":{"blocked":62,"dns":26,"connect":10,"send":0,"wait":229,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"winvidplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winvidplay.com/ip129jk?id=61333461336c786233637635","date":"2026-03-03T17:06:48.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://winvidplay.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winvidplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 17:06:48 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27958\r\ncf-ray: 9d6a3bde182e723c-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb09ed3-15d84\"\r\nlast-modified: Mon, 04 May 2020 23:01:39 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 346059\r\nexpires: Sun, 21 Feb 2027 17:06:48 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Shp4YdiDXiRWC15KI9niNT70jJxcyU%2FUy%2BtSWQW73HlSKVAgq2os6PQAT9aWYOCUDWvHWEH0%2BcXkvYuryQmajC%2Bolv03DuAKsL10uUOt8oPDkpE6NcmX1k1A8am12ImvfyZ8g8f%2F\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89476,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-04T13:46:00.042103Z","times_seen":217618,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":20,"dns":1,"connect":4,"send":0,"wait":14,"receive":1,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/fingerprintjs/v3","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"54.240.174.127","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winvidplay.com/ip129jk?id=61333461336c786233637635","date":"2026-03-03T17:06:48.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"openfpcdn.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 29 Oct 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7E:88:9B:B1:7C:CB:A7:14:49:10:D6:FC:A3:64:23:03:9F:CC:6A:B0","sha256":"6A:98:96:56:64:4A:39:7A:9F:12:CE:F5:99:D3:C8:24:ED:17:AF:92:3F:E3:AC:C7:7D:1F:2D:74:46:2F:95:D9"}}},"request":{"raw":"GET /fingerprintjs/v3 HTTP/1.1\r\nHost: openfpcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://winvidplay.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winvidplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: CloudFront\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\ndate: Tue, 03 Mar 2026 14:24:49 GMT\r\ncache-control: public, max-age=607240, s-maxage=10523\r\netag: W/\"hurxpFJ1hzJm8rhSSUCMgpelT2E\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Fi9XYDIjvqPXKb5N04TUqGav0RGhnVJEfQ4DrUccebNU4f0xPTiiSw==\r\nage: 9746\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33442,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33109)","md5":"ef5a1ccf6a53cc40021bfd4647f82b4a","sha1":"86eaf1a45275873266f2b85249408c8297a54f61","sha256":"57281521094dd6fe0d1997e31eab51a203b0f338d39e730d260fdfecce621905","sha512":"16923eaa089ee9d2d5a4e7a02cdbd31da35c8ce7d61e0d7e1bc8a6aa0648c358ad5d5f9ce5aaec4c5247475b8192af167e7fa6941d4fe181c5e01f28ff8537d7","ssdeep":"384:fQQYf1KNHRJijKLE6wXegKHqHTBMmwZCKQLFKA5+pCqNFaiE8E0QIQfJJcChs9RW:fR1HRxf6Hc9NwlJJAbc1GPgJN","tlshash":"9be2f6d8b2c3b02a227368b6497f6007b63bbd54241d4843d57bd4c17ca5e9a813bfb9","first_seen":"2023-07-07T06:15:03Z","last_seen":"2026-04-04T13:23:41.55351Z","times_seen":4290,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":63,"dns":52,"connect":1,"send":0,"wait":2,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}