{"report_id":"3ab54135-80f0-49f6-a868-107029298525","version":0,"status":"done","tags":[],"date":"2026-10-16T02:34:29Z","url":{"schema":"https","addr":"nordiciptvplay.com/","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":0,"asn":22612,"as":"Namecheap, Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"nordiciptvplay.com/","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"title":"Nordic IPTV – Bästa IPTV Sverige Streaming i 4K \u0026 HD 2026","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-16T07:26:21.477016Z","times_seen":19139469,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"nordiciptvplay.com/","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":0,"asn":22612,"as":"Namecheap, Inc.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-20T02:34:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-10-11T22:46:23.68047Z","alert_count":0,"request_count":5,"received_data":156037,"sent_data":2794,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-10-11T23:38:49.428366Z","alert_count":0,"request_count":1,"received_data":29020,"sent_data":533,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"s.w.org","ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1993-12-01","domain_rank":27695,"first_seen":"2017-01-30T04:56:16Z","last_seen":"2026-10-12T15:51:38.541378Z","alert_count":0,"request_count":1,"received_data":1209,"sent_data":562,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-10-11T22:47:21.405407Z","alert_count":0,"request_count":2,"received_data":13988,"sent_data":1277,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"nordiciptvplay.com","ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":111,"request_count":111,"received_data":8473581,"sent_data":58167,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"WordPress:6.8.10","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Elementor:4.3.5","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.2.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"platform.billgang.com","ip":{"addr":"172.67.154.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-09-15","domain_rank":0,"first_seen":"2024-11-25T07:11:01.430625Z","last_seen":"2026-06-27T20:26:29.719012Z","alert_count":0,"request_count":1,"received_data":4843,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.sell.app","ip":{"addr":"172.66.45.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-05-04","domain_rank":0,"first_seen":"2022-09-02T22:59:05Z","last_seen":"2026-07-22T15:02:19.332104Z","alert_count":0,"request_count":4,"received_data":1670320,"sent_data":1901,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nordiciptvplay.com/","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6baaf08b44e35f0cf3b1e1b6a88c562e","sha1":"23086dc016815e6a13fcbf305e700f86eb8bc768","sha256":"bd941c1afb0479eec8133ed7c42951a249008221386e82809b8141453f18077e","sha512":"5e9cf8cbfeb2bd3c68280fec02f789be75acd19337918b2be5fba9b8b5a756848d8e4fa5ac3d3b8b79227373e4e6414eff6123731467aa00fcd13d7c5040e102","ssdeep":"","tlshash":"6b61a99e3775348b32b604d16a3f4e07eb7248361a88d035cab5a7541cb1463d37ad4a","size":3388,"data":"","first_seen":"2026-10-16T02:35:36.403671Z","last_seen":"2026-10-16T02:35:36.403671Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d226336daff2e365d4fe606eabecc97","sha1":"22225ea34ae07af5379684b7d8b225eff89cb3b1","sha256":"689381d586fe8067ac2648541467e04efb30a0a69b906ab0d3f02b22f74b7537","sha512":"aab1a7d27b4b74b411ae5d2dd7fc268e874e03f7740670579ac5ce627cfd6c7ca1a7c03c8d72f587e9db962f5cd566737ccac53994bf65213d4a04ba72a7cd70","ssdeep":"","tlshash":"b7c0809176c45f4753ca67c5e63c7dd5117522336d107f83d35fa9dc029079298c4157","size":176,"data":"","first_seen":"2026-10-16T02:35:36.405037Z","last_seen":"2026-10-16T02:35:36.405037Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"295170a0215fce6839495bc6f883525d","sha1":"1fe2434cf737983265c36eea7b2d1125cd2d7e9a","sha256":"ecad64c6e184e79568e595feb569f9cc890e19597a773b0dc2c93f9a4155a1d6","sha512":"e5a99be6337e23deade48555c207c9c412b6dbb2c6b4f9e5ee759d2ef6c7d735c047e722d687961d0dd256e1e0520535b848e447c4fbc6c25d65b1a93294b8e4","ssdeep":"","tlshash":"d351bb35fadda66d268203e8d1219e4e40198115b3e94e4e6b7de4bce1c2fd3adc2607","size":2668,"data":"","first_seen":"2026-10-16T02:35:36.411706Z","last_seen":"2026-10-16T02:35:36.411706Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cab7010d3b21f130e27d9a030c414ebd","sha1":"ada88b8f3d67d028e6c51c7cd6abaacc8c2f4b71","sha256":"5da81c81d930a28c03fde23bdf25acad3c18f4c54208a18e242bb1440eab2a5a","sha512":"d6bcef248d3759f9ad0fe66330b1e12b5db5077e630590a8dd4e25c5eb4049e3f0303babb21f4d7e59f103973a940b169b639321f18eb1fdfbfb83ae1fff248e","ssdeep":"","tlshash":"ff01762cf084601485fb703991bfb756b6137cb66a1b50c7868c99b82e2cb388d63985","size":673,"data":"","first_seen":"2025-06-22T00:45:56.526158Z","last_seen":"2026-10-16T06:21:23.522545Z","times_seen":602,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"42398de34964b5b918f5edf0fdb4fa7f","sha1":"51963457d19b1bba4660cc7913baeb57473a148d","sha256":"807d943527ef59592fc161436e421810e56fd3d0f1c5beeb427f576cb8e22f7a","sha512":"42197f6b8c0ef3fb22a84c6a8fde4c388f05108b7bf23482f07f01893e842d46ac8786d09cacb6cdf767af0a936e414e00996f5e4d5647e09bad727bd1460180","ssdeep":"","tlshash":"54d095fe50705cc70d74f0bd47423411595210902283185f04555201b107b4b8ab1505","size":231,"data":"","first_seen":"2026-10-16T02:35:36.414253Z","last_seen":"2026-10-16T02:35:36.414253Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d21f911aef7fd59bfee1709a408ef76e","sha1":"4aca39cf3a36948f96b87469d4a153737b073f24","sha256":"0087cb840ca73fcea551b680c9d5c6cbdc4a79a741d020f31a8af2c7e38a40e4","sha512":"d5be109a4bdbba495f7ffbe26e54d2aeda5e17bb6427d6368a84fd7388e277bfaef1651bd325f5bcb303ef84874b609db2bdf9607a9da9996481fb2a60f465d8","ssdeep":"","tlshash":"f751933475056ebf43e397857a23be12657c062590807da8f4fc48bd05f6978220be4b","size":2703,"data":"","first_seen":"2026-10-16T02:35:36.415808Z","last_seen":"2026-10-16T02:35:36.415808Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2e7d88476ac8d09e1012b791eb7a468d","sha1":"3e853fdf89b065b5851fe12c75d47d43d6caa412","sha256":"0fb12bc83446ceb7d6b4244b95f474192be92d541f13a231d3a930572167e58a","sha512":"df9cf1bfea79e875f45d73b90b2b17f893e55d83e35709d798188bd7f3fcc07cc55ac5ce13fd8624f4b2accad6dbdb3d56659cb60c69ba3ac5b0592e991fdfe7","ssdeep":"","tlshash":"75b0220330b03b832a0020c0823c020ba0f03cce2f0828f3c00e002e0e80c80a80200b","size":109,"data":"","first_seen":"2026-10-16T02:35:36.41775Z","last_seen":"2026-10-16T02:35:36.41775Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e04be0dd0188a36e0e18beef4e9b071c","sha1":"ae7eca76de5c8abc3072d1babb2d0b77986d621b","sha256":"fd996e5ed43fba47fff738ab926d7c5ad2db1365df6bcf1b5f8ae1b2f2c50bda","sha512":"3440b5de53f513f6b80dece0bdd4dae64d4a3450c6b3c4b658a6093e4011f3712d1cb0a601ae502f2438cb7ff127de85dcb014e1cbecab553de02521f6da66d5","ssdeep":"","tlshash":"6aa0228a30832800c08ec2a08e23fc00082020cb038fca083ae0ae30eaa0880b08322f","size":66,"data":"","first_seen":"2023-03-07T01:18:55Z","last_seen":"2026-10-16T07:17:56.979431Z","times_seen":10847,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a638a4e10ddc3fd95f50b5fa4cb71e7","sha1":"898a0c5c2f02abc7591e55e7633e5b424edcf264","sha256":"648eac9f216600a3c3c231d633ac5733b1310e207f01cc979cede2d56a281f1d","sha512":"04ef41c4681a920a22846ae4797e6884f041c0880418f14816fc93ad8891f6644f55c9a09d51ef989d01a4603fb86211ec08ac89937d70e4877104de4fe424fd","ssdeep":"","tlshash":"8cd0120b56c15de80b5e63087c6f72587879195454e5f5c1b2ac249c6e1bcb45159211","size":284,"data":"","first_seen":"2026-10-16T02:35:36.419966Z","last_seen":"2026-10-16T02:35:36.419966Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8537f855b31e03b4945f9092c0304ff2","sha1":"40aeade28bd721c2b2b27273f5d7753bf3123079","sha256":"f8ad620f7a81212c33da4e691fa302f2711f3629b515632721f53e403aadd99a","sha512":"f2bead270d2eb302d868322e0eaa8a958131c9f74697dccb6f1a0caa66310d5da107a4147e4914a24d95f2abceabb8deb02fe5d615ca41097f891f79792c0bdc","ssdeep":"","tlshash":"7421c0152a215f64479ea7d8a2da3eaf44d0033329c4ba4e669ad0a901f7cdde0452e3","size":1304,"data":"","first_seen":"2026-10-16T02:35:36.42146Z","last_seen":"2026-10-16T02:35:36.42146Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/jeg-elementor-kit/assets/js/elements/fun-fact.js?ver=3.2.21","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3887e4c9c7982c85d935a63c7769d432","sha1":"9e5099bb48704e4d455bd6717690ee61e13adb02","sha256":"df0beca8c4b20a8001a6eeec27f6ac1a22f63ff7e1f79f50aeaaf9ed04a904b8","sha512":"65910c2f8fb160051b3e51efc693f797fe0616274fc084615547c138a0da2b7476576f30d239e23ea83634a3c73fc96344c04701d862cf0ca70d7e8738fbf652","ssdeep":"","tlshash":"544163a830aaf0c2139b951f153f501df3360c7a2425a4d9e2a884f67e75d4a7365bb4","size":2005,"data":"","first_seen":"2026-01-08T23:38:07.23809Z","last_seen":"2026-10-16T02:35:36.277372Z","times_seen":222,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/cookieadmin/assets/js/consent.js?ver=1.2.6","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ebbf107902e370fb529a413ddcd4fa9c","sha1":"37c37bf98c74945a2bc99d16149cb735b8cc1cfd","sha256":"73c4602cc619d15b345133418c37982dd083a895788c168461cbad8c5839c449","sha512":"584f93256bb1a1ac306c07e52ba1587559b0c2f36e37538203b4e4507a6d3169ff7bf3ebac4d3d392445ba53ceb52ad83095b0add8dfbb488a2a1ab2928bff54","ssdeep":"384:tIsxr+JyNy291yIR/iF/iiO45iJfiT3iqJklrzKCNXd4/iifie2ij8ivfihfij39:t7rFAIR6F6R4AJaTyqJklrzKCNXd46iv","tlshash":"0ea210a4fedd962c00e512e9e56a558db42c5032f841a89e3f3cb4f48ae0fd78cd5a47","size":22128,"data":"","first_seen":"2026-10-13T05:17:41.120596Z","last_seen":"2026-10-16T02:35:36.364376Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-16T07:26:34.289773Z","times_seen":1112048,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"platform.billgang.com/embed.js","fqdn":"platform.billgang.com","domain":"billgang.com","tld":"com"},"ip":{"addr":"172.67.154.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c0c0a40f8745b980405be193a08065f","sha1":"b00ec7fea8a2b1cd47052cb8b645778c1e705ab5","sha256":"a1ece95dc1b25d3a7b4256b0e4f70cedbf5dec916878c207b676e63e1eed1a1c","sha512":"2e22ad31cf42e031aa3b573da8f7dad4f10554d40b9e131e7a325a60efcfe1767852caceac52adbe1799c3987728e80a142c4d7b7872851d4e96fe25b1c75696","ssdeep":"","tlshash":"b681407ece725530424b913ef3fa6905383490b75302852d7a3ca99cefe4d48a5a66ec","size":4065,"data":"","first_seen":"2025-11-14T02:07:45.003322Z","last_seen":"2026-10-16T02:35:36.245368Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js?ver=8.4.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"83e9b29f0086bba50d653f1cb8dedc3c","sha1":"f8f89387c9aca9d524bb638eae457d4659efca52","sha256":"2ac3af00c283c0b2ae6108fa83a2053e51274a2a812fb063916cbe19bc4f96b5","sha512":"c8018876ee96b4600ae32342ec6d21b452ad4109d605fb838f146b734de274ef5e37179567a2c67ec828dc1b673364637fc82e7dfe8f7adbb18e20555577160c","ssdeep":"3072:pJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/Yvr:pJLC4dkEUYnafpl9v8cIWybV4y+oGMMG","tlshash":"fce3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","size":143709,"data":"","first_seen":"2023-03-14T09:12:04Z","last_seen":"2026-10-16T07:26:06.742086Z","times_seen":114662,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-includes/js/dist/vendor/react-dom.min.js?ver=18.3.1.1","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bcf32b37005b7ba5c974e2a0b66e457c","sha1":"dd90ef53cfc2512476c873ff69c811ef710ad7ea","sha256":"9ab40ec8c39a41ed1420594767d54ad3752f385ba8019085d32374b10720b427","sha512":"3841445eb59db3644f7faa6d8b234abe7e1e73808e330420a764b34c08fb29590d5f22163d2461f0113c30d06673c602e6eab56f704ed6199af8ca923d344f59","ssdeep":"1536:rfHWBpuaYs8YJaMFQ5RUv+KBGNZm65B8uEKULUIw+hvYYQNk:rvyuas5RUf6NEKULnjQK","tlshash":"37c307e83d96f6a16ab702a700ef1817733c2a1b640c4860a611fd9d75b901eb17bfdd","size":128946,"data":"","first_seen":"2025-04-17T09:49:11.600427Z","last_seen":"2026-10-16T06:50:23.523525Z","times_seen":30329,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-includes/js/dist/vendor/react-jsx-runtime.min.js?ver=18.3.1","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6e84b49b20f3df8d67416886a41f305","sha1":"71048379dd0f9051a450352788d857bebd81b5e4","sha256":"fb78ff9eb3fd2ac10b035d0bd433777ece12657eac1d45a641c8d033b81ae1a5","sha512":"2dd2718e18826cee91f154d8bac14c35078a735a8dbbaa2a7f89727f4d7ddcdf5b7306afb7144fc73c5adccbf2f6789752679fd7ec16cd4b30ac68d74efe1650","ssdeep":"","tlshash":"c71100d1d48624e32bb3d853e12e94c6763a2208107eeba1b793f5e4106ead58163a72","size":900,"data":"","first_seen":"2025-04-17T11:27:49.599947Z","last_seen":"2026-10-16T04:06:01.955018Z","times_seen":16743,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/jeg-elementor-kit/assets/js/elements/accordion.js?ver=3.2.21","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc47b29e24f44db45cb5a88e7c51cda1","sha1":"2fcf27be26eb43176f479236e2ecb48088661f46","sha256":"b94c731a931288de28c17e9db1620af66cc99cb7819aa3aa872ef82fbd1b93d5","sha512":"0c94f8e2ddea1f855625eabada085540b58b33cf5e94ac65cf0ae037f6b429b0f67aae4c86d7e27ab7a6f72e83c291ec3b8a6b78b92d583366c6de03064d0410","ssdeep":"","tlshash":"8b41323d30a4f4e5035ea49b101fb40eb2761d75116fb095a3a941b67eb0c49b361bbd","size":1913,"data":"","first_seen":"2026-01-08T11:02:25.111685Z","last_seen":"2026-10-16T02:35:36.287836Z","times_seen":152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.26.2","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2dda439643a822112d10b9ae21d31aab","sha1":"653e7a9ecbfb694dfca181fbfa90e9e2c91eeaaf","sha256":"1222f6e82ad782bdca42fc5c8b48683aa9323cfb933f8da846682c9ad2030f4e","sha512":"3b8a26e081bb40e4b47f514b2d8b0bec0b36695c3e716af5b6266e92e232ca24f0352392088fc83ae805886ba681165b92f18afb62bbe2bc992eb40051bf65d1","ssdeep":"96:BuIOhUwrxNkjboFCrEO/HazYAd4NLhsstJQPCl2qGVfFVKORYQGK0jDjY8k2:IIKUjjboFuazCNL7MPGGDMOmQqjpk2","tlshash":"c3d1879c09489d2b25e43ae8b0576b741a3dc0323c19d981e651eddc18fcfd183eb932","size":6263,"data":"","first_seen":"2024-12-23T11:26:33.68187Z","last_seen":"2026-10-16T02:35:36.327267Z","times_seen":1329,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8127c1a87bb4f99edbeec7c37311dcd","sha1":"9997a1745f48bdd233dbe9bd8164daa53eba105b","sha256":"f313d12ea6124bd28fc4a6b7163d253bb83d5aeab5edce594880c5c3df475cbc","sha512":"aa10ddc5b29905c60a058faed3f5f195f7577ceac46489e02461b5135732194daa3aef4aa473127bf8c753312e02074cfdac8d0f8f0cc8aa544c7f8e02bebd08","ssdeep":"192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+F:s6Udn3LzoJphH8uClD2tFtJ7byTwtF","tlshash":"8612d8ac30deb021239a11e1586fb101f13aaf6532d99ce0da81d9e57db19c960b3ff5","size":9141,"data":"","first_seen":"2024-04-03T08:25:07Z","last_seen":"2026-10-16T07:26:17.657092Z","times_seen":266731,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/metform/build/frontend/widget-bootstrap/index.js?ver=b445a4677483b289f57b","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d5561bbbe7a126de19484a91be0e5a4","sha1":"3683b0d5dab34c17f6fa3307d2b5edefcc91376a","sha256":"a6da77b42621b5dce569aa8c252b00f6d404f1b46de7e309d25a83a33ec2934d","sha512":"b2c7572c4de5a2fa00209cf814716b676da6a18e19d2dfe6fe42a3e5d52e756b28bc5f9dbf14ad4f2ac011a242c328c66dcb8bb2ff978b56f404ed5069b5a150","ssdeep":"","tlshash":"310125e1b80e723342fb54b743ff76c617321f6ac0099184241640d04f69c123596dde","size":796,"data":"","first_seen":"2026-05-04T03:18:09.173671Z","last_seen":"2026-10-16T04:41:08.437349Z","times_seen":484,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/jeg-elementor-kit/assets/js/elements/nav-menu.js?ver=3.2.21","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5341ff00a33a736421c8b32eb149f841","sha1":"66428885e8cd1b759c8ba411129ec007fdd08ccf","sha256":"12b8738e85d5e3d66e77f00e4f2ae8c5b6a07212c6c02e27c47a692c36ce865d","sha512":"b6f4e224873b5b2fc471c2b3d5d735003692698aa1aeac86186e66953be8a925def21e3220347655c6ed454dd539ac73f41c765514e01068884b8039c654f64f","ssdeep":"96:14+MCTe/dBnAX7IyWEn6v70c7ESJTH0cTHYSfV6hoobqAPV6oA55Oonodzc+x/8Z:wdB+7Iy96Dvd5HvHRfV6G2qAPV6oA555","tlshash":"4fa15156b0e470f911bf609e602b60293767092ea109a04672b8c0ba7e76c8533f5b3a","size":4700,"data":"","first_seen":"2026-10-03T12:03:00.632928Z","last_seen":"2026-10-16T02:35:36.372409Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.26.2","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b76642da0065cbaf14b220aa11b3eaf","sha1":"86b6763b459a53cd16a0411d2388412cb2adafae","sha256":"479bd73d76d3360fd8d91d53512a956afdc94c880636817ce71dc91f2858bb71","sha512":"e68d4b6a3fe60a195f1e759e0b0a1f1c76dd537d4e357653e3e6378c741775652137bab6b8a59c20442d710517516fe6266ec32534da50498ca43cb69f19dec9","ssdeep":"384:zxpy+EVxFm6cKJskdHd7taQtHuGJswg/i+pQDTWmMo7YtDTVHJiMqkoh+vFWN7Ko:zxw+EVxFm6cKikdHd7taQtHuGJswg/DU","tlshash":"11b2d9013163ac7a50cf815be467420e77378895740570ed7abc6cdba5b8e9a33ea339","size":24210,"data":"","first_seen":"2024-12-23T11:26:33.691782Z","last_seen":"2026-10-16T02:35:36.340807Z","times_seen":1330,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sell.app/styles-Zn74SZMx.mjs","fqdn":"cdn.sell.app","domain":"sell.app","tld":"app"},"ip":{"addr":"172.66.45.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0d372f37e8555098358cc74d8d0204c6","sha1":"b7839f0aef30bd98b67d9b517415933c4c1dc618","sha256":"fd457d033e5fd17803007b1d8db57068ebb4fd6e4a4ee0e9e9e41de1fed9d4f9","sha512":"fb7e7e7838e7130e439f664231f347f3031201a76ebcf363ed455f28c88195cfacec98b8c408ba999abd0ce3bc2450ff5249292b66d440b6860b6d0b729c9679","ssdeep":"768:G2+q4r52qUlwdg6vwGClrzrZSazjheyTTuWA6fjjkSb8Phfe8225ZBTZQY:Ga4r52L3TZtvkdP08LjTZQY","tlshash":"c9b3e1e7f3b1993a2c27a49d5d5cba3e3b2e6554da600fe9a550e3105fc16eb3e83004","size":114841,"data":"","first_seen":"2026-10-16T02:35:36.272865Z","last_seen":"2026-10-16T02:35:36.272865Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/js/chunks/section-stretched-section.min.js?ver=4.3.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8218a1d889cee8ed6094f392bdb7fc64","sha1":"ddc353bb95b2d89f6cfc8fc13ee32574f63b0561","sha256":"234201e19453b4a7ed9678ec3b2e8354f1d1c2a7b264c4f072b6a645b6d15499","sha512":"fc201da4a00c090622cd13c9d1be5f928e8b0384b730b5b0a4245d73a00c79969564429ddbed936226de456431ddd3599d00098302be550af7dffb2f9cf19cc2","ssdeep":"","tlshash":"a011e2777891b4e30187605bd7772489e3681cfd42387094afb985f97ea144290e17af","size":1057,"data":"","first_seen":"2026-09-22T07:38:49.763173Z","last_seen":"2026-10-16T07:04:48.171079Z","times_seen":3205,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-10-16T07:26:34.362551Z","times_seen":1014749,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=4.3.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"064158d77b47175f4fa06137e18e6384","sha1":"c9e498e2ed37b6d086b53191b26fe5b878edbded","sha256":"2636846470306c226883fb4ede46a96d71a54454d6c8b1bd9e26e6baf72db965","sha512":"e7e6f870505ca8b91eb3ee6a8ccaa1c1705f1a0f71d6813cbda20455a7ec400ed70691ffa176aca644a81b4783f009427f39cb154d132c290c0f12577e7992b9","ssdeep":"1536:z2GruANhDXVyVaQDRSSHQ7dr3kOYdA6i9CSj8S/9q4mq4cR8ULDp8lo19iNTWlnq:zF6ANpFM69b1O","tlshash":"6d33c9827b91b867429ed076e02f5009f3264988a80da05cbe7edde1b8f9c461376f75","size":53086,"data":"","first_seen":"2026-09-16T00:25:03.444898Z","last_seen":"2026-10-16T07:30:51.461179Z","times_seen":5941,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=4.3.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8158a95aa7087189ca5ad6e9867dee9a","sha1":"6e740a2a96355aeafb06a5c944938726b300d223","sha256":"bbfe6403b4ddba29284c72d20f000154d04588d60850fc39a6fd65861c6d83e6","sha512":"da11805a203b7853ad7d4e8cb418d19f64444c69c2027ce8fe1551531b8ad17ab91b8cc3073015a690e815179003f6021222ff0699d5930a618b843348aeb281","ssdeep":"1536:z2GUusuU1FNBevOYdA6i9CSjnNMdmPaLK7UYBeQCWh+NsKCPWEgwPwicOMLkskwA:zFfsuuuhU70Yv","tlshash":"9e43fa467ad6f862025bd473e03b5009f3264dc8ac09f098ba7ed9d1b8f8d4653a2f75","size":60022,"data":"","first_seen":"2026-09-16T00:25:03.440475Z","last_seen":"2026-10-16T07:30:51.426624Z","times_seen":5914,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/themes/hello-elementor/assets/js/hello-frontend.js?ver=3.5.1","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d18b2ccd0ac9b96603ea918df33ae9f","sha1":"860694ebba3acee39d4db64a690359d4002600c9","sha256":"268cae8c2e7a7330526dd33b7dadc1bbd08b039bca4acd70390d81a7ef644767","sha512":"53afc81e7061aa8b603d280a4730dc93b5cd3bde3ab17d9224b4997b412f18f189cf2474fcc890fa919f936699606277107e3bb850070b0bdd8a723dfaf14f32","ssdeep":"","tlshash":"af314766724a5d3a045ec2b72b4baa9fb166958f9441807c703efecf0560dd123e33b2","size":1830,"data":"","first_seen":"2025-10-27T16:30:12.654691Z","last_seen":"2026-10-16T07:17:57.529846Z","times_seen":32611,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor-pro/assets/js/popup.f7b15b2ca565b152bf98.bundle.min.js","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6573a99c9d965647446825b5f53c39fe","sha1":"ac2388d79654fb8fc18f24a22466f3b8a022a02c","sha256":"0e729a8b0105cebffadb04b4f436b9ee2bcf1c95c33e9934af8d3490ad7e3b5d","sha512":"a2efb4a72d865d069d7a20c062a23ca85edf4566a052c1a51b945e4d9bde9b8f1cae5c5eaa41c0acaa14db99974295cc0d970ee3271c8e6bb570dba60fe53d93","ssdeep":"","tlshash":"b701d0a030a2b8b615af408b74c7057d75512df2740668b279cb84d16eb4f993352779","size":752,"data":"","first_seen":"2024-12-23T17:17:24.988998Z","last_seen":"2026-10-16T02:35:36.254542Z","times_seen":262,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor-pro/assets/js/form.ae7f04a9f3cbc167835c.bundle.min.js","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"48dcdb3850003a0e4c1c6378a697f6a8","sha1":"ea6937a4bd3653d1c56fb3aa25102de27eb877bb","sha256":"18b15fe107fb901d7161a13586e2d10854d927b3121290c358b868b2ee39468f","sha512":"46694e6c880d105faaf237330a22bbf3930e62ae33097f98f8e3a5e5a03379eb97b0d72ea30002c11f81e324fe62b9522f860c2b5345049159cc1da6032a76d6","ssdeep":"384:ljfucUQ8HOfXXtaij86dYmpbaX0QY+aEeYWWhdNMCHr5w//sjKHqXt58sbu8sUZy:ljfucUQ8HOfXXtaij86dYmJaX0b+aEeP","tlshash":"669272a53061688b4a9e24bab493009cb70335b9ba86704eb5fd48ef9774dc1733537b","size":19656,"data":"","first_seen":"2024-12-23T17:17:24.992934Z","last_seen":"2026-10-16T02:35:36.345503Z","times_seen":263,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/js/chunks/nested-tabs.min.js?ver=4.3.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b147b7558f1402d1bbf5e692ed56e7e","sha1":"ce5aa27a6a9d7b3ef27a3127b39ca695a20ed1b0","sha256":"6e93510a15f216e017fb8a71182a375e934a55f1fa9ba2420e1529d3162bec7c","sha512":"c934dd709b7ae94eafe5172cd8943d0ab4e068194cf30c05a9307af949a0e7626d068cfcd730138a1f0cebb1fca2ea086e014e2f46473cd01981b8dc6cea1a1f","ssdeep":"768:gtNr0uTvqmPhRqg2NuIh5AJX9jGq4m47v7gsNolg2w4XU4WUgiMPBWPVjpgInwvd:QNr0uTVpRKKJgq4mS/o22w4XU4WUgiMn","tlshash":"4d13d74376d5b876429ba072e02f2506e32605c4ac0da09cb93edaf17cf8d4653b6f76","size":43389,"data":"","first_seen":"2026-09-24T13:49:33.80432Z","last_seen":"2026-10-16T04:43:20.505926Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/cookieadmin-pro/assets/js/consent.js?ver=1.1.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c8c8099ca4f87f8900af97260cdd756","sha1":"4b61029ea20e7921605fa72ae7b0eed25bb3dfc3","sha256":"11458ef33ed4110701855f75c2191a4f80cbd592d295945d5fa390e859efeca3","sha512":"dceabff2a22918971c8323962b4ed02ca506ff3b7c25db82f931ec92a3152d49099fc022964971496e3edc91467f3d2ce5bd475a2c63c030f6583eddd6f5b6af","ssdeep":"","tlshash":"df21e1817eec495517e931f0c91ac4087069fc207985c86e9a2430ea5f95feedcd1b97","size":1154,"data":"","first_seen":"2026-02-14T03:52:07.674951Z","last_seen":"2026-10-16T02:35:36.392313Z","times_seen":267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=4.3.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1518a6e40ef135a917f3781e1a8adf71","sha1":"43a39a38d7b5095e542a6af60bf53c5fd04b185f","sha256":"8d2011a2a7c0d96582f8495b69b6e5f56432ed8b5095cf7aac7e2f259ea2fbfb","sha512":"0bdea01c8500e4d623fc83c39d879009919f6c454b44376404c0b1c3a91887955a4a1170ad681abe47674410f6af26bb3c1bcf9ae8e2e98bd67e5188f889a7ce","ssdeep":"","tlshash":"15b012407de9261540da109e150315a71688dd6d042a49d53c10c301503490313c97c4","size":103,"data":"","first_seen":"2026-09-16T00:25:03.45477Z","last_seen":"2026-10-16T07:30:51.408895Z","times_seen":5989,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-includes/js/dist/escape-html.min.js?ver=6561a406d2d232a6fbd2","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aef7a048c0e0677cbab0efeefb9dbcc6","sha1":"7c166985c69f2915f8abda5fc88a387db12a8788","sha256":"037171f4a3a999572ccd4332d70596ae631a893eadf47539a7ea530ce884e90d","sha512":"40bbe86f4a0cecec0d8dc8f48f5894fb97c7d294afa55fa2bad966b6b56b4554119492b4c9c2d98b6fc55c89bdaf282c81785cb3fbd6129193d6ae021a289867","ssdeep":"","tlshash":"db11029670e2f998331a5191883e2087f33cdaa012ada1f0f208e0a1397047a2339d2e","size":1000,"data":"","first_seen":"2024-04-05T11:13:46Z","last_seen":"2026-10-16T03:11:29.676403Z","times_seen":29322,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/metform/assets/libs/cute-alert/cute-alert.js?ver=4.3.2","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0ca040ac9f10935ba5e80516e3564a0","sha1":"6ee6c6d22c2ecdf8b796c8eeae1198679b8c21d5","sha256":"0321d9dc6f3fa2ef62f9d91f9d0364a020e6e5bc7ac2f8d84840017034ba0e4d","sha512":"9ec0167baab1313106656eaebf8449badd6307641862268867a37d766f5d7d4d9ab4e07abb0c2b6d7f4d96682c3d772ab4d6f58b01c6be250f77d9d6a1f2fd63","ssdeep":"48:suypTGd4wUmR3KPvtnAvjtkqBO+C+eoiE1RN/iPGKTAMdBXyZdRE8VwUmR3K885s:XRnp6tOtk4eANsM7mxp68yY","tlshash":"c3c1ed2545f29e360773e1aea7af924539209013f94aad45398c479c0fd3e615ef27c2","size":5683,"data":"","first_seen":"2026-08-31T02:44:11.680301Z","last_seen":"2026-10-16T04:41:08.437995Z","times_seen":284,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/js/chunks/background-video.min.js?ver=4.3.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7626a0716115132216ad55f8b49e35b","sha1":"307b9ba77fbd7f172205d93a6cdb9f49d37b09ed","sha256":"4bafd11c752be817df7d0a1bf792465c6198e5d957700e64fb6263affb784f1f","sha512":"1f7e7e8f82052f0ab365e09886720fc24dbf1a3a4f64451527fe374d28891ff0188b8c941d16df8be97429a21a7fe99d0820ea53e1eb4f1bd419f6fa6cdc1bb7","ssdeep":"384:HstSPep7waQ3uowkPxw9mGpJwcCkMm1UjiVgd/ZID5Nuhav8R6nTFJ/NPxzW8Hsc:Mt/peuow+8xJXhHzVg2NuxwTFnxzW8Ht","tlshash":"dab2554739d1f8696266e4b1943f2505f3290548a80cd1acfa3feae06cfdc0612b6fb5","size":24570,"data":"","first_seen":"2026-09-16T00:25:03.430288Z","last_seen":"2026-10-16T07:23:38.61211Z","times_seen":5934,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sell.app/embed/script.js","fqdn":"cdn.sell.app","domain":"sell.app","tld":"app"},"ip":{"addr":"172.66.45.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"df4f14d0964c48d6f04f77e5c9bc325d","sha1":"a72ceca17477c8775cebf392855415d831e14fa5","sha256":"a746bb25650dfc83511090b441afec5cbf59869a2d660f2730303a7870d98b43","sha512":"743f1b96736ebdd38a2232b6510dc676fb5af817df2c5cf23ca45d0a759ad100610ba12a41ef6bb80694c7e3f02dd9b7cbaca53134a0dc4d57e2567e9eb7c170","ssdeep":"24576:0CxEhU6jIUBdapA92uzp1djSwE4PUjjwxFEYxSXgRlvM45O+Byx/x3BFH:0CxEhU6jIadapA92uzp1djSwE4PUjjww","tlshash":"49551814a6f224314253e0782d2fdd4ab229560f99a9fcd47b9d52a41f4c83da3f3b9c","size":1381734,"data":"","first_seen":"2026-10-16T02:35:36.423381Z","last_seen":"2026-10-16T02:35:36.423381Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-includes/js/dist/element.min.js?ver=a4eeeadd23c0d7ab1d2d","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"688f6097bdee1c3f8a73274c30e4e0f0","sha1":"9844802022ceb92b1769ba011a73146cf7f702af","sha256":"98a39c252db254430012c2cb48ee7c05f6475a2d2358386438ed0aaa5fe77762","sha512":"ea1f90cadefe415d9a2255b99bb10dc2904fc7a8e858dd711085496375f3fe0f6c4fbd1629f358b6ba1c43762630da9f7ba9381b2c2fa4c037f0df21549e5a20","ssdeep":"192:ZVBnnesP1Y4WAwfVP74+s9R5zejDNPTPoif2/D/EHMVOAt4Cew3ZKVuvYsiCc9fH:ZVBnndP+4RwfVPUJ9RsjDNkBbtZ8sitV","tlshash":"3a3207d1b14078b287db01da90bf400df6bd0422781d94f0f3a9c8f9a5b9695a237fda","size":11968,"data":"","first_seen":"2025-04-17T09:49:11.59898Z","last_seen":"2026-10-16T02:35:36.282746Z","times_seen":13438,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6fddbb6be69793478de26fc245b2acf","sha1":"a136ebf5054fdc19729b3592005fe0fefec4bb4c","sha256":"9a1e0d38b691f1d22a92cff65ec0439b428170ac39a4493c7ecb06d5585f56a3","sha512":"8a766304caa9c888cfcab64eabab906905965e7fbcfc4f79c74ab122b892456abad215d0883df17023a16a18ba15a6a4b3d0fa5345cab7173d778f725b827c33","ssdeep":"96:vmK40IdSs6c7DE/3sc/YrEBnUBPwKxbqe/Ds91sBYt1Em4kCofWQRemN:OK40IdS/cHg3NZBnUJbqe/DeGYtu7kC6","tlshash":"b4a161c47482b870a2237457e0bb1485757eabb5743990c5a24dd8a02db3dcfe0a7a3e","size":4776,"data":"","first_seen":"2024-11-13T05:08:51.627546Z","last_seen":"2026-10-16T07:26:17.654528Z","times_seen":234735,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-includes/js/wp-emoji-release.min.js?ver=6.8.10","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","size":19251,"data":"","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-10-16T07:26:17.640096Z","times_seen":215688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/js/chunks/background-slideshow.min.js?ver=4.3.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1d41140de4d9b507766c74147884c77","sha1":"c56342af7c55bbe20890230bc4121c18d159244a","sha256":"b988fa9f49a827ea9e370928141eea3bbc6de3bb8ba09be948ae80352c3a906d","sha512":"b85e2a1a6c10101f15657e1b534da71f494d57b17eba0575a266f1735a216004f5df4599b4a2b3211291a5f7f4231431a5ef53ee8f5b5cc4c3196165b54c578b","ssdeep":"384:Hxz2tgneQawzQRuNZkswnkG/nFchT5Cg2igd/ZID5NuhA+lZ/1chptLx757krDZD:Z2tNQUuNZIn2PXg2NutL+t757krDZfUa","tlshash":"61a275837dd5b4691266e471d03f6406e32949449c0ce0ecae7feaa0bcbdc494366f76","size":23186,"data":"","first_seen":"2026-09-16T00:25:03.428775Z","last_seen":"2026-10-16T07:23:42.084712Z","times_seen":5939,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-includes/js/dist/vendor/react.min.js?ver=18.3.1.1","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b97c19585abe23d7f55603028ab9b80","sha1":"9923fc707c0d8d6c27ed9cf24b0355fb94300fe6","sha256":"32b43e6f80b9818f13f0dbb16baa6b801f4b922babfcdcaa2554d986f5067ce6","sha512":"af3e1a4cdcba84ec1c2255dce52f8f53773127b5a70ca7b82bb861744c5f5afbf0e3036f7167b7ebb5b9b41e672be88de144d484c98c2da776551d05f02cf493","ssdeep":"192:NaXdVaxC6DY81/ZUeXopdQAxiJeHhK/0Sxrl1+MFK:NCkC6DYILUdQeLHkl1+MFK","tlshash":"f722c8d8b492b02557b37572013f601f733e656a3c0d49a4a261e9d97cf88adc117f4e","size":10628,"data":"","first_seen":"2024-11-13T06:33:24.997552Z","last_seen":"2026-10-16T06:50:23.843234Z","times_seen":34246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/metform/assets/libs/htm/htm.js?ver=4.3.2","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd6a9a25acf85e7b2107d9b6fafc2334","sha1":"93158aeb0a403305759d03b62c3efca7c6d7915f","sha256":"5620a4aedbb462c87205657d5bec22013079576d7e1665190f1d90d7ebef593a","sha512":"7b3f5fcb563222464fafa79c0a66a59b300e5ebc82880ebe805cae8e6e1f004491c4307d133ba6e1ea65039a591eddf41489c66661f378939c44af93c5c4c2c3","ssdeep":"","tlshash":"24419ae293de2139e91fe0a15619845e60bc2c7831c4345e2e6d01c6c6858aa1f7df9f","size":1933,"data":"","first_seen":"2026-08-31T02:44:11.664083Z","last_seen":"2026-10-16T04:41:08.403298Z","times_seen":288,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/metform/build/frontend/app/index.js?ver=6ea98acae644b20be40c","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"562481b817e8b42bfc7857c63e5bd479","sha1":"d4dccbbc72d7d5dbd8ff739eb4fb181a17a8e403","sha256":"3a797a459c25f7311d3270ef2b5542bca496b21daed08ecb729eb2ec44ed3c9b","sha512":"56addb5cd47a8f046ec26f9ecfb98559d1cb90fc0ef6e54d3776a5ab780620313c5b093a070856e554081544d43d9ba6870f8d2fde52bffbb995071a6d79fd45","ssdeep":"6144:AWu1WwoaUqVJHV49yJQjn/GrjtaREZ/ZPni1BC9tf:y/HCyJQjn/GsR+/Z/i1wLf","tlshash":"f1b42a8872d1b47153e361b5403f110af33b6d68e449d490f629d8e46cb998ea27bf3d","size":530626,"data":"","first_seen":"2026-08-31T02:44:11.676941Z","last_seen":"2026-10-16T04:41:08.436742Z","times_seen":293,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.26.2","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"79a591a01877f6c85e4da1c5940fd9db","sha1":"debff31bb6520e43d3e884d1ce18aabd123c8aec","sha256":"e7b19e12a9606bdacfc7e4fcf230aa6e23ba5ea25be54136f717516fe698a93e","sha512":"dbf6551b0bf09a1192d4fe1db528e083f51de37be6ea3c478af5a3cb048973fb0cf4b6d3bd2a6c14d107b173474c879099fd7e826683a9cad6370fe6d62d603e","ssdeep":"768:5/bt9JJD1+WE9A5yLce/I9d0dbdTdGdadWdDdILdUd1dvd6dfdMdxdndTdVdFg71:Vt5D1+WE9A5yLcWI9mBtIoERuWfRMBKc","tlshash":"d113a511716aca6945cf84abf463164fb7229c9cf413f0e67afc8d82b464e87a394731","size":44624,"data":"","first_seen":"2024-12-23T11:26:33.69751Z","last_seen":"2026-10-16T02:35:36.373155Z","times_seen":1331,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/js/chunks/image-carousel.min.js?ver=4.3.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6ad347735bc86c48fd49926e502d3c8","sha1":"9bc4f097a23741e71c7e91caf4b6c889f31466ce","sha256":"ef7af3233638831fee4085f43f2c9f733f5fc9c505694f6d961ba57cab260891","sha512":"967267e33209a6f97a3666bb09cd4cd1a5d0e8f1493dd2a2a86d10e854a0c3c08ff82ae9b51d489d5c3f8ef11bf9b8ddeaa1d4c8273f64052ad8afad520a60e4","ssdeep":"","tlshash":"3711259539a4f4f345836297e53a1849f71c1c7e42287094abf789e2768104311d4fab","size":1002,"data":"","first_seen":"2026-09-22T07:38:49.771707Z","last_seen":"2026-10-16T06:57:58.068958Z","times_seen":745,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=4.3.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef17c8ffc514d7418b4bec001b8473fb","sha1":"9d406018e5be8d46b89809d38eb6cea4f8bf62a2","sha256":"6f35273b8502706ee06854d797337ab40bc1b3a7421960a2ceb5392ac85a0f54","sha512":"6a3288f610d5f70344a48f885ea5a1877bd869035fb50f6e5159ddc09c67c7ffcc6d9aac4cc537800f3e84349aa26345d42134f305b41bdd5004e71b2160cbf1","ssdeep":"192:bP6lw28fajqZFSJtd4fxVOT2iQsVJqYqV5PnX9dUWFjWqh2P9e93f7POD3g:On8fajqZFwtdykZwRXcoWI2P9o7S3g","tlshash":"0262337bbd000da93cac595852a27d046d0eb32fbb430c6bbdc59de623a23f5719e006","size":15073,"data":"","first_seen":"2024-03-11T13:11:57Z","last_seen":"2026-10-16T07:23:41.097844Z","times_seen":81650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-10-16T07:23:41.469589Z","times_seen":355375,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sell.app/style-DMintRX0.mjs","fqdn":"cdn.sell.app","domain":"sell.app","tld":"app"},"ip":{"addr":"172.66.45.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d1316a88adc8d4dc9e0dcf9b44492faa","sha1":"518b2b39042f2824e981954eb1342ad611367d78","sha256":"665a37243ef0b0aec8247e9f427c0dd9d0f01163e70d76e53b47a371866d95f0","sha512":"dddc94f1c0fa9f64dcf7f80db7e0db0a00937e855244b8f211e36daee6fd4dd0eda1832dc559ad668522568436f67ba3d17982c571b4f2d64fe769596a285e82","ssdeep":"192:hP1XFp6PD2mzzCmdF5xui8qPQOPqRQ0BIy+Hq77fuVrTX+sXtjnX4jweJljIGV8R:ZKqffC4F8fIVgj","tlshash":"b8c233b6d1327238191fba1aab68931ed317f703ed12d5e8b20251158ac77f54ba0e4f","size":27996,"data":"","first_seen":"2026-01-07T15:07:43.611716Z","last_seen":"2026-10-16T02:35:36.357516Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/js/chunks/text-editor.min.js?ver=4.3.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"59e5b924c9d503abd7510f40fc58dfcc","sha1":"e16eb0e441e5bcf4f84e47c63ccf62c35ab07291","sha256":"a7b26ee1157dd6916bd9a82e218629d8f4fe8e818153289d7ede0286caaf543b","sha512":"97c7135fb991ea2f0ce35592e46ef358f2899eb96f0c6c0be3107a5e45320c68397108b6ec08c92ecc2826bf0eddde73293dd872bc8339c81b0c7bcf5ed79c21","ssdeep":"384:HstSPep7waQ3uowkPxw9mGpJwcCkMm1UjiVgd/ZID5Nuhav8R6nTZg8eDDaBY:Mt/peuow+8xJXhHzVg2NuxwTZg8eDDa6","tlshash":"179244877de5f8a95266e071d03f6406f32a09489c4ce0d8ae7fd6a17cfd8094262f79","size":20662,"data":"","first_seen":"2026-09-16T00:25:03.431384Z","last_seen":"2026-10-16T07:23:38.259901Z","times_seen":5118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://nordiciptvplay.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/themes/hello-elementor/assets/css/header-footer.css?ver=3.5.1","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.508Z","timestamp":1792117937508,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/css/header-footer.css?ver=3.5.1 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 25 Aug 2026 17:25:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1338\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":7534,"size_decoded":1709,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (7531)","md5":"bf060aaf5ae6eb5ca73f4bdd41a72c34","sha1":"17803b21cc33b5bdfb4e61db0e6182cbd72da4f0","sha256":"d4428ab6d474bf08e6d95cb1beafc2ebc48ee97d229b7d07295c4e89be053b93","sha512":"d3cb59e2be1c760b046cdc00ce9034041e557c9af71d07cd6d82bf740bdb88061bd4bae20f9ecce6b6f01e6c34fa815fcaffcdb796f5aaf5e77f2f4959f6e396","ssdeep":"96:3dOg5c2yhjF8MsobtKv1j3ykM0UfU5nJzyC2sSaZX+nR3zzirdae64Qf3mfOOeZ0:F/9j3EU5n1lJSaZX+n8ZaL4nh","tlshash":"abf19f63e8f2717813378223abd057ae907ac10dd807aba551ebc31b05db45227a7f69","first_seen":"2026-08-26T01:00:12.476206Z","last_seen":"2026-10-16T07:39:44.249548Z","times_seen":2531,"resource_available":true,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.34.0","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.520Z","timestamp":1792117937520,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.34.0 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Sep 2026 15:47:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4181\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":22305,"size_decoded":4552,"mime_type":"text/css","magic":"ASCII text, with very long lines (22259)","md5":"eea81c142b4d9130e0fc8e6b12b0a706","sha1":"ad4ae5989fc6904d93e03a3d2cb2697238ac07a2","sha256":"d2bb3d8bcf4a3ee8f5cc5a90b4357f4205f356aaebffff9ea352b6ee255da7ae","sha512":"79dd0e96a28e0c1b6737ee35d5cc7062ea70200ae5d5033f7bb7f58b28858cb7c3029ca55b73f04959b618e24b0f0235ee789bf7916ed95c993daac97a9dfec6","ssdeep":"192:qB877iN3iCOy2bvGIdpJkhugk8/H6qiMs7HqnFTSZq7RXDlCdkgIYSMgf:d7iNyqEpSk8/aq8uFucbrgIYJgf","tlshash":"6ea2d9e4e46923c87732c013e745b64c64dafa20cac99d59fe6f850c1df16a70686fb8","first_seen":"2026-09-22T19:19:20.241111Z","last_seen":"2026-10-16T07:51:54.049416Z","times_seen":2855,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"platform.billgang.com/embed.js","fqdn":"platform.billgang.com","domain":"billgang.com","tld":"com"},"ip":{"addr":"172.67.154.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.954Z","timestamp":1792117937954,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"platform.billgang.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 17:34:33 GMT","end":"Tue, 24 Nov 2026 18:34:27 GMT"},"fingerprint":{"sha1":"FD:DA:8D:7D:72:BB:02:12:35:09:BD:EA:18:44:B9:62:45:96:4D:40","sha256":"79:B3:FE:64:51:73:0C:33:04:61:94:CB:F1:7B:93:1A:37:AC:5E:22:49:73:E4:66:F2:D5:93:66:18:2F:44:1C"}}},"request":{"raw":"GET /embed.js HTTP/1.1\r\nHost: platform.billgang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C2YZOBLt2yv1sMOosXHtEr4sni62cBXQdsk%2B4Tvhm3vtPf33jk29jJjw5ktUNfAkn7FGTJfEuwSflLy8U5Mj%2B5OsGhx2b74iC0gD8qNE4GhBgMpBJ0GuC2NvQu4rNzQmJ3IwNYT%2FAgA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"96c87a00de6646a9df62ab4d9480cb12\"\r\ncf-ray: a4b3a6fa498d4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4065,"size_decoded":1979,"mime_type":"application/javascript","magic":"exported SGML document, ASCII text, with very long lines (402)","md5":"6c0c0a40f8745b980405be193a08065f","sha1":"b00ec7fea8a2b1cd47052cb8b645778c1e705ab5","sha256":"a1ece95dc1b25d3a7b4256b0e4f70cedbf5dec916878c207b676e63e1eed1a1c","sha512":"2e22ad31cf42e031aa3b573da8f7dad4f10554d40b9e131e7a325a60efcfe1767852caceac52adbe1799c3987728e80a142c4d7b7872851d4e96fe25b1c75696","ssdeep":"","tlshash":"b681407ece725530424b913ef3fa6905383490b75302852d7a3ca99cefe4d48a5a66ec","first_seen":"2025-11-14T02:07:45.003322Z","last_seen":"2026-10-16T02:35:36.245368Z","times_seen":9,"resource_available":true,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":290,"connect":40,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/2026/02/12-scaled-1-1-1024x1536.webp","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.201Z","timestamp":1792117938201,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/12-scaled-1-1-1024x1536.webp HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:18 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sat, 28 Feb 2026 23:46:17 GMT\r\naccept-ranges: bytes\r\ncontent-length: 87822\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":87822,"size_decoded":88158,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2be183a10d7d824febea5315740896e3","sha1":"0c83b283ad51b51c4e17404eeecee5a49804a8e9","sha256":"66a7fb7c9e60cb3b44e06674035e16cdb91dca1bb04658c2265f5d3a89389916","sha512":"d00d1df1d53cd48769d28edfbc6f1060e5de89963b4f7e2f8c3e9abe705ff1f741536a817ca18ba3943d5390f6870fc16a12bf7fe74df15b7ac064d6f89a7fd6","ssdeep":"1536:kEe+lqLBDZJWyl20IfdmhokCpIrrvUb72D9f2nKVI8eVBuR1mQc/vNDheoX:k5+lCBVJWyIfkhokEYcuDd2KV16MR1mL","tlshash":"b1831234535c6350fa49713db155d8b7bffe10b09aec85b0a22e40bfa23a8974d6764c","first_seen":"2026-10-16T02:35:36.246944Z","last_seen":"2026-10-16T02:35:36.246944Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1914,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1372,"receive":542,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/elementor/css/post-51.css?ver=1791951336","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.496Z","timestamp":1792117937496,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-51.css?ver=1791951336 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 Oct 2026 04:15:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 6786\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":116885,"size_decoded":7157,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6fe8fa2c718df101d1659a6772e409e8","sha1":"df4c39c4a630f68dd8dd8c3cc5a8fe415ea2d4ac","sha256":"d260dd537878cf4d70c87fd589e6a390c7a3e16d2317e58953d1b92f716a8bf6","sha512":"51ca8af54c1f837a14aa5e6186d59b80d8c22146de0d6842bc9d4f81ac65720b8ea93d5d38a38c4f07dac2a0ce7de7bd53ace4b42e627f4ea9a210a195af8089","ssdeep":"1536:6CT52xZW7TCy7B7afDHEff2W6TjYB9FkqK0Yx+YZeY24TXBxG+2V:L52u7TR7BD2nTkBw24TXBm","tlshash":"d5b397947d139029b57f614f5143b69c22389cc9c8bea6f7f8219213f1b6da637f0a21","first_seen":"2026-10-16T02:35:36.248959Z","last_seen":"2026-10-16T02:35:36.248959Z","times_seen":1,"resource_available":true,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/2026/03/ChatGPT-Image-1-mars-2026-17_00_32.png","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.959Z","timestamp":1792117937959,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/ChatGPT-Image-1-mars-2026-17_00_32.png HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 02 Mar 2026 01:00:53 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2136823\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2136823,"size_decoded":2137160,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGBA, non-interlaced","md5":"6a155024f3aca97fd74157328991f7d0","sha1":"680518c3179a472018b3673d1aa49e5cdf35af5b","sha256":"3017b29b1ecf5bafb5260c9abbc6698c69df998029adc61b835319b54ebfb360","sha512":"a8733b7c791031c77546eec1284bc0271d2c20283185d48a5bad2c9752f14fee03f07934ff1af60a0244d4af1ce1fe60de60ebebf3fa013b2b9eaa58b0c12d24","ssdeep":"12288:T9rjN+X4xVXXtU9xYw0TdKfFXLg7rR7G0ti8bJ65R+AFqD0LJvk2hduDJJ9Mc:T9Y8NdUoN0fWZ7Gyi8sNFq2uec","tlshash":"6b25234a3a784124d38b337d803fbc13d899179044f9984fa6e768c606d9b8df56b39b","first_seen":"2026-10-16T02:35:36.250812Z","last_seen":"2026-10-16T02:35:36.250812Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5793,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":5577,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor-pro/assets/js/popup.f7b15b2ca565b152bf98.bundle.min.js","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:24.170Z","timestamp":1792117944170,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/popup.f7b15b2ca565b152bf98.bundle.min.js HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Sep 2025 11:30:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 394\r\ndate: Fri, 16 Oct 2026 02:32:24 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":752,"size_decoded":692,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (708)","md5":"6573a99c9d965647446825b5f53c39fe","sha1":"ac2388d79654fb8fc18f24a22466f3b8a022a02c","sha256":"0e729a8b0105cebffadb04b4f436b9ee2bcf1c95c33e9934af8d3490ad7e3b5d","sha512":"a2efb4a72d865d069d7a20c062a23ca85edf4566a052c1a51b945e4d9bde9b8f1cae5c5eaa41c0acaa14db99974295cc0d970ee3271c8e6bb570dba60fe53d93","ssdeep":"","tlshash":"b701d0a030a2b8b615af408b74c7057d75512df2740668b279cb84d16eb4f993352779","first_seen":"2024-12-23T17:17:24.988998Z","last_seen":"2026-10-16T02:35:36.254542Z","times_seen":262,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/elementor/css/post-8.css?ver=1791947066","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.464Z","timestamp":1792117937464,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-8.css?ver=1791947066 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 Oct 2026 03:04:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1060\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":6053,"size_decoded":1431,"mime_type":"text/css","magic":"ASCII text, with very long lines (6053), with no line terminators","md5":"80ade5da7693a269c8de910af0b71146","sha1":"a39a25648cdba9e71759e1c805c5e74051164195","sha256":"6e3b99a1a4260d0a53f6f55fda805dc050b56b6d2811fd6e240f27322b3d7438","sha512":"1cf9b3533164f19928a0b961ab8708bbda8e1db8ab530b97edad1d57e1341f4321f4f09c677c833725a18662f2cb4a782a79d2c0e45ca84bbbd978766939228a","ssdeep":"96:Rb6boauc/4wzPdI1WdoiV+l40eKwuK59D+dmTzgeTHi6/7:Rb6boacwzPdI1SoiV+l40eKwuK59T/gw","tlshash":"a5c17a647e23d032f177492ea6c7f87c141cc85e404e96eee92d8615f8eba6f660c706","first_seen":"2026-07-25T22:48:22.837592Z","last_seen":"2026-10-16T02:35:36.255562Z","times_seen":3,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.css?ver=5.15.3","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.527Z","timestamp":1792117937527,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.css?ver=5.15.3 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 23 Apr 2023 15:22:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 296\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":732,"size_decoded":666,"mime_type":"text/css","magic":"ASCII text, with very long lines (312)","md5":"1f1c6abbb54c6d189b7263e0861fae8a","sha1":"6bc092e1e58b2fa6364bc17b02443ade0c6d32f1","sha256":"5009a34e30063ffb89185274681b359ae8c7dac19a606d5b1456ee3524cbc9b0","sha512":"7dd9accf0a69d2a89009443de17d6f09c3ca55e62fe9c7c4d3f12f89354b11559d83436fbc4befc8618ccbe0fe46fea657743d758e543b79a3d039ce36852b33","ssdeep":"","tlshash":"8f0164b0810510048a40091a2bdfbf28ae09a245781daea572239c1edcf4e4d61faf0d","first_seen":"2023-04-10T17:28:04Z","last_seen":"2026-10-16T07:30:51.40097Z","times_seen":43208,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=2.9.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.458Z","timestamp":1792117937458,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=2.9.5 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 20 May 2020 10:57:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 259\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":776,"size_decoded":629,"mime_type":"text/css","magic":"ASCII text","md5":"a5bf64d5859ee94a3e8e93d592d6d2a0","sha1":"049eb63b42dbb820b06870a430f523bf06880721","sha256":"25825611ade7ceaed7df3862ec56dc91ad1d2be539966ef7bbe84306e51cfb08","sha512":"22c9c7ad86ad2b45124c5ff6b0a41e271ee176cfe0249c973877e51a1895f6d25c8f69b1c4eb565f5fe5e2befe2f4b80d4a89dcea57eeac43b3ae8e020469809","ssdeep":"","tlshash":"fe019024b14eb96412318c28f561857cb1be81075b05997275ecd19bfbde740c02e2c4","first_seen":"2023-04-05T05:47:47Z","last_seen":"2026-10-16T06:57:58.102533Z","times_seen":46656,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=4.3.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.462Z","timestamp":1792117937462,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=4.3.5 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Feb 2026 14:52:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 6613\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":54666,"size_decoded":6984,"mime_type":"text/css","magic":"ASCII text, with very long lines (54666), with no line terminators","md5":"4fb5f7fc5e41f736ec0527b162519d52","sha1":"33697641c940c68153509fa7c9d7d0c3c760ce2d","sha256":"0a5d398672e25dc7f020f69df92a985481b248a60e301fee232d0c8afd648dc5","sha512":"5da1e9708bfdbd38beb7cee98d806ebc84b4d8337ce638a363d28461ebd9fda5189618bfa62167a5261ec2e98b02cb88ee4ff7bd5ecdd2d2facd480965e0c7a6","ssdeep":"384:Ws4J/8DEksCoI+SBQYO22/RmRs5Cz9TQXPTkvmGkvmCFldtraiIks05ArOk:dFLh5mP3RbrlDdps05Xk","tlshash":"17330da23d13b269226f442b82c7364c526499c1ee0375d9f944c523dafece63b36c5b","first_seen":"2026-01-29T13:38:24.653388Z","last_seen":"2026-10-16T07:26:06.754449Z","times_seen":91807,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=4.3.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.467Z","timestamp":1792117937467,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=4.3.5 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 22 Dec 2025 17:25:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 928\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10255,"size_decoded":1298,"mime_type":"text/css","magic":"ASCII text, with very long lines (10255), with no line terminators","md5":"1c6df716953f870be76c3e88a69a326f","sha1":"55001bbb898eb7636eabd0418275a9f5aa96ac51","sha256":"1b34d4c7324321e36db5d35f05bb011238a1326f89058a4399d028d1f6c47dd5","sha512":"d2cb3f58b7f5b83fac1744e81367e6ef4e350a073aee634b85a2ad87b4676cb78561db329bb4c9da20617a1be770b0d399ca731d0dc6792fd1f37e2ca116432d","ssdeep":"192:eKTrGZCLG+tlR3080ur1R6gxrcazf7fneLG6AHRJSJ/JwJp+XuknI0:eyv0","tlshash":"a52283917d83814e1aff651b141b2a4ca1c9c4dee8b6ecd6e866130782ffec53772528","first_seen":"2025-12-13T14:03:51.781572Z","last_seen":"2026-10-16T07:23:36.537914Z","times_seen":67661,"resource_available":true,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=4.3.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.260Z","timestamp":1792117938260,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=4.3.5 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 01 Sep 2026 15:47:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 103\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":103,"size_decoded":363,"mime_type":"text/javascript","magic":"ASCII text","md5":"1518a6e40ef135a917f3781e1a8adf71","sha1":"43a39a38d7b5095e542a6af60bf53c5fd04b185f","sha256":"8d2011a2a7c0d96582f8495b69b6e5f56432ed8b5095cf7aac7e2f259ea2fbfb","sha512":"0bdea01c8500e4d623fc83c39d879009919f6c454b44376404c0b1c3a91887955a4a1170ad681abe47674410f6af26bb3c1bcf9ae8e2e98bd67e5188f889a7ce","ssdeep":"","tlshash":"15b012407de9261540da109e150315a71688dd6d042a49d53c10c301503490313c97c4","first_seen":"2026-09-16T00:25:03.45477Z","last_seen":"2026-10-16T07:30:51.408895Z","times_seen":5989,"resource_available":true,"data":null}},"time_used":2667,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2667,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-includes/js/dist/vendor/react-dom.min.js?ver=18.3.1.1","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.269Z","timestamp":1792117938269,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-includes/js/dist/vendor/react-dom.min.js?ver=18.3.1.1 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 14 Dec 2024 00:06:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 40200\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":128946,"size_decoded":40500,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65295)","md5":"bcf32b37005b7ba5c974e2a0b66e457c","sha1":"dd90ef53cfc2512476c873ff69c811ef710ad7ea","sha256":"9ab40ec8c39a41ed1420594767d54ad3752f385ba8019085d32374b10720b427","sha512":"3841445eb59db3644f7faa6d8b234abe7e1e73808e330420a764b34c08fb29590d5f22163d2461f0113c30d06673c602e6eab56f704ed6199af8ca923d344f59","ssdeep":"1536:rfHWBpuaYs8YJaMFQ5RUv+KBGNZm65B8uEKULUIw+hvYYQNk:rvyuas5RUf6NEKULnjQK","tlshash":"37c307e83d96f6a16ab702a700ef1817733c2a1b640c4860a611fd9d75b901eb17bfdd","first_seen":"2025-04-17T09:49:11.600427Z","last_seen":"2026-10-16T06:50:23.523525Z","times_seen":30329,"resource_available":true,"data":null}},"time_used":3368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2475,"receive":893,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-16T02:32:15.371Z","timestamp":1792117935371,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.2.34\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://nordiciptvplay.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://nordiciptvplay.com/wp-json/wp/v2/pages/51\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://nordiciptvplay.com/\u003e; rel=shortlink\r\netag: \"159-1792115288;br\"\r\nx-litespeed-cache: hit\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 53262\r\ndate: Fri, 16 Oct 2026 02:32:16 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress:6.8.10","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Elementor:4.3.5","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.2.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":268423,"size_decoded":53806,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10901), with CRLF, LF line terminators","md5":"a350570c1f7a7fd15da8353dbc34b585","sha1":"f9f1b2fa3ed3489542da1893e8bad57d33bb4c7c","sha256":"609feba8f2870cc0f8ba5286afe2755e8c16be0c11fd41000565cfbc06a6e9d6","sha512":"3b4d137efd1fc521fab4ac71ff5ad2e11799d245e3fc7544ab3b46173462b5c89804d93859d0886af5126b0d5e06ddfc48bacb789f55f946f8752148bdcb5ed4","ssdeep":"3072:gegbJdhFTiXkXnv8DKRNmz5dwo5Vgmz5dwo5VzNY+Nf6gyhul8aPCAlTFdeOl5UF:LadXn0KuVY","tlshash":"cc441a10b5866865326f42cfc01b3a0c60cbeefad5a169f4f1bf426897f1ee136521d9","first_seen":"2026-10-16T02:35:36.262596Z","last_seen":"2026-10-16T02:35:36.262596Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1895,"timings":{"blocked":-1,"dns":747,"connect":195,"send":0,"wait":178,"receive":366,"ssl":408},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=2.9.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.449Z","timestamp":1792117937449,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=2.9.5 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 18 Nov 2025 14:53:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 8756\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":83015,"size_decoded":9127,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (1646)","md5":"993387aae0b00dd250f8c6bacb602bb4","sha1":"c2ee953f8cbcfc03cb53fbb0375bef674ae52e1c","sha256":"47c7bdd897d958f095447c03e1752dc3c746563dc4507f7babd083348bd1ead5","sha512":"59c1a8d34241eb3d4c8993d3b9d755af35c5662a5b7f3ec85829ea63b34b44c7665c6f96099d920784d40b5065f0e9b5ca6434b03c762d353d7f7fcc713e3627","ssdeep":"768:uGU2+Rm5ukW6EdVBSs+QXLjBnTGpIq5pbTpqzGI5eFV/ftc/yorXzFSSBlzfSKVt:uGU2+Rm5ufoqDr1GLvm","tlshash":"5c83d8861dc329749a16681da3ee936457b60043cf35a9ac36ed821ccf82342b7f6f57","first_seen":"2025-11-18T16:28:00.164576Z","last_seen":"2026-10-16T06:57:58.077312Z","times_seen":20765,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.951Z","timestamp":1792117937951,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Jun 2023 09:49:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4678\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":13577,"size_decoded":4977,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-10-16T07:26:34.362551Z","times_seen":1014749,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/2025/09/Samsung.svg","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.193Z","timestamp":1792117938193,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Samsung.svg HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 23 Sep 2025 21:08:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1927\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5248,"size_decoded":2303,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a03f0815e456e562732830878d31297f","sha1":"7ccfa6169153bf5c96490c0c31471da5bc37129e","sha256":"c601df4c6a88c6a2f1698fcb17abe60e1fec117d5471969e32c5184c6d261be0","sha512":"a7814da120a5b1efa51ad207ee4b9e355595515126aa889d444c6332cd7eba4f9cc8a799dddda80325a86c9b6b0b377566828038476b3269ce9b582c275636d1","ssdeep":"96:+iJA9D8QV30NVrBR1g9KpIq7H3J37mBEkPTmHUHUhUTYUS+U3UZUZUbUYUOWc0c6:FA9wRrFTDZLqEfHsMkYb+YOKgDTWc0c6","tlshash":"a4b172ea21f78cf7e9910fc6b5a214de392ab1dfd51f100c9da06e260c176e4879b981","first_seen":"2026-04-13T06:43:13.242148Z","last_seen":"2026-10-16T02:35:36.265818Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/themes/hello-elementor/assets/js/hello-frontend.js?ver=3.5.1","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.311Z","timestamp":1792117938311,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/js/hello-frontend.js?ver=3.5.1 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 25 Aug 2026 17:25:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 493\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1830,"size_decoded":791,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1830), with no line terminators","md5":"1d18b2ccd0ac9b96603ea918df33ae9f","sha1":"860694ebba3acee39d4db64a690359d4002600c9","sha256":"268cae8c2e7a7330526dd33b7dadc1bbd08b039bca4acd70390d81a7ef644767","sha512":"53afc81e7061aa8b603d280a4730dc93b5cd3bde3ab17d9224b4997b412f18f189cf2474fcc890fa919f936699606277107e3bb850070b0bdd8a723dfaf14f32","ssdeep":"","tlshash":"af314766724a5d3a045ec2b72b4baa9fb166958f9441807c703efecf0560dd123e33b2","first_seen":"2025-10-27T16:30:12.654691Z","last_seen":"2026-10-16T07:17:57.529846Z","times_seen":32611,"resource_available":true,"data":null}},"time_used":2618,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2618,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/2026/02/last_of_us_ver3.jpg","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.214Z","timestamp":1792117938214,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/last_of_us_ver3.jpg HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 28 Feb 2026 23:46:33 GMT\r\naccept-ranges: bytes\r\ncontent-length: 84499\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":84499,"size_decoded":84835,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 510x755, components 3","md5":"e7fc8ecfc31d30fa7361d2a6a9790048","sha1":"7ace0aaad393d73c085fc7536869ea956b8b0a3f","sha256":"32f0bd1732c1af90d56ec2726c1b28fcc0bf0063feed54a8a81c0d715d677e43","sha512":"3c1a6cdb3d6675ed9c6fb188753a91ae73889679db86ec7b10c87079a0fef5c2c44517bf9a76b5cfd8453feba945dd8e3265814f761d0e8c4064537aa2c1116c","ssdeep":"1536:Bp1MlDTGqELVCLIqe20yK47dAsXKwJinc9Nb7atYtC0Lmg5:BoDwLQL5ey6jwJinc9NKNemS","tlshash":"0a8312525117142fec2cee300fdb72468829333ca36efc775a77b0b9162eba5485d426","first_seen":"2026-10-16T02:35:36.270779Z","last_seen":"2026-10-16T02:35:36.270779Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1559,"receive":603,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sell.app/styles-Zn74SZMx.mjs","fqdn":"cdn.sell.app","domain":"sell.app","tld":"app"},"ip":{"addr":"172.66.45.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:23.550Z","timestamp":1792117943550,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.sell.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Oct 2026 10:00:21 GMT","end":"Sun, 10 Jan 2027 11:00:18 GMT"},"fingerprint":{"sha1":"0D:11:4E:08:1C:3C:F9:0A:AB:AF:A4:B9:B1:6B:B0:A6:F7:51:3E:11","sha256":"64:3A:02:19:6C:6E:40:52:F6:97:41:90:B8:BB:EE:EE:9D:86:C6:53:E7:AE:6E:37:F2:D0:40:93:68:43:84:B3"}}},"request":{"raw":"GET /styles-Zn74SZMx.mjs HTTP/1.1\r\nHost: cdn.sell.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.sell.app/embed/script.js\r\nOrigin: https://nordiciptvplay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 16 Oct 2026 02:32:23 GMT\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kVRz80bOycE0eQCCMNKNrTY7zuDZuptLu1T%2F2sBMufCShvTDrAOW%2FBqEZCjqHxFQthHQxSBs1WUX7WJpsILnTFNfs8BkxptHf7kmj2Okf%2FbEpO2vkfS0eQegqh0%2BEl0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"75b9ef04652a18e75b84c1237346fcdc\"\r\ncf-ray: a4b3a71b286fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114841,"size_decoded":16669,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"0d372f37e8555098358cc74d8d0204c6","sha1":"b7839f0aef30bd98b67d9b517415933c4c1dc618","sha256":"fd457d033e5fd17803007b1d8db57068ebb4fd6e4a4ee0e9e9e41de1fed9d4f9","sha512":"fb7e7e7838e7130e439f664231f347f3031201a76ebcf363ed455f28c88195cfacec98b8c408ba999abd0ce3bc2450ff5249292b66d440b6860b6d0b729c9679","ssdeep":"768:G2+q4r52qUlwdg6vwGClrzrZSazjheyTTuWA6fjjkSb8Phfe8225ZBTZQY:Ga4r52L3TZtvkdP08LjTZQY","tlshash":"c9b3e1e7f3b1993a2c27a49d5d5cba3e3b2e6554da600fe9a550e3105fc16eb3e83004","first_seen":"2026-10-16T02:35:36.272865Z","last_seen":"2026-10-16T02:35:36.272865Z","times_seen":1,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/jeg-elementor-kit/assets/css/elements/main.css?ver=3.2.21","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.452Z","timestamp":1792117937452,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/jeg-elementor-kit/assets/css/elements/main.css?ver=3.2.21 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 08 Oct 2026 17:41:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 23719\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":283137,"size_decoded":24091,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3467bafe1b5a9617cb23caeabbfec009","sha1":"20c4b5d4028d1dfccfbc9c25d46ee8123fa5df95","sha256":"87507c3c9664cdbce31a248fedc0d39d1c4774399040525511511636ab60f29a","sha512":"333466722357a67f62753a65d4ec515e05e1b4cd1f69c0361160d5b65697bacc14242c369eb3cd6e7b48a2699527e7734a45309b70296cdc02b0fe2f5ab753ca","ssdeep":"1536:m1LULQvU36kXmihSdSCbvMEFx+mXD44d1Ob8ejJO8FHw63VyY5jAGXoRlSKnXIM0:DTyc4myM8jMbLODQz3i3bnhn5nSnAno","tlshash":"76543255f8eb7105607fc33ed1ce516f8b309c818692a49be961a60bcf72d8433e6a17","first_seen":"2026-09-25T08:43:04.264319Z","last_seen":"2026-10-16T02:35:36.274832Z","times_seen":52,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/2026/02/22.webp","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.216Z","timestamp":1792117938216,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/22.webp HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:18 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sat, 28 Feb 2026 23:46:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 58888\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":58888,"size_decoded":59224,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fdba90133eba5fa1df233a690645d015","sha1":"49067363434f6e0f21d8aedccd572d7b259924fc","sha256":"a1b951e7637248b8c7eb4ad5ee4c7d981c3a40201303289647767ac2fcdcaef2","sha512":"2fa0aea48221e7532b54bb73383747d00eecae278c8cd0b939649553a6e265984495e076d99b32610e5197f58d2d19a1cbfb9a1fabe1fde7a8bb164f4782b193","ssdeep":"1536:Nlh06q1lMdL8O3rpP4I1j+d7ohjazK0jwE8x/Wr4CgupQV:Nw6HdRdwkad0hjGjj8xC/2V","tlshash":"c543022a7e1c999ddc3319f8f50d97b98e442e1f4a68d1ddb0a47a6f4a842df180e04b","first_seen":"2026-10-16T02:35:36.275662Z","last_seen":"2026-10-16T02:35:36.275662Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1557,"receive":601,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/jeg-elementor-kit/assets/js/elements/fun-fact.js?ver=3.2.21","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.325Z","timestamp":1792117938325,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/jeg-elementor-kit/assets/js/elements/fun-fact.js?ver=3.2.21 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 08 Oct 2026 17:41:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 847\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2005,"size_decoded":1145,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2005), with no line terminators","md5":"3887e4c9c7982c85d935a63c7769d432","sha1":"9e5099bb48704e4d455bd6717690ee61e13adb02","sha256":"df0beca8c4b20a8001a6eeec27f6ac1a22f63ff7e1f79f50aeaaf9ed04a904b8","sha512":"65910c2f8fb160051b3e51efc693f797fe0616274fc084615547c138a0da2b7476576f30d239e23ea83634a3c73fc96344c04701d862cf0ca70d7e8738fbf652","ssdeep":"","tlshash":"544163a830aaf0c2139b951f153f501df3360c7a2425a4d9e2a884f67e75d4a7365bb4","first_seen":"2026-01-08T23:38:07.23809Z","last_seen":"2026-10-16T02:35:36.277372Z","times_seen":222,"resource_available":true,"data":null}},"time_used":2612,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2612,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/gruppo/v23/WwkfxPmzE06v_ZW1XnrB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:19.063Z","timestamp":1792117939063,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/gruppo/v23/WwkfxPmzE06v_ZW1XnrB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nordiciptvplay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23028\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 16:14:38 GMT\r\nexpires: Tue, 12 Oct 2027 16:14:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 296261\r\nlast-modified: Wed, 27 Aug 2025 19:21:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23028,"size_decoded":23841,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23028, version 1.0","md5":"80941aea99310ab23ecc4ffab0577335","sha1":"2f2d9578ec8dd744d7a8f4a7e8849573757f761f","sha256":"9c3a87702c0cdb83a7f8286890ac92487965cab42a240e04a226372941f84095","sha512":"c0c33bc19f3d1bdfb39fa9fc61fa26be607ce39192071477d4a0e2c0f38e824146ac1d3aba47ebf36692266afe31b694465e3d33fd7270c079ecaacdf41707d0","ssdeep":"384:0VyYmvlUYYrT0558C4rDmd23IsYwgOy/O/q7UQfpw4h3KzvRGmprHIQiloUoiO56:0VclU7A8PrDmdoIsYwmOxuW4CGmzpUb/","tlshash":"f8a2d1c30fa702f3d2a5a41770764fb1e2ca726c127453a6728905265cd62f3fe5be88","first_seen":"2025-06-06T15:35:04.232576Z","last_seen":"2026-10-16T02:35:36.278025Z","times_seen":913,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/2025/10/emplate-1-150x150.png","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:24.472Z","timestamp":1792117944472,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/emplate-1-150x150.png HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Oct 2025 12:34:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5339\r\ndate: Fri, 16 Oct 2026 02:32:24 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5339,"size_decoded":5673,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit colormap, non-interlaced","md5":"e8c836b2803fe72614dbb3760d78c8ab","sha1":"17d310bf58214cd3771f9956ca6ec7a2f991b4d8","sha256":"33f40703853c8536ae3bcfed8d37dd19903b990c651cc2f7ba6b0451ecb44e0d","sha512":"48feb96de618b313a5b563a9db55fab8a93a82a022ce278be1ccfb5aa25f2ae6800ed3ba0a630aee6b98f6d87dc76dc1bfd12022e1a346a660d1c61d42e98397","ssdeep":"96:zbWihu8b9emGiiswkM3dRwbheRX12sVMAI6wpEOSLJnua2ATckrsal:zKSu8bksidSq2sVeMvLB9ckrX","tlshash":"4fb17ec0b925cdb0f67dbe77c5940b4f90a0593568cac65c6917fe621b2e2943ccdda0","first_seen":"2026-10-16T02:35:36.278747Z","last_seen":"2026-10-16T02:35:36.278747Z","times_seen":1,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sell.app/embed/style.css","fqdn":"cdn.sell.app","domain":"sell.app","tld":"app"},"ip":{"addr":"172.66.45.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.957Z","timestamp":1792117937957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.sell.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Oct 2026 10:00:21 GMT","end":"Sun, 10 Jan 2027 11:00:18 GMT"},"fingerprint":{"sha1":"0D:11:4E:08:1C:3C:F9:0A:AB:AF:A4:B9:B1:6B:B0:A6:F7:51:3E:11","sha256":"64:3A:02:19:6C:6E:40:52:F6:97:41:90:B8:BB:EE:EE:9D:86:C6:53:E7:AE:6E:37:F2:D0:40:93:68:43:84:B3"}}},"request":{"raw":"GET /embed/style.css HTTP/1.1\r\nHost: cdn.sell.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HlFMkGPXCvriw1N9L3wodFCj9QItTYVE5kSwOYtM10qu9Ph3PQWhuj7QfIDox56JjZrGR2EMt00Wvq45G6eMZsA81UPABcHRRsh8b6AmecpgfpO3Iu%2BnVgLqhq%2Be54w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4b884d6535e14c411bf3b1d64fe78cae\"\r\ncf-ray: a4b3a6faed63b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142682,"size_decoded":21690,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"cd4395d6de9181c344bee170d41afa1f","sha1":"8146e5f9dee002e5e0f2b011cdd568a0e77a3661","sha256":"f7cfbc4fdf3b8e87e7cc5e8402031d5d1ea04d96b915c401d452683b9066e96d","sha512":"21acce375e59fb25694ba504d69c3bdd8071424389090c78741f1ea67ba80bc423c4f390100d1279812abe65f858fd3da6ed60885621cd93b653670eeb679594","ssdeep":"768:EwgwaPLUYabw3ggvkGYljz/ZqanjNeuFtuwU6tjlySV2lxfeWK4vDVTZQfqff/R:E2aPLUflFXJ/ynlEWvZTZQfgf/R","tlshash":"83d344e2f3b195392c27a55e5e5cb63e7b2fa641db600fe8a55063104fc16eb3e83508","first_seen":"2026-10-16T02:35:36.280426Z","last_seen":"2026-10-16T02:35:36.280426Z","times_seen":1,"resource_available":true,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":397,"connect":30,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=4.3.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.259Z","timestamp":1792117938259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=4.3.5 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Oct 2025 16:51:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 126\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":560,"size_decoded":496,"mime_type":"text/css","magic":"ASCII text, with very long lines (560), with no line terminators","md5":"c3be9e612baf8fc4af612de8af4c0864","sha1":"f6b1366e30a459deefca035c5563f1c929c8ed10","sha256":"f68e889145cb0e47b7b190b2fdf087a9213a264ad33951512880c9f8bb6d0cd8","sha512":"aee455fe10d8126deb4d1015b6b4450ace4851e5b32890505af619f7863469c56b788b5d822849986759aa85efde260da77ed12bbb236ce2bf6629bf6759f4ca","ssdeep":"","tlshash":"f2f0c0237e4b94aa383f1d571083337c74944ec893a0a8d8e9fa91435cf4cb27330622","first_seen":"2023-10-14T23:00:09Z","last_seen":"2026-10-16T07:23:39.331804Z","times_seen":143803,"resource_available":true,"data":null}},"time_used":2668,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2668,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-includes/js/dist/element.min.js?ver=a4eeeadd23c0d7ab1d2d","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.281Z","timestamp":1792117938281,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-includes/js/dist/element.min.js?ver=a4eeeadd23c0d7ab1d2d HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 14 Dec 2024 00:06:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4804\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":11968,"size_decoded":5103,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7500)","md5":"688f6097bdee1c3f8a73274c30e4e0f0","sha1":"9844802022ceb92b1769ba011a73146cf7f702af","sha256":"98a39c252db254430012c2cb48ee7c05f6475a2d2358386438ed0aaa5fe77762","sha512":"ea1f90cadefe415d9a2255b99bb10dc2904fc7a8e858dd711085496375f3fe0f6c4fbd1629f358b6ba1c43762630da9f7ba9381b2c2fa4c037f0df21549e5a20","ssdeep":"192:ZVBnnesP1Y4WAwfVP74+s9R5zejDNPTPoif2/D/EHMVOAt4Cew3ZKVuvYsiCc9fH:ZVBnndP+4RwfVPUJ9RsjDNkBbtZ8sitV","tlshash":"3a3207d1b14078b287db01da90bf400df6bd0422781d94f0f3a9c8f9a5b9695a237fda","first_seen":"2025-04-17T09:49:11.59898Z","last_seen":"2026-10-16T02:35:36.282746Z","times_seen":13438,"resource_available":true,"data":null}},"time_used":2470,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2470,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/css/widget-image-carousel.min.css?ver=4.3.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.484Z","timestamp":1792117937484,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image-carousel.min.css?ver=4.3.5 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Oct 2025 16:51:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 140\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":342,"size_decoded":510,"mime_type":"text/css","magic":"ASCII text, with very long lines (342), with no line terminators","md5":"9a581085a6db8908c26c76ffcdf3d630","sha1":"75f6cbed0be7d60ea0f5f715d267cd4011a6a8f6","sha256":"26da5f73e4bb1559c1f4865fa414fed4630a978addcb437dca43c5392a42e564","sha512":"db60ed63c422a53b59c2cf99660d38905ccfe9c0406c26494019bc0261fcb3353ab95532b3eb2299618a50fb43dc3476e5df1f6973f8d9c5e36d1301c3199349","ssdeep":"","tlshash":"b8e04f047a879873182e1f25745b555830988c549a138b40cae31905d3f74f0123e95c","first_seen":"2025-02-28T14:24:31.333992Z","last_seen":"2026-10-16T07:33:02.272912Z","times_seen":20313,"resource_available":true,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/2025/09/LG.svg","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.188Z","timestamp":1792117938188,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/LG.svg HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 23 Sep 2025 21:08:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2636\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8198,"size_decoded":3012,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6228a317d3c7aaa32a21baaae2df6887","sha1":"41586c2687ccaa81a3a75bd374458a5f27a36561","sha256":"892eddcb0e881c55a7931fb8cce52032379769988d73e9015ba0d2470164af58","sha512":"25ee9a2acb8356e7217c053f709a39327c4bca73c5fb5806d3121fb4f5e61ec873af3ea15270b91ce666f14470981394a4c35e6971167c250e7d4c8e04329858","ssdeep":"192:1D0DcB0xUJFpsiRqjkq4tnDc6BVopwOzFCkTdgqb9VJS19eBEf:1XB0ejpsO9q4tnDcjpCkWqhVJSH0Ef","tlshash":"5e02319b7426b9f55d18cfd04d2204cd09ba38bb6d9a7809fac19f0b9421dfb634f825","first_seen":"2026-04-13T06:43:13.272713Z","last_seen":"2026-10-16T02:35:36.284187Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/jeg-elementor-kit/assets/js/elements/accordion.js?ver=3.2.21","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.328Z","timestamp":1792117938328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/jeg-elementor-kit/assets/js/elements/accordion.js?ver=3.2.21 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 08 Oct 2026 17:41:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 766\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1913,"size_decoded":1064,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1913), with no line terminators","md5":"cc47b29e24f44db45cb5a88e7c51cda1","sha1":"2fcf27be26eb43176f479236e2ecb48088661f46","sha256":"b94c731a931288de28c17e9db1620af66cc99cb7819aa3aa872ef82fbd1b93d5","sha512":"0c94f8e2ddea1f855625eabada085540b58b33cf5e94ac65cf0ae037f6b429b0f67aae4c86d7e27ab7a6f72e83c291ec3b8a6b78b92d583366c6de03064d0410","ssdeep":"","tlshash":"8b41323d30a4f4e5035ea49b101fb40eb2761d75116fb095a3a941b67eb0c49b361bbd","first_seen":"2026-01-08T11:02:25.111685Z","last_seen":"2026-10-16T02:35:36.287836Z","times_seen":152,"resource_available":true,"data":null}},"time_used":2609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2609,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/jeg-elementor-kit/assets/fonts/jkiticon/jkiticon.woff2?bv8d8l","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:19.069Z","timestamp":1792117939069,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/jeg-elementor-kit/assets/fonts/jkiticon/jkiticon.woff2?bv8d8l HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/wp-content/plugins/jeg-elementor-kit/assets/fonts/jkiticon/jkiticon.css?ver=3.2.21\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:19 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 08 Oct 2026 17:41:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 401140\r\ndate: Fri, 16 Oct 2026 02:32:19 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":401140,"size_decoded":401477,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 401140, version 1.0","md5":"9b5647fc66c9de00d97646819a0c70c8","sha1":"7eaf3745723fe74418fe448e6e3056a464ec774e","sha256":"986c16d318646b959f5e134927a2fd99c2428e97e152fe873797abb29d62a967","sha512":"25b2abafb93ef9746abda1adf07bcf5c701ad9552ee1a64fc425799fd7aac3a05de0ee302bff73b6bd5be2a87c402b291e748eb78d5c6db4f311e92d27ffbe18","ssdeep":"12288:0oHqGQxoPUCokJNTzr0KNYdctuG9GBPv9:xEoPhXLTzNtuGwBn9","tlshash":"80842301de5546f3d4abc624c7ba038fb3beaba512931e1d538ca584461887433bb7ed","first_seen":"2023-05-03T19:25:45Z","last_seen":"2026-10-16T02:35:36.288776Z","times_seen":4995,"resource_available":false,"data":null}},"time_used":4291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1870,"receive":2421,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/2026/02/9rCBCm9cyI4JfLEhx3EncyncMR3-1.webp","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.209Z","timestamp":1792117938209,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/9rCBCm9cyI4JfLEhx3EncyncMR3-1.webp HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:18 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sat, 28 Feb 2026 23:46:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 49148\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":49148,"size_decoded":49484,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 440x660, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5b3993c8e7d59023d7f6f0fe85d149c6","sha1":"088f743dc3f9ea559d06e78e2ee18df07459c5ea","sha256":"b6a2626bee32b123a2c7d94742d118e657612bc708f1d615e0c182b8674263ef","sha512":"8a3869924f00bf6cc37f5240f0d45f2bc2ff7c46c151530b0f4324d40eead3c829302aabfb8318bed83f22b9806a1f91d49fd6b6d95a0e65d94b11e5963e1ac4","ssdeep":"768:+ijQLIUWBP5ieu6c4msjloDOUjWE9YjFAVMq05g8H0ERdLJhspa8Hqwt4WBfDEhR:+HLCBP5ieu6LFprU6aE0EIgn04WBUVf","tlshash":"d12302d905cb500883c9d258c2a6ff516094bfb7ee10066ea6fce23e7627f954f8a345","first_seen":"2026-10-16T02:35:36.289527Z","last_seen":"2026-10-16T02:35:36.289527Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1964,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1365,"receive":599,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/2026/02/avatar_fire_and_ash.webp","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.223Z","timestamp":1792117938223,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/avatar_fire_and_ash.webp HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:18 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sat, 28 Feb 2026 23:45:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 159930\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":159930,"size_decoded":160267,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9813c8f5d83dbac8327a13d8378bed09","sha1":"845f32a7ea2378451ee7d2d7ae61d60f477f8d8b","sha256":"6b969df2597ea5a490c13bf25809a42531a7288c9993b4e746e0f764dcfd1f14","sha512":"99639de1208b7cf2f52395fdd29828e8099419b2ac775aa96ff4da78abc01c4ca593c52621a4d3e9386a22bf93bd7b9de25fed94ec79422e5c447bea1f9bafa5","ssdeep":"3072:p7oM2v1wLrVRBIAPX4yeOGkEydgGF+HEnBjk4hy13Z/W8+pOjRrfguRTLJkgQ1Sh:ktwL/aA/rerIgGF+HEB3Y1Z/xEErTLJH","tlshash":"02f312eca46e81a6e1d210fa8d8965232dcbe91dcfa79d53e73482d737ed4206c4490f","first_seen":"2026-10-16T02:35:36.291114Z","last_seen":"2026-10-16T02:35:36.291114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4086,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1891,"receive":2195,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.291Z","timestamp":1792117938291,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 15 Feb 2024 21:53:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3542\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":9141,"size_decoded":3841,"mime_type":"text/javascript","magic":"data","md5":"a8127c1a87bb4f99edbeec7c37311dcd","sha1":"9997a1745f48bdd233dbe9bd8164daa53eba105b","sha256":"f313d12ea6124bd28fc4a6b7163d253bb83d5aeab5edce594880c5c3df475cbc","sha512":"aa10ddc5b29905c60a058faed3f5f195f7577ceac46489e02461b5135732194daa3aef4aa473127bf8c753312e02074cfdac8d0f8f0cc8aa544c7f8e02bebd08","ssdeep":"192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+F:s6Udn3LzoJphH8uClD2tFtJ7byTwtF","tlshash":"8612d8ac30deb021239a11e1586fb101f13aaf6532d99ce0da81d9e57db19c960b3ff5","first_seen":"2024-04-03T08:25:07Z","last_seen":"2026-10-16T07:26:17.657092Z","times_seen":266731,"resource_available":true,"data":null}},"time_used":2646,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2646,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/js/chunks/nested-tabs.min.js?ver=4.3.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:24.057Z","timestamp":1792117944057,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/chunks/nested-tabs.min.js?ver=4.3.5 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 01 Sep 2026 15:47:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 12875\r\ndate: Fri, 16 Oct 2026 02:32:24 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43389,"size_decoded":13175,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (43388), with no line terminators","md5":"5b147b7558f1402d1bbf5e692ed56e7e","sha1":"ce5aa27a6a9d7b3ef27a3127b39ca695a20ed1b0","sha256":"6e93510a15f216e017fb8a71182a375e934a55f1fa9ba2420e1529d3162bec7c","sha512":"c934dd709b7ae94eafe5172cd8943d0ab4e068194cf30c05a9307af949a0e7626d068cfcd730138a1f0cebb1fca2ea086e014e2f46473cd01981b8dc6cea1a1f","ssdeep":"768:gtNr0uTvqmPhRqg2NuIh5AJX9jGq4m47v7gsNolg2w4XU4WUgiMPBWPVjpgInwvd:QNr0uTVpRKKJgq4mS/o22w4XU4WUgiMn","tlshash":"4d13d74376d5b876429ba072e02f2506e32605c4ac0da09cb93edaf17cf8d4653b6f76","first_seen":"2026-09-24T13:49:33.80432Z","last_seen":"2026-10-16T04:43:20.505926Z","times_seen":164,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/jeg-elementor-kit/assets/fonts/jkiticon/jkiticon.css?ver=3.2.21","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.939Z","timestamp":1792117937939,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/jeg-elementor-kit/assets/fonts/jkiticon/jkiticon.css?ver=3.2.21 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 08 Oct 2026 17:41:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 19454\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":120006,"size_decoded":19826,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"604502da825da25ade6a90553d0e707b","sha1":"ff9497af6f43557381f52a03ad80f3e916d16e84","sha256":"5f088df60ae5af8645eb7d4cbca1d641fcd23225e9eac268388d3bf4822b2c1a","sha512":"2e145b1f2e1846b3f3ac4c8e27ab7b4d4e6a0eeebe092e7d28e5fcf7577aef9a0aeaf0aff88b50079a1fac72181e78d76ff71951c6d00ea8667ccf5cbc4120cd","ssdeep":"1536:+a2WWKophaG8v717wd6SMar9ZEgR7qRV+/nGtCf/9PYg3grdyv1fWgfm+x3urAQw:x2WWKiad7kT5rXd3xD","tlshash":"1dc311a3e2ab36c57b35c84b9b40fb4896d2f1b9c40d0c47f69b881f1ed16141ad6e78","first_seen":"2026-01-06T13:20:40.519656Z","last_seen":"2026-10-16T02:35:36.294481Z","times_seen":1795,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/themes/hello-elementor/assets/css/theme.css?ver=3.5.1","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.506Z","timestamp":1792117937506,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/css/theme.css?ver=3.5.1 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 25 Aug 2026 17:25:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1241\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5827,"size_decoded":1612,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (5822)","md5":"13ca08bfc282df7d12091aa4f05cb6c5","sha1":"3a22173b8a8202e8fec54ddae33c59873c37d2b4","sha256":"d5c91a4cfdd98dba2870eeb3699e5ae57ad54203eef5fbe46accaee6b678d7df","sha512":"500677fb6033647e577fb733bc5101178487c96ec26062a29fb4cee0cd9d8aed302206b1745dd69652af4d2ed350d2ace8919047e9c8dd761e179a8c80ea5767","ssdeep":"96:yELyyDOT58u6gYRbFdYryGu3bcgcMNnSnOdIWNxgzArRGdpxMNluMNITMNd0MN7h:ydyDhgGbMrn6cgjSOdIwxgsrR+pKB","tlshash":"2ec182bde8d1313c243f9a06fac65adc6529c72ad36305e9abc8876941df750782234e","first_seen":"2026-08-26T01:00:12.49817Z","last_seen":"2026-10-16T07:39:44.209081Z","times_seen":2598,"resource_available":true,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor-pro/assets/css/widget-mega-menu.min.css?ver=3.26.2","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.538Z","timestamp":1792117937538,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/widget-mega-menu.min.css?ver=3.26.2 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 28 Sep 2025 11:30:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2683\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19776,"size_decoded":3054,"mime_type":"text/css","magic":"ASCII text, with very long lines (19732)","md5":"bc3e6e0825a7f4c5f2db278dcbff6146","sha1":"bf86c4e515649713bc665fb2b8f93cedbf1b91db","sha256":"aced7559bbb3fa5f9453c892db78b10594d14403aea12baf3c4b63e5583f31a4","sha512":"e8952e7664c114d5e5c753a1e8b52f4e3fe6db8827beafe05b37f2382d13ff24fdd68c8a0417b937684b07c3d6d06bfdff012c876db7c9e7fdf044352fd028b3","ssdeep":"192:hMW1QG+jfq/QSha6Jb5mLl+D5tMh1Zbtb6zkQBKVkyd43g:hdQGKfq/5w6olJh1FN6gAKVk4Z","tlshash":"f692cbc0b8d3c022161faa5903daed2d97b97890dbc54890a875d5065edffe3a2d0b37","first_seen":"2025-01-01T10:26:32.792328Z","last_seen":"2026-10-16T02:35:36.296079Z","times_seen":106,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/2025/09/Chromecast.svg","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.184Z","timestamp":1792117938184,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Chromecast.svg HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 23 Sep 2025 21:08:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 839\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1985,"size_decoded":1214,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cfc17a592a809a77728855dd3a9312bb","sha1":"e5122cb0151b743969ec68fca5172b562bad770b","sha256":"5284e615c541ef94a0f95e4e1e8d92f8d554764ce40d4d8673772bd4f9d6f946","sha512":"154117b24738fcf6e7ee5cc55ac09a5143fb672c13325b5448746754727a26546d0b3afb3313c1dd7a83f2fa403f8a9ab41b0dbc50a41698bb752f4d4be4f71d","ssdeep":"","tlshash":"8a4184d823b9e1c0b51ece65b6e77454da1732d8b076413ad8811c03de272e5153c6d7","first_seen":"2026-04-13T06:43:13.243022Z","last_seen":"2026-10-16T02:35:36.297369Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/2026/02/Sinners1-1.webp","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.208Z","timestamp":1792117938208,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/Sinners1-1.webp HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:18 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sat, 28 Feb 2026 23:46:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 151550\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":151550,"size_decoded":151887,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"53776cd216897c875aef9f34de5430a1","sha1":"22dd565ab86b3f3ac1a6929d46c135c3cb39c814","sha256":"ae2037d1bf1b2d8fd0552000672cef4676dcb052ff40b064c73d08a07af12ec5","sha512":"ae26c9c8bce8b0009df53b6a56b56058bc426bc186a20c78564d103f03ee158b2f6b525a1632ca4afdbed2d7b5548e1d08b0d85f57a95e7359159012ded7dafb","ssdeep":"3072:iOUsYjwXdZOVMJXjtCTE28tKs0V+eTkfLKAO49kmZZhrEkS3eGumffn:PUs/Xq6XZm8tKspgCVOeHNSOG5P","tlshash":"74e312cfbde92fc5c3c91bb10141496569929b7e50fe0b02badc919a43398f9db18d0d","first_seen":"2026-10-16T02:35:36.300553Z","last_seen":"2026-10-16T02:35:36.300553Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1365,"receive":1751,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/metform/build/frontend/widget-bootstrap/index.js?ver=b445a4677483b289f57b","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.298Z","timestamp":1792117938298,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/metform/build/frontend/widget-bootstrap/index.js?ver=b445a4677483b289f57b HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 30 Aug 2026 14:30:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 338\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":796,"size_decoded":636,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (796), with no line terminators","md5":"3d5561bbbe7a126de19484a91be0e5a4","sha1":"3683b0d5dab34c17f6fa3307d2b5edefcc91376a","sha256":"a6da77b42621b5dce569aa8c252b00f6d404f1b46de7e309d25a83a33ec2934d","sha512":"b2c7572c4de5a2fa00209cf814716b676da6a18e19d2dfe6fe42a3e5d52e756b28bc5f9dbf14ad4f2ac011a242c328c66dcb8bb2ff978b56f404ed5069b5a150","ssdeep":"","tlshash":"310125e1b80e723342fb54b743ff76c617321f6ac0099184241640d04f69c123596dde","first_seen":"2026-05-04T03:18:09.173671Z","last_seen":"2026-10-16T04:41:08.437349Z","times_seen":484,"resource_available":true,"data":null}},"time_used":2636,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2636,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/flag-icons/7.5.0/css/flag-icons.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:23.728Z","timestamp":1792117943728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/flag-icons/7.5.0/css/flag-icons.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://nordiciptvplay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 02:32:23 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1905730\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Thu, 29 May 2025 17:58:36 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jUWNEt3QGjCU9m3carLmqmsRVu077EV6MISpnC6np4CuvYiZvmsYs5WDmo%2BX5iZSZtitifcds8%2B2yhjjROWFHNVw0wFpFH4FLXXQcVBRwrtfiVJ7oL5isj2MW3El1vQv3R9jFrDV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a4b3a71c5a595690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1484\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28018,"size_decoded":2486,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (28015)","md5":"bb4bda4aabca4a050ee98ab4113f7ab1","sha1":"50774fff20b0d77afd5cf83b2b7f9c994decf3fc","sha256":"20f98942219dc2e82694e66f447cb2c813384180a97d35b12f4210e4ce89bcfd","sha512":"0423893d4d6212169bff56cd20c40c12559b5153071a3a3309e857f44e5994d5761d8201dbcec8912190687d8896c67544c7fa82f707a58dc6111d3d6d37068f","ssdeep":"192:G6XxgF5JRQUZuEvCtkCNDpfDYxmn21KoLSQftU99xs:ZcvQmv8DpfDYxh5t7","tlshash":"e4c20323d2c6e46fb84b5a33745a771cb2db5ac7d305473b6a2f62b5d41a088343b6b0","first_seen":"2025-04-23T18:09:04.016738Z","last_seen":"2026-10-16T02:35:36.303062Z","times_seen":1333,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":3,"connect":10,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/metform/assets/libs/cute-alert/style.css?ver=4.3.2","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.499Z","timestamp":1792117937499,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/metform/assets/libs/cute-alert/style.css?ver=4.3.2 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 30 Aug 2026 14:30:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1189\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6037,"size_decoded":1560,"mime_type":"text/css","magic":"ASCII text","md5":"74fcf239aadaec229dbe92cade69971a","sha1":"1f1d2366a9ede72d9c4dfbf88f17856e204b2855","sha256":"140ef7b4d0f06e1e7667c0ea11b63287dcd3b1f9354b7a74c691925a28196930","sha512":"428e5bdd99940b6974149054b402376d901654026ef3ff03d5485128900a04c26594becac9af63c98f635dfed56256c0f5fc56ea0a94a3218abdce579c48ba9b","ssdeep":"96:ZCQhwr4BSTFp2FpYAqC/FCMCthWhFrOTGBa+0OpMCZOEBCHnOEvWCqCYIdrOEvrN:8Qhwr4BSTFp2FpYAwDcFrOiBvLAHZF5b","tlshash":"95c102c27ab52604f857c8583c576f65626cc443a14fcdbd77d120acdec12a619f2b8c","first_seen":"2026-08-31T02:44:11.689833Z","last_seen":"2026-10-16T04:41:08.42892Z","times_seen":256,"resource_available":true,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/themes/hello-elementor/assets/css/reset.css?ver=3.5.1","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.503Z","timestamp":1792117937503,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/css/reset.css?ver=3.5.1 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 25 Aug 2026 17:25:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1667\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5829,"size_decoded":2038,"mime_type":"text/css","magic":"ASCII text, with very long lines (5828)","md5":"37975e2e42c5a4e2c9fc179b574f2710","sha1":"bda898b97c8ab3e6ec0ccbe561477206921ab9c2","sha256":"72eaeaf7ea81956ddf733ceac890269ab63e0aec77558bfaf045a5facd0bb6d4","sha512":"c50c5666d853cf6aef9b3d2678568ef3cd75923a8b0d86fb3af5be6dc16a53744c82f7d87843d76a59f8c87f889be6fea1ee905e7d659152a3e9857ac1cd0995","ssdeep":"96:vS+2XXYXqXXX6uoSA1C4pIE7RhPCZBG9H9zkAReQWe0OhHTZZkUg/2UpGbXlPru1:vD2HoyH6uL862hKZBG9H9jXhz/ausF","tlshash":"28c1726397103155a637c83a37c17ec53e126215c8331ab4e826dafcdbca4235b39f9a","first_seen":"2026-08-26T01:00:12.489171Z","last_seen":"2026-10-16T07:39:44.202944Z","times_seen":2605,"resource_available":true,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-includes/js/dist/vendor/react-jsx-runtime.min.js?ver=18.3.1","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.271Z","timestamp":1792117938271,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-includes/js/dist/vendor/react-jsx-runtime.min.js?ver=18.3.1 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Mar 2025 19:55:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 518\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":900,"size_decoded":816,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (821)","md5":"f6e84b49b20f3df8d67416886a41f305","sha1":"71048379dd0f9051a450352788d857bebd81b5e4","sha256":"fb78ff9eb3fd2ac10b035d0bd433777ece12657eac1d45a641c8d033b81ae1a5","sha512":"2dd2718e18826cee91f154d8bac14c35078a735a8dbbaa2a7f89727f4d7ddcdf5b7306afb7144fc73c5adccbf2f6789752679fd7ec16cd4b30ac68d74efe1650","ssdeep":"","tlshash":"c71100d1d48624e32bb3d853e12e94c6763a2208107eeba1b793f5e4106ead58163a72","first_seen":"2025-04-17T11:27:49.599947Z","last_seen":"2026-10-16T04:06:01.955018Z","times_seen":16743,"resource_available":true,"data":null}},"time_used":2472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2472,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/metform/assets/libs/cute-alert/cute-alert.js?ver=4.3.2","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.305Z","timestamp":1792117938305,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/metform/assets/libs/cute-alert/cute-alert.js?ver=4.3.2 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 30 Aug 2026 14:30:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1327\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":5683,"size_decoded":1626,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text","md5":"b0ca040ac9f10935ba5e80516e3564a0","sha1":"6ee6c6d22c2ecdf8b796c8eeae1198679b8c21d5","sha256":"0321d9dc6f3fa2ef62f9d91f9d0364a020e6e5bc7ac2f8d84840017034ba0e4d","sha512":"9ec0167baab1313106656eaebf8449badd6307641862268867a37d766f5d7d4d9ab4e07abb0c2b6d7f4d96682c3d772ab4d6f58b01c6be250f77d9d6a1f2fd63","ssdeep":"48:suypTGd4wUmR3KPvtnAvjtkqBO+C+eoiE1RN/iPGKTAMdBXyZdRE8VwUmR3K885s:XRnp6tOtk4eANsM7mxp68yY","tlshash":"c3c1ed2545f29e360773e1aea7af924539209013f94aad45398c479c0fd3e615ef27c2","first_seen":"2026-08-31T02:44:11.680301Z","last_seen":"2026-10-16T04:41:08.437995Z","times_seen":284,"resource_available":true,"data":null}},"time_used":2626,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2626,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-bob.min.css?ver=4.3.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.473Z","timestamp":1792117937473,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-bob.min.css?ver=4.3.5 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 25 Aug 2024 17:59:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 216\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":567,"size_decoded":586,"mime_type":"text/css","magic":"ASCII text, with very long lines (567), with no line terminators","md5":"99dc44ad942f4889be28d393894c5c0a","sha1":"7cd0ece16533b21ac350234819ab2f887eed0776","sha256":"aa360e0a2ae744f222422128a552ffa2a0cb597767cf204df4e3802df9b4e8be","sha512":"9913ace79072854d8cead93ab30b1a6a43677abf2eae3dbdea4a14fe9c5e45ed632b280243b9d0d78b5cd6ebb9a1a9d2d831d8bff1af31efae4e9bc5fba53828","ssdeep":"","tlshash":"1df062c4bd621009026b03274ecb1a688db45dd60020acfd762a964e4a2469833b7a37","first_seen":"2024-10-04T10:54:36.542257Z","last_seen":"2026-10-16T07:30:51.438178Z","times_seen":2515,"resource_available":true,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/2025/10/WhatsApp-Image-2024-08-14-at-10.04.51-822x1536-1.webp","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.239Z","timestamp":1792117938239,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/WhatsApp-Image-2024-08-14-at-10.04.51-822x1536-1.webp HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:18 GMT\r\ncontent-type: image/webp\r\nlast-modified: Fri, 03 Oct 2025 11:01:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 124184\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":124184,"size_decoded":124521,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 822x1536, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"63e4b37625f0a91aeff88c110222b56d","sha1":"0ea7a1565209de2992cf63cc341aa6ab04b2ba72","sha256":"e5702d3e7f3f7042df571c80c14612a779c9c7a042549cedbbb1800710b27b95","sha512":"8ad84d1aad9149029a50095c73377fc63d49df7bdd4fd9aa99f99e3428b9c38f86c7e53cd1d84c04bedffefae5c76e5baec5d0e266bceb9c3c9b6e56c8f2204d","ssdeep":"3072:2WfuXekkuzpTDJs04lIITFMVt3N/gJec8IIayjicBd4jc2o5VVen:Bf8xDJsNlUVt3N/gJffqiA2IvK","tlshash":"1dc32313726387d04e27ce269687d365b9b3c1a01edfcc38b61865eae5432b543ad713","first_seen":"2026-05-30T19:50:15.109549Z","last_seen":"2026-10-16T02:35:36.309176Z","times_seen":3,"resource_available":false,"data":null}},"time_used":4909,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2689,"receive":2220,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/metform/build/frontend/app/index.js?ver=6ea98acae644b20be40c","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.296Z","timestamp":1792117938296,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/metform/build/frontend/app/index.js?ver=6ea98acae644b20be40c HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 30 Aug 2026 14:30:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 135850\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":530626,"size_decoded":136151,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"562481b817e8b42bfc7857c63e5bd479","sha1":"d4dccbbc72d7d5dbd8ff739eb4fb181a17a8e403","sha256":"3a797a459c25f7311d3270ef2b5542bca496b21daed08ecb729eb2ec44ed3c9b","sha512":"56addb5cd47a8f046ec26f9ecfb98559d1cb90fc0ef6e54d3776a5ab780620313c5b093a070856e554081544d43d9ba6870f8d2fde52bffbb995071a6d79fd45","ssdeep":"6144:AWu1WwoaUqVJHV49yJQjn/GrjtaREZ/ZPni1BC9tf:y/HCyJQjn/GsR+/Z/i1wLf","tlshash":"f1b42a8872d1b47153e361b5403f110af33b6d68e449d490f629d8e46cb998ea27bf3d","first_seen":"2026-08-31T02:44:11.676941Z","last_seen":"2026-10-16T04:41:08.436742Z","times_seen":293,"resource_available":true,"data":null}},"time_used":4855,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2642,"receive":2213,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/cookieadmin/assets/css/consent.css?ver=1.2.6","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.455Z","timestamp":1792117937455,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/cookieadmin/assets/css/consent.css?ver=1.2.6 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Oct 2026 17:37:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 5280\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":20318,"size_decoded":5651,"mime_type":"text/css","magic":"ASCII text","md5":"bfb308adeeddf30762878bb620ecab36","sha1":"a00f3949103862a9308f405b196e6e9b1fec0136","sha256":"c522735c06dfbb43c725c60f8f0f45826ccc2a053d7756eacbc73b8b5316c2c9","sha512":"f03d4b9d9920b262a70990e52514ed268812ab0cb10b8de53630fec9e3c0a95937d18e1efca2dfb79780e42387abae73bf530ea2b6a9affaa8bbe899c1673f1a","ssdeep":"192:F4vJ1uMAekEwEiH7VPB5Jq2d+DIGEFSLi/XbR+LZu1175:F61zAekWiH7V5q2dpGEkkXbR5175","tlshash":"699296163e9ca31ca21b80d9f688db41961e4162f91e4c5e9ab234fcc2c47d34dd67eb","first_seen":"2026-10-13T05:17:41.168447Z","last_seen":"2026-10-16T02:35:36.313557Z","times_seen":6,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/metform/assets/libs/text-editor/text-editor.css?ver=4.3.2","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.501Z","timestamp":1792117937501,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/metform/assets/libs/text-editor/text-editor.css?ver=4.3.2 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 30 Aug 2026 14:30:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3528\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":27683,"size_decoded":3899,"mime_type":"text/css","magic":"ASCII text","md5":"85df904999b5ecd26dfc5f96eedc7046","sha1":"b45f879be67af4f26399de3624525b4ebfce7053","sha256":"6e6d77ee2b6a6e725b6ca52a0566307b1b66c24bdd9d749168e8f343bbb7ed02","sha512":"19de06d6776d42260008616f4376b9bc5a8b5b28b006c2f9753fe0723301a9d1160a6831cd16248cf21c6463ed8992380669782d5300223ca02b05208d77c9d2","ssdeep":"768:0A9UsdH+o5pFTF7FTFRWAFeFOoa/NIbPzreWIdOqywEVqG:fUc+I1l1Dho3/7","tlshash":"5cc2de0dbce324be6926747d950d12d02b86b213f0cbdd9af4c0a6989f9c29463f56dc","first_seen":"2026-08-31T02:44:11.693203Z","last_seen":"2026-10-16T04:41:08.413478Z","times_seen":257,"resource_available":true,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=4.3.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.941Z","timestamp":1792117937941,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=4.3.5 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 29 Feb 2024 16:51:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4042\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":15073,"size_decoded":4341,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14886)","md5":"ef17c8ffc514d7418b4bec001b8473fb","sha1":"9d406018e5be8d46b89809d38eb6cea4f8bf62a2","sha256":"6f35273b8502706ee06854d797337ab40bc1b3a7421960a2ceb5392ac85a0f54","sha512":"6a3288f610d5f70344a48f885ea5a1877bd869035fb50f6e5159ddc09c67c7ffcc6d9aac4cc537800f3e84349aa26345d42134f305b41bdd5004e71b2160cbf1","ssdeep":"192:bP6lw28fajqZFSJtd4fxVOT2iQsVJqYqV5PnX9dUWFjWqh2P9e93f7POD3g:On8fajqZFwtdykZwRXcoWI2P9o7S3g","tlshash":"0262337bbd000da93cac595852a27d046d0eb32fbb430c6bbdc59de623a23f5719e006","first_seen":"2024-03-11T13:11:57Z","last_seen":"2026-10-16T07:23:41.097844Z","times_seen":81650,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/2026/02/avatar_fire_and_ash_ver2.webp","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.218Z","timestamp":1792117938218,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/avatar_fire_and_ash_ver2.webp HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:18 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sat, 28 Feb 2026 23:45:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 198522\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":198522,"size_decoded":198859,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2609f0b9213241f9509124196a0a5bed","sha1":"f096db8e6cd560cc3eb9c787193e27f4b89fa5b1","sha256":"65518abeb9f6d3070dcafd85a92ee0ce4a0a7bc1ae96f17014dafabc7b98a1b5","sha512":"111e3f8bee061b7618c7756f4f394f2da319d16e9b28b402dccebcffc0863de2d9e4c67b5dabe4b88e41a32e59660afbccd721e5fdd1506b365824c56690a9c7","ssdeep":"6144:2SD9W0CQc83fG6OGyDZ+9cVu7VggdKBv/pFBd:2SDvCQzRc47dUv/p5","tlshash":"941412e1104129e1d4776af8057beeb37f5336d0c50f2b9a02fc2b975ba40b28557e2a","first_seen":"2026-10-16T02:35:36.315815Z","last_seen":"2026-10-16T02:35:36.315815Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3696,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1557,"receive":2139,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/css/conditionals/e-swiper.min.css?ver=4.3.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.482Z","timestamp":1792117937482,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/conditionals/e-swiper.min.css?ver=4.3.5 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 10 Dec 2024 19:19:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 699\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5486,"size_decoded":1069,"mime_type":"text/css","magic":"ASCII text, with very long lines (5486), with no line terminators","md5":"f8ab0c98754e13666d2cd378bd023dbb","sha1":"a5226ce1f5dd1eaba7a6d2490eb081bfcc861a0c","sha256":"196f351ce1a780302b50e7b2404023102d7f555aa518d62ec678829c4b7b1185","sha512":"4d78e7fa90bccdf3ac5c09bae6cf94f7f249df6dabb23a510962d1b96072de072a6f81ada0e70f9087a6c38d909aaa42fb5350f7c8d1fa7f90be7578fb2698be","ssdeep":"48:VbD0j9UWW1KebuS9OwVFd4Rd8JN6JnDYQ1I1kFYFsFaFbdFvFblFaFbpFvFbX:Vf0RH1f0qYm6qg3B703VN","tlshash":"adb18c823f830123635f4e67292357bda2280dc44997b6aad2e1ac87e2b5cf5375f854","first_seen":"2024-12-17T09:11:11.376513Z","last_seen":"2026-10-16T07:30:51.48875Z","times_seen":95027,"resource_available":true,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/css/widget-divider.min.css?ver=4.3.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.492Z","timestamp":1792117937492,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-divider.min.css?ver=4.3.5 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Oct 2025 16:51:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 678\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4258,"size_decoded":1048,"mime_type":"text/css","magic":"ASCII text, with very long lines (4258), with no line terminators","md5":"3d78dc83d20515d554c4a45df3500bb0","sha1":"36fe7b5ebfeb079e9e20b12222766b1922382586","sha256":"f042f3243af9c3e339447b3aa8acf5776c9c12bf03b67e87013750ca5ad7fb0a","sha512":"c61feebb9eeb0cc5ef3029e7c6e94797face0f9bfb4905a51e96d2e59c63978688aff83fddea3326cc5d197e3cace6cf42c94f6cfb98ff7c6c16da61e7a28f32","ssdeep":"96:voAhZrOq52pydTYk0+5FD1852KELxrFrRevYJocO:voIOq5a75slUmor","tlshash":"a5918555b94f8218b79f141b8e173e4cf04467c9fa618a81d9f37252f0aed842f209e9","first_seen":"2025-05-04T13:14:28.472981Z","last_seen":"2026-10-16T07:04:48.083926Z","times_seen":52885,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor-pro/assets/css/widget-blockquote.min.css?ver=3.25.0","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.535Z","timestamp":1792117937535,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/widget-blockquote.min.css?ver=3.25.0 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 28 Sep 2025 11:30:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 955\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5225,"size_decoded":1325,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (5179)","md5":"48e5b94edd3f0b53cefcf5a51289f58b","sha1":"755b39d185a43ab17a866090d0a8706b8230231b","sha256":"8daf1a0efca987e7dee789bb92f90d2a4b811ff73881690104ae7cfa86418887","sha512":"85a615bae97d7fee7b6345f93e1186f3c479579e1808f5d50e09d16d401d4e4b1fb1f818779a2ba6a979677e91d26e420d7c1f99e982de72f98fcc8ceca65453","ssdeep":"96:B0TOXwYzqOcHH+VF0LXNhvcxDChtGt0hlNhjUR:Pwecn+3KXNhvcxDChtGt0hlk","tlshash":"59b1ac9e786362a9036f820a6d43e1bc615055c4d88233d0ec76d187f5e99f833e67ab","first_seen":"2024-12-23T11:26:33.650454Z","last_seen":"2026-10-16T02:35:36.31911Z","times_seen":133,"resource_available":true,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/2025/09/Android.svg","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.175Z","timestamp":1792117938175,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Android.svg HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 23 Sep 2025 21:08:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1143\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3220,"size_decoded":1519,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f8c680ea040bc24299bfb257ef65da15","sha1":"931db6a1e7f6b6cadbf0330e2fab815907e77238","sha256":"787fa7ba60833f5b12bc7771cc5e1a62fec63064a3f0a86480c6d7b39d06e5f8","sha512":"a20278f8dc1d2c27c6ccb71510fca8c5189b05c6a4099542626c68d3805095067522b01046d7569f4d0715d37e34484f9fea213372b11b62c435a542025fcae4","ssdeep":"","tlshash":"ea61166e435a93f77f7e8de4d8b00cc868396097e58b2690d4c37da1548bee78357015","first_seen":"2026-04-13T06:43:13.138978Z","last_seen":"2026-10-16T02:35:36.320981Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1395,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1395,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/js/chunks/text-editor.min.js?ver=4.3.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:23.811Z","timestamp":1792117943811,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/chunks/text-editor.min.js?ver=4.3.5 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 01 Sep 2026 15:47:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 6981\r\ndate: Fri, 16 Oct 2026 02:32:23 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":20662,"size_decoded":7280,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20661), with no line terminators","md5":"59e5b924c9d503abd7510f40fc58dfcc","sha1":"e16eb0e441e5bcf4f84e47c63ccf62c35ab07291","sha256":"a7b26ee1157dd6916bd9a82e218629d8f4fe8e818153289d7ede0286caaf543b","sha512":"97c7135fb991ea2f0ce35592e46ef358f2899eb96f0c6c0be3107a5e45320c68397108b6ec08c92ecc2826bf0eddde73293dd872bc8339c81b0c7bcf5ed79c21","ssdeep":"384:HstSPep7waQ3uowkPxw9mGpJwcCkMm1UjiVgd/ZID5Nuhav8R6nTZg8eDDaBY:Mt/peuow+8xJXhHzVg2NuxwTZg8eDDa6","tlshash":"179244877de5f8a95266e071d03f6406f32a09489c4ce0d8ae7fd6a17cfd8094262f79","first_seen":"2026-09-16T00:25:03.431384Z","last_seen":"2026-10-16T07:23:38.259901Z","times_seen":5118,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor-pro/assets/css/widget-form.min.css?ver=3.26.2","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.494Z","timestamp":1792117937494,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/widget-form.min.css?ver=3.26.2 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 28 Sep 2025 11:30:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1408\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":6798,"size_decoded":1779,"mime_type":"text/css","magic":"ASCII text, with very long lines (6754)","md5":"dfe9f42ed41d90272dab0c05c7e2b1a3","sha1":"508519e36731e63876de14b5c08aa879d962907f","sha256":"77109e7ffc704ddd3d8a8c009cc7eee647ce3b26882e45abd964f999174e2249","sha512":"4f8f9dc9bae66c9c6033b93f7eed19869226e2670cb3c62e8ee97f840c522d3b38c36ec9a170023c71f494519fc7f5e85e4044da9f9d53f260789b5ee64deb89","ssdeep":"96:BGnuedCc+P7p6YWHZENaFqZERQZENapmzYTWCqz6P1TZM3AKA/AujMWJpS5vF9I0:zQEcME+EcdV4C5LT4jv","tlshash":"f2e167f1bc12852b6927b8f9c5d524cc428876a08bc1c58b9c6c6459c3feaf1533678f","first_seen":"2024-12-23T17:17:24.952312Z","last_seen":"2026-10-16T02:35:36.323029Z","times_seen":284,"resource_available":true,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.css?ver=5.15.3","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.533Z","timestamp":1792117937533,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.css?ver=5.15.3 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 23 Apr 2023 15:22:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 296\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":727,"size_decoded":666,"mime_type":"text/css","magic":"ASCII text, with very long lines (307)","md5":"8d37441d69ebc9b55dff2c7c214ef997","sha1":"9a292c8559131ea8838899863987ffdcfb4005ea","sha256":"93cf6e96459e42f9f656e03ec4800578dc2c021dcde475c9e5e891a7780b0866","sha512":"25e4e29eadc6a9c8b81b8e000726d8a9eea9d3378ca6faa641d5b9dcb64039ba97904fd0b2bf50a8303b7cd1194d08c80641025a635f8c3fd2ebd9217f824704","ssdeep":"","tlshash":"a201247d81022a504a8008152adabf689e99b0a6785c6f7572329c2eccf4e5961a9f0d","first_seen":"2023-04-09T05:14:34Z","last_seen":"2026-10-16T07:30:51.395989Z","times_seen":43408,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor-pro/assets/css/widget-nav-menu.min.css?ver=3.26.0","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.542Z","timestamp":1792117937542,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/widget-nav-menu.min.css?ver=3.26.0 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 28 Sep 2025 11:30:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3155\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":26859,"size_decoded":3526,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (26814)","md5":"917807fcd49ed1d6f66afd7a10d67d16","sha1":"b16ced3e543bbdc6cfb58378c73cd1b863ac9c75","sha256":"1778ac7a53748fe35c5287bf8c802c1f20f36b22b55f00e554afb368c7936e4f","sha512":"7c949667df54c578e8a54a688082679f6f65eb03dd76419c67b26b4cb4f0d7909408fd82f23534bb32ad11d92af84567afea8fff4b7deb11d631b7f9ab901978","ssdeep":"768:drPoScoKjA9lwvGQzKVwGz42lvQz0ABmePmBMqRIEEtCelEqJUrkjTz:E","tlshash":"b9c27a81bed3592b032f613b91e2c61c4fa619c8b2a17699f0f5900f41d7d5c6bb7b22","first_seen":"2024-12-24T05:56:55.187258Z","last_seen":"2026-10-16T02:35:36.32437Z","times_seen":564,"resource_available":true,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/2025/10/WhatsApp-Image-2024-08-24-at-13.20.10-826x1536-1.webp","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.246Z","timestamp":1792117938246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/WhatsApp-Image-2024-08-24-at-13.20.10-826x1536-1.webp HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:18 GMT\r\ncontent-type: image/webp\r\nlast-modified: Fri, 03 Oct 2025 11:01:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 113940\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":113940,"size_decoded":114277,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 826x1536, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f9e0bbbce5dfee1060a1e07821741c31","sha1":"bf882044470a8445ba4e32e493631d14d12b48d5","sha256":"d9abab25f4e60d6e864f90733c33ae71db98d73b79ab2cca52a351cbcce84a71","sha512":"9763b26b52a2138217aea6461a8c5079148359ec1b4447b9e52e332c95e4c2fa408a5e41f459ef285c0929f000a21f474912375a1ea733f952fb252bfdb30681","ssdeep":"3072:YLBsyuC6p23hNLC/7CEmqqHZVPpO1nWchyXRqT8T:YlsO6wL67i5VhGncqIT","tlshash":"d1b312270974f90e19f6c4f3b4b1466453feebdbd276bb043eacd8b05189806508fa5a","first_seen":"2026-05-30T19:50:15.106588Z","last_seen":"2026-10-16T02:35:36.325127Z","times_seen":3,"resource_available":false,"data":null}},"time_used":4476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2678,"receive":1798,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.263Z","timestamp":1792117938263,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 06 Feb 2025 22:27:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 6812\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":21464,"size_decoded":7111,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-10-16T07:23:41.469589Z","times_seen":355375,"resource_available":true,"data":null}},"time_used":2668,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2668,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.26.2","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.331Z","timestamp":1792117938331,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.26.2 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Sep 2025 11:30:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2625\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6263,"size_decoded":2924,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6219)","md5":"2dda439643a822112d10b9ae21d31aab","sha1":"653e7a9ecbfb694dfca181fbfa90e9e2c91eeaaf","sha256":"1222f6e82ad782bdca42fc5c8b48683aa9323cfb933f8da846682c9ad2030f4e","sha512":"3b8a26e081bb40e4b47f514b2d8b0bec0b36695c3e716af5b6266e92e232ca24f0352392088fc83ae805886ba681165b92f18afb62bbe2bc992eb40051bf65d1","ssdeep":"96:BuIOhUwrxNkjboFCrEO/HazYAd4NLhsstJQPCl2qGVfFVKORYQGK0jDjY8k2:IIKUjjboFuazCNL7MPGGDMOmQqjpk2","tlshash":"c3d1879c09489d2b25e43ae8b0576b741a3dc0323c19d981e651eddc18fcfd183eb932","first_seen":"2024-12-23T11:26:33.68187Z","last_seen":"2026-10-16T02:35:36.327267Z","times_seen":1329,"resource_available":true,"data":null}},"time_used":2607,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2607,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/16.0.1/svg/1f449.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:23.921Z","timestamp":1792117943921,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 19:44:43 GMT","end":"Fri, 20 Nov 2026 19:44:42 GMT"},"fingerprint":{"sha1":"71:14:CE:1E:D1:35:48:65:9D:D4:BE:BA:7A:F0:EF:FA:97:28:79:00","sha256":"98:51:EC:74:34:EB:FA:D4:3F:28:B7:CA:B2:41:04:70:21:25:B3:7C:AF:89:AF:64:1B:93:11:E2:B2:7B:F2:E7"}}},"request":{"raw":"GET /images/core/emoji/16.0.1/svg/1f449.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 16 Oct 2026 02:32:27 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 11 Jun 2026 15:04:23 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 19\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-remembering: Eric Binnion \u003chttps://friendsofericbinnion.wordpress.com/\u003e, Eric Binnion \u003chttps://friendsofericbinnion.wordpress.com/\u003e\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":563,"size_decoded":988,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"032d907ff49a63e0757cadd5f36ab216","sha1":"e6620a7b4e00326c5b527ceae7d3c62b6b243059","sha256":"41578770d740012d57be1d400db47fdba90631e27363a4877af6cc54a032ad10","sha512":"7350efd06d702d6ee9f8d86728bcfea699d7284ac5ea591fd94c3bfdf6d65d8518d64e70d0949c358e02f5b9e8d993b7bdc20df52ccf368d7a9881ca733a5baa","ssdeep":"","tlshash":"f7f020cf42a0c998a8cff7a82f2645d52b5a32f259a540d54091871d38c31852a11d21","first_seen":"2023-04-06T22:22:04Z","last_seen":"2026-10-16T07:51:32.194117Z","times_seen":4747,"resource_available":false,"data":null}},"time_used":3273,"timings":{"blocked":0,"dns":2,"connect":8,"send":0,"wait":8,"receive":0,"ssl":3254},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/2025/10/emplate-1-300x300.png","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:24.470Z","timestamp":1792117944470,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/emplate-1-300x300.png HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Oct 2025 12:34:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11908\r\ndate: Fri, 16 Oct 2026 02:32:24 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11908,"size_decoded":12243,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"e8033c1f2b07f01ce7f137c6d2c3e2d8","sha1":"fe37a982cb7ef62f1186568316e2ebe94564e6d6","sha256":"7cb3e5b808564c1e18c13806f49e3ea72738b5f8a501c8ba58f1e27483fdd26b","sha512":"675a14a803768812e3b29a74ad9500cd6fac8ded7ee8722531cdbe448c049b64398732cd1eae597aa6f8d6ad11f5eb5d995cacb91200ea1485f4c12e38c1b7d4","ssdeep":"192:pwf5kslpMaOTYHIXoejDRtasCPL+vO0GSBSsJ3X4Q1lJEsvMCXBJRQKphof:mSeaaOcHIXtjDOPLRSB7lJ5rRLa","tlshash":"b332b0f5dd0c681ca84efa30e612370f9d1a90713565609d8b2fb814ae1f70e1ca6ecd","first_seen":"2026-10-16T02:35:36.32862Z","last_seen":"2026-10-16T02:35:36.32862Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=4.3.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.476Z","timestamp":1792117937476,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=4.3.5 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Oct 2025 16:51:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 214\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":214,"size_decoded":546,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"12045858d487a8ae56337b554a5ee03c","sha1":"f002d465c77cc210b1a049da21d2d8dfb4bba080","sha256":"fb8690e594b2f9b841585895d811e8cb839667a1a63963d1a1cdea11e2aa2abb","sha512":"2d50371adad63f2b9b384b10b87546b85344fe46560b65f9321100515c257e6a147e1353946f8ef5c4300827a41ce6641c3cedc82c9f63847874c3aae39485ac","ssdeep":"","tlshash":"b2d0c901792783c6302f896926ab669e39d01dddf246db90aca166165abecc82772160","first_seen":"2025-01-03T10:53:39.937643Z","last_seen":"2026-10-16T07:23:36.487964Z","times_seen":140059,"resource_available":true,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/css/widget-nested-tabs.min.css?ver=4.3.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.487Z","timestamp":1792117937487,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-nested-tabs.min.css?ver=4.3.5 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Oct 2025 16:51:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1718\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":14818,"size_decoded":2089,"mime_type":"text/css","magic":"ASCII text, with very long lines (14818), with no line terminators","md5":"ab07fd9b30a4d16842dec8be6404c143","sha1":"c64a1b5d4fbab1321588b3053f9d1bcd55d20faf","sha256":"39f994a027202143ede7e722637e60901de7a07eb84ee84553dfac645406ea64","sha512":"3d14bb2c5a35bf96f9edb478e0b7fe4ff62c2a48f91db881abc4835e657db9c783a3216e61a1c2d44852c58a5c28b9965deb354175b6edb4592d29e6efd4778c","ssdeep":"384:JqnCbkF4q/mkAnSla6T8L4N0hwVusBjvt:Jqn8UYnSla6T8L4NYwVusBjvt","tlshash":"0a6214b07d07502b165ffb9e0ad761ad1664a3c4abc77492e8525612f0fefe2e220533","first_seen":"2025-09-18T09:50:04.460946Z","last_seen":"2026-10-16T04:43:20.505054Z","times_seen":2680,"resource_available":true,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/2025/09/231101-coverflow-intro-dazn-1450-desktop@2x-1-copy-1-1536x1466.webp","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.170Z","timestamp":1792117938170,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/231101-coverflow-intro-dazn-1450-desktop@2x-1-copy-1-1536x1466.webp HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:18 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 23 Sep 2025 20:55:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 319014\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":319014,"size_decoded":319351,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6d3a14d000df9bb3491d2665047df1a3","sha1":"b6821501184bf6162cb6008b098d15e8c8277eff","sha256":"d341ab4b19cb07a86b692027eb87fc025c0760719a84884f5777055c6fbceabd","sha512":"886ec745eb1907eaa385dcfdb80e9feee2bd78d0c6469965d68f5f408de8e15a42b458c755258cce42b80cc4f0edd491304d3052cf3534ac41f9567ec6c4be46","ssdeep":"6144:3wFYmQsxLdOaZz//uVoCEL/HK/S9zeQKeRi9R/2APoW9LrjoCLZ/PTWS4FF:kYmQsxdbx/WV0bKyZjiReAPoW9fECZq5","tlshash":"ef6423f6dbcd200acc71aaf4a05469fcb4bb3915c2392e61167a61fe1104ce6bb4e57c","first_seen":"2026-10-16T02:35:36.331754Z","last_seen":"2026-10-16T02:35:36.331754Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1206,"receive":2915,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/2025/10/WhatsApp-Image-2024-04-16-at-15.21.10.webp","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.230Z","timestamp":1792117938230,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/WhatsApp-Image-2024-04-16-at-15.21.10.webp HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:18 GMT\r\ncontent-type: image/webp\r\nlast-modified: Fri, 03 Oct 2025 11:01:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 92490\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":92490,"size_decoded":92826,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 728x1392, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5918ef06261aa389d8f94dede15af791","sha1":"3530f2260ed06f37bcabf29efb918e5c6a23c549","sha256":"5551252834f3c14d5009306c9b53575f7422f8e2002915b4e65afd42f7ce5734","sha512":"5dc626a43aa5e84c6ddb978944ee96ba548cb6462a20ac569c300f9cf3f3d0f7abd28570a14b41e113f22e68149eed715f8713bd0b6bb621ff2137ca509f3734","ssdeep":"1536:qZpFlVEEmgBoU4Sh+kpH4bTxhLviaA35Dul5FmnBDGb9mpZWTPnENCmP3WrJCX+P:qHfVEEFsSh+kwTvLviRkUnBDlpQTcNvY","tlshash":"24931210883d4cdde1313eed168588f87e9d52c06796d6e9eba4f04b0b423a3eb5d6d2","first_seen":"2026-05-30T19:50:15.094467Z","last_seen":"2026-10-16T02:35:36.333161Z","times_seen":3,"resource_available":false,"data":null}},"time_used":4493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2649,"receive":1844,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/2025/10/WhatsApp-Image-2024-08-14-at-10.04.30-819x1536-1.webp","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.236Z","timestamp":1792117938236,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/WhatsApp-Image-2024-08-14-at-10.04.30-819x1536-1.webp HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:18 GMT\r\ncontent-type: image/webp\r\nlast-modified: Fri, 03 Oct 2025 11:01:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 109606\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":109606,"size_decoded":109943,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 819x1536, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0787b400d5a84d05bc8bb4e4759c3ea7","sha1":"136846ff6dd69eba01b8e680b77444e3c54764e2","sha256":"2fd39bc0dc38783ae0f7b63362c15e7d99f3e718dfbbf3192b2bab43d768f7f9","sha512":"b633d4fb0db9c9df117ed1efc6da0029b2af092c71af975bb59ba15beeaef99db783b909fff4e015bf9d97a89d255f99dd6f6af1e8c45e0475bec860aa5e3efd","ssdeep":"3072:exRKZagUCa1Wrrt+JEiZw/yMG9RgeVaBr5g5uZ5OBxwlpK+:exRyesoJERJSRi5TW+","tlshash":"3db302eb4419740cad11df949402235d8796dbba2803f43692f03a7e82d1765fbab2db","first_seen":"2026-05-30T19:50:15.059857Z","last_seen":"2026-10-16T02:35:36.334833Z","times_seen":3,"resource_available":false,"data":null}},"time_used":4493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2644,"receive":1849,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=4.3.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.265Z","timestamp":1792117938265,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=4.3.5 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 01 Sep 2026 15:47:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 18280\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":60022,"size_decoded":18580,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60021), with no line terminators","md5":"8158a95aa7087189ca5ad6e9867dee9a","sha1":"6e740a2a96355aeafb06a5c944938726b300d223","sha256":"bbfe6403b4ddba29284c72d20f000154d04588d60850fc39a6fd65861c6d83e6","sha512":"da11805a203b7853ad7d4e8cb418d19f64444c69c2027ce8fe1551531b8ad17ab91b8cc3073015a690e815179003f6021222ff0699d5930a618b843348aeb281","ssdeep":"1536:z2GUusuU1FNBevOYdA6i9CSjnNMdmPaLK7UYBeQCWh+NsKCPWEgwPwicOMLkskwA:zFfsuuuhU70Yv","tlshash":"9e43fa467ad6f862025bd473e03b5009f3264dc8ac09f098ba7ed9d1b8f8d4653a2f75","first_seen":"2026-09-16T00:25:03.440475Z","last_seen":"2026-10-16T07:30:51.426624Z","times_seen":5914,"resource_available":true,"data":null}},"time_used":3252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2668,"receive":584,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/karla/v33/qkBbXvYC6trAT7RVLtyU4LZOsAU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.826Z","timestamp":1792117938826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/karla/v33/qkBbXvYC6trAT7RVLtyU4LZOsAU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nordiciptvplay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 19:43:15 GMT\r\nexpires: Tue, 12 Oct 2027 19:43:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 283743\r\nlast-modified: Wed, 10 Sep 2025 16:45:33 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32236,"size_decoded":33049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32236, version 1.0","md5":"460580ff5d5f9daad7aebcd7203507bc","sha1":"d005e16fd29071beec3d948aaacfa2da74526fe0","sha256":"e3483281fbf916fd2549365cb4ba48a389ce8dc1fb74fc766fb0623ffd0473bc","sha512":"1fa713a68410646252d6a1567fe325baf0b5a74294dd136121726079829255d82f82404d15d86866f120e94715a7f1cc909216bbbd9f6d7dc34cde512a92d842","ssdeep":"768:mMZ+9ps2ddJm9wj26zI5fIVNpUnhkEob2y:mM5YPzeaNpQhpol","tlshash":"7ce2f076c16155f4c4aa80408f677390bba7906ac46a9f254307e0e3debf6de3860787","first_seen":"2025-09-12T17:16:52.812006Z","last_seen":"2026-10-16T05:48:05.493284Z","times_seen":3107,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":26,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Karla:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.937Z","timestamp":1792117937937,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css?family=Karla:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 16 Oct 2026 02:32:18 GMT\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11809,"size_decoded":1285,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"fa37c3e732c52daa3a76944831e3a7ed","sha1":"f9d19d314c05066e92ed05c6df943a46b01a1e13","sha256":"b5ae9fb7736ad37bdf7663cc1c1a2f963307188237177326e2da3b8ff321601b","sha512":"5404a8a35721fdee51f6cbe036401b3cb3eefdf14d726a303d35053b8fe9243cc6ae0f201a47a85ecfa8a05474c7b31680b06e439c74537cfe2db22922e6b244","ssdeep":"192:nAnOATnnOnTOnOOTNnONTEnOETrnOrTCnOCDv4yv/TvGMvl1v8WvDXvq9:n36OTNochzeaXJJ","tlshash":"5e32d381086fa504db872ec652da7d36ff1f61506445a6346afe14ccbc9ac5e536170c","first_seen":"2026-10-06T10:18:14.255849Z","last_seen":"2026-10-16T02:35:36.337614Z","times_seen":9,"resource_available":true,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":307,"connect":19,"send":0,"wait":39,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/2025/09/Roku.svg","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.192Z","timestamp":1792117938192,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Roku.svg HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 23 Sep 2025 21:08:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 775\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2168,"size_decoded":1150,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7fa10f09d2c141bb0f501a248831be3e","sha1":"f613bfad52e27e06ce08d1bc0ab128e53bfe35e0","sha256":"2b7f3b338d44abc658bf178260f5bff19f78294c308f5923cc9ae7e7bb230f5b","sha512":"f3005b01e2d8e2f6390372dba5165fc5ca636029eec6d131be569b25078fb67e548d6b93484f1b36b9938280b9f699f41cbd6c6444e6a34479352d308b93b3bc","ssdeep":"","tlshash":"ff4131fcb1a768f6ca098152d03608c587217a6d8ed700add2352e97bc30de0035fe20","first_seen":"2026-04-13T06:43:13.201648Z","last_seen":"2026-10-16T02:35:36.33919Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1380,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.26.2","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.333Z","timestamp":1792117938333,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.26.2 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Sep 2025 11:30:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 6279\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":24210,"size_decoded":6578,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (24166)","md5":"5b76642da0065cbaf14b220aa11b3eaf","sha1":"86b6763b459a53cd16a0411d2388412cb2adafae","sha256":"479bd73d76d3360fd8d91d53512a956afdc94c880636817ce71dc91f2858bb71","sha512":"e68d4b6a3fe60a195f1e759e0b0a1f1c76dd537d4e357653e3e6378c741775652137bab6b8a59c20442d710517516fe6266ec32534da50498ca43cb69f19dec9","ssdeep":"384:zxpy+EVxFm6cKJskdHd7taQtHuGJswg/i+pQDTWmMo7YtDTVHJiMqkoh+vFWN7Ko:zxw+EVxFm6cKikdHd7taQtHuGJswg/DU","tlshash":"11b2d9013163ac7a50cf815be467420e77378895740570ed7abc6cdba5b8e9a33ea339","first_seen":"2024-12-23T11:26:33.691782Z","last_seen":"2026-10-16T02:35:36.340807Z","times_seen":1330,"resource_available":true,"data":null}},"time_used":2605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/2025/10/WhatsApp-Image-2024-02-17-at-14.08.33-828x1536-1.webp","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.226Z","timestamp":1792117938226,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/WhatsApp-Image-2024-02-17-at-14.08.33-828x1536-1.webp HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:18 GMT\r\ncontent-type: image/webp\r\nlast-modified: Fri, 03 Oct 2025 11:01:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 95050\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":95050,"size_decoded":95386,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 828x1536, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"de1799d859832e850994647e709f4961","sha1":"011e5099c336840165d8fa30f973c0e643b48e31","sha256":"415447841b0e3e2bac00b50162527f75d6beaa691532196470e77cd17ba6077d","sha512":"8e4e3f310f99a204a501f244cd9aae3a0f554a1445656b62847f67472eda562a147b05a43f428c34b02560e4253a86e10b4d820846ad2eca04e29643721c8308","ssdeep":"1536:sypM0vh/Fa8OAN3tMzcTREzz2dOf0MgAkoSWdtPARsI25j7q61go5ch:sypZ/F+83jTGzzo40MgAk7+PAR+j7qrp","tlshash":"0e93124c112d4850e7e4f1bca75f260929733b2873db39278b65d68ad6f28c878ad254","first_seen":"2026-05-30T19:50:15.108796Z","last_seen":"2026-10-16T02:35:36.341852Z","times_seen":3,"resource_available":false,"data":null}},"time_used":4288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2531,"receive":1757,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/js/chunks/background-slideshow.min.js?ver=4.3.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:23.700Z","timestamp":1792117943700,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/chunks/background-slideshow.min.js?ver=4.3.5 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 01 Sep 2026 15:47:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 7728\r\ndate: Fri, 16 Oct 2026 02:32:23 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":23186,"size_decoded":8027,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23185), with no line terminators","md5":"e1d41140de4d9b507766c74147884c77","sha1":"c56342af7c55bbe20890230bc4121c18d159244a","sha256":"b988fa9f49a827ea9e370928141eea3bbc6de3bb8ba09be948ae80352c3a906d","sha512":"b85e2a1a6c10101f15657e1b534da71f494d57b17eba0575a266f1735a216004f5df4599b4a2b3211291a5f7f4231431a5ef53ee8f5b5cc4c3196165b54c578b","ssdeep":"384:Hxz2tgneQawzQRuNZkswnkG/nFchT5Cg2igd/ZID5NuhA+lZ/1chptLx757krDZD:Z2tNQUuNZIn2PXg2NutL+t757krDZfUa","tlshash":"61a275837dd5b4691266e471d03f6406e32949449c0ce0ecae7feaa0bcbdc494366f76","first_seen":"2026-09-16T00:25:03.428775Z","last_seen":"2026-10-16T07:23:42.084712Z","times_seen":5939,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/2025/09/Apple.svg","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.178Z","timestamp":1792117938178,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Apple.svg HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 23 Sep 2025 21:08:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 849\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1772,"size_decoded":1224,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b8edb8bfeb06ac69b6d50b68ea1028ac","sha1":"a7494df0921523e404933f06fc2c18ade6f3f9a1","sha256":"62480f7344e0a56a045ea0abad0f85b388136ce0cd07fee8b2f70a6f11797ccf","sha512":"e5706b81dfdbac8345333155ee4c75265f16f2c7edfd5767d4512eabfda376c1b126768a1bd86e5a850b8d0289d493d69145e908ce27deeb8a4145abfaeb8e82","ssdeep":"","tlshash":"7d3194a2aac89574d10bcba5b97c344ac0bd39cf62cb89acec815c8b2c024d3033e131","first_seen":"2026-04-13T06:43:13.175679Z","last_seen":"2026-10-16T02:35:36.344101Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor-pro/assets/js/form.ae7f04a9f3cbc167835c.bundle.min.js","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:24.167Z","timestamp":1792117944167,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/form.ae7f04a9f3cbc167835c.bundle.min.js HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Sep 2025 11:30:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4930\r\ndate: Fri, 16 Oct 2026 02:32:24 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":19656,"size_decoded":5229,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19612)","md5":"48dcdb3850003a0e4c1c6378a697f6a8","sha1":"ea6937a4bd3653d1c56fb3aa25102de27eb877bb","sha256":"18b15fe107fb901d7161a13586e2d10854d927b3121290c358b868b2ee39468f","sha512":"46694e6c880d105faaf237330a22bbf3930e62ae33097f98f8e3a5e5a03379eb97b0d72ea30002c11f81e324fe62b9522f860c2b5345049159cc1da6032a76d6","ssdeep":"384:ljfucUQ8HOfXXtaij86dYmpbaX0QY+aEeYWWhdNMCHr5w//sjKHqXt58sbu8sUZy:ljfucUQ8HOfXXtaij86dYmJaX0b+aEeP","tlshash":"669272a53061688b4a9e24bab493009cb70335b9ba86704eb5fd48ef9774dc1733537b","first_seen":"2024-12-23T17:17:24.992934Z","last_seen":"2026-10-16T02:35:36.345503Z","times_seen":263,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.479Z","timestamp":1792117937479,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 23 Apr 2023 15:22:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4248\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16471,"size_decoded":4619,"mime_type":"text/css","magic":"ASCII text, with very long lines (16214)","md5":"a2431bc290cf34e330e11ec4cfce1247","sha1":"32a53342901fef5f4f4dbb26a555e730f84437a4","sha256":"c57e64fcb72bddafa9c38de574441c3e69ac6c961df96b0cad34da83658bd196","sha512":"87aef045472db25020faead697ec02813ba38d4e313caf437b4ca5cadbb7a7495805ac0b74e5de60cd84ccecab290b76d003eb1fadfcdaa70e650a597658ada9","ssdeep":"192:IbgmUJbiKneTT4bHZ+SKbnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:IdUbeTMbHZ+Vnh2AVfHfA4XYz","tlshash":"fa7234681340282753274f374b71cbb9d9b444d24b93896e91c0ee88d7b6cbd236f6e9","first_seen":"2023-04-05T10:48:11Z","last_seen":"2026-10-16T07:23:38.323782Z","times_seen":153268,"resource_available":true,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/2025/10/WhatsApp-Image-2024-02-17-at-14.08.35-818x1536-1.webp","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.228Z","timestamp":1792117938228,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/WhatsApp-Image-2024-02-17-at-14.08.35-818x1536-1.webp HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:18 GMT\r\ncontent-type: image/webp\r\nlast-modified: Fri, 03 Oct 2025 11:01:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 100640\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":100640,"size_decoded":100977,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 818x1536, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bd1a5f1567a11a7ad2e463bac20e80b2","sha1":"8c6cc292d0dca0abb8f60f9d45f74024acfe1806","sha256":"f2a6f2b30b10c0cd3ebadf71f0f30d1ea78dadb31f5ec5b7a0e185c6936c2fdc","sha512":"a9206c5b18a6ab735e97473dadce78db1008c486ad40259d4afe50a92cb32afd5326c2e216d2e0ed52c87d8de43f7329d19022d49f4884fdef2ce64f90681009","ssdeep":"3072:ygmf4zaL3bFTyz757AXEFGtkJWaYJK5lRG/apC:1mf/1TsN7AUFumWaVRq0C","tlshash":"c5a312c640ba9d06f3e46416e8ce94eff837a03b76bb23a06e42b8f341d475211472d6","first_seen":"2026-05-30T19:50:15.113621Z","last_seen":"2026-10-16T02:35:36.347523Z","times_seen":3,"resource_available":false,"data":null}},"time_used":4711,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2529,"receive":2182,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/karla/v33/qkBbXvYC6trAT7RVLtyU4LZOsAU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.820Z","timestamp":1792117938820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/karla/v33/qkBbXvYC6trAT7RVLtyU4LZOsAU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nordiciptvplay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 19:43:15 GMT\r\nexpires: Tue, 12 Oct 2027 19:43:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 283743\r\nlast-modified: Wed, 10 Sep 2025 16:45:33 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32236,"size_decoded":33049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32236, version 1.0","md5":"460580ff5d5f9daad7aebcd7203507bc","sha1":"d005e16fd29071beec3d948aaacfa2da74526fe0","sha256":"e3483281fbf916fd2549365cb4ba48a389ce8dc1fb74fc766fb0623ffd0473bc","sha512":"1fa713a68410646252d6a1567fe325baf0b5a74294dd136121726079829255d82f82404d15d86866f120e94715a7f1cc909216bbbd9f6d7dc34cde512a92d842","ssdeep":"768:mMZ+9ps2ddJm9wj26zI5fIVNpUnhkEob2y:mM5YPzeaNpQhpol","tlshash":"7ce2f076c16155f4c4aa80408f677390bba7906ac46a9f254307e0e3debf6de3860787","first_seen":"2025-09-12T17:16:52.812006Z","last_seen":"2026-10-16T05:48:05.493284Z","times_seen":3107,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":27,"dns":0,"connect":43,"send":0,"wait":26,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=3.24.3","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.522Z","timestamp":1792117937522,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=3.24.3 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:25:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 22 Dec 2025 17:25:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 928\r\ndate: Fri, 16 Oct 2026 02:25:13 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":10255,"size_decoded":1298,"mime_type":"text/css","magic":"ASCII text, with very long lines (10255), with no line terminators","md5":"1c6df716953f870be76c3e88a69a326f","sha1":"55001bbb898eb7636eabd0418275a9f5aa96ac51","sha256":"1b34d4c7324321e36db5d35f05bb011238a1326f89058a4399d028d1f6c47dd5","sha512":"d2cb3f58b7f5b83fac1744e81367e6ef4e350a073aee634b85a2ad87b4676cb78561db329bb4c9da20617a1be770b0d399ca731d0dc6792fd1f37e2ca116432d","ssdeep":"192:eKTrGZCLG+tlR3080ur1R6gxrcazf7fneLG6AHRJSJ/JwJp+XuknI0:eyv0","tlshash":"a52283917d83814e1aff651b141b2a4ca1c9c4dee8b6ecd6e866130782ffec53772528","first_seen":"2025-12-13T14:03:51.781572Z","last_seen":"2026-10-16T07:23:36.537914Z","times_seen":67661,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/js/chunks/image-carousel.min.js?ver=4.3.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:23.977Z","timestamp":1792117943977,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/chunks/image-carousel.min.js?ver=4.3.5 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 01 Sep 2026 15:47:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 499\r\ndate: Fri, 16 Oct 2026 02:32:24 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1002,"size_decoded":797,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1002), with no line terminators","md5":"c6ad347735bc86c48fd49926e502d3c8","sha1":"9bc4f097a23741e71c7e91caf4b6c889f31466ce","sha256":"ef7af3233638831fee4085f43f2c9f733f5fc9c505694f6d961ba57cab260891","sha512":"967267e33209a6f97a3666bb09cd4cd1a5d0e8f1493dd2a2a86d10e854a0c3c08ff82ae9b51d489d5c3f8ef11bf9b8ddeaa1d4c8273f64052ad8afad520a60e4","ssdeep":"","tlshash":"3711259539a4f4f345836297e53a1849f71c1c7e42287094abf789e2768104311d4fab","first_seen":"2026-09-22T07:38:49.771707Z","last_seen":"2026-10-16T06:57:58.068958Z","times_seen":745,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/elementor/css/post-495.css?ver=1791947066","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.517Z","timestamp":1792117937517,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-495.css?ver=1791947066 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 Oct 2026 03:04:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1064\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":9931,"size_decoded":1435,"mime_type":"text/css","magic":"ASCII text, with very long lines (9931), with no line terminators","md5":"c45ca6df40e6d921a0cc59a83182a08b","sha1":"e876074d904f5a923e61d099008e2798503a3702","sha256":"39da80474d49cead81845ee32a7db3f76518d2207a44f6eca511f54c38ce8889","sha512":"2fad873d444b7e53649f122e75c6bf3f3926ba8528e53ec75be0e23b841165a583002744d9c48cef83dec8a9859691ee76ce2911bdbd728caab63994a040f8a6","ssdeep":"192:V0aX/iduZCwFekeKeseJeeeTemeOaeZeH7eR+Q0idu+jR/ns2hySeOaeYMgVWeOm:yNbV4PqXCISpaCpgV/ZHetCJ","tlshash":"9e22f3c63c47862d75bf310b1543e99c2128ccdee87faafaf4215213e179e6637a1914","first_seen":"2026-10-16T02:35:36.350717Z","last_seen":"2026-10-16T02:35:36.350717Z","times_seen":1,"resource_available":true,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.949Z","timestamp":1792117937949,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 28 Aug 2023 21:14:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 29744\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":87553,"size_decoded":30044,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-16T07:26:34.289773Z","times_seen":1112048,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/2025/10/06-cosddspy.webp","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.197Z","timestamp":1792117938197,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/06-cosddspy.webp HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:18 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 02 Oct 2025 12:07:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 772306\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":772306,"size_decoded":772643,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"245400c454b6f886b5c91673dd75a784","sha1":"e15a7e00da99148584b63e006a27093cc8390c59","sha256":"b169d127229da73aa1a3dfa6196abd35a75ef7e2229f54b404b0839d3b2cb449","sha512":"8c027133f4ead91bf8a11ab65814bd5454bf68740d08cbd0cf069e9ec012885554568a5e75312541f179bfd62f14a5dc6398d9b449e29cf7a4f065d4a735ace7","ssdeep":"12288:LuC1qISLSa9fJh0pqQrQd8N4ILWFP20miAHL2ElpMaNUD5Bptx7q1c/YmjXiR5uS:ZXSLSa9fH3yQdu4ILc3mL2KpM95rtx7Q","tlshash":"dcf433142816eef4c75abc33b4e250c2b540def4afaf268d9967f89a07438778a13457","first_seen":"2026-10-16T02:35:36.353396Z","last_seen":"2026-10-16T02:35:36.353396Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5471,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1373,"receive":4098,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/2025/10/WhatsApp-Image-2024-08-14-at-10.11.48-814x1536-1.webp","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.243Z","timestamp":1792117938243,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/WhatsApp-Image-2024-08-14-at-10.11.48-814x1536-1.webp HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:18 GMT\r\ncontent-type: image/webp\r\nlast-modified: Fri, 03 Oct 2025 11:01:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 118250\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":118250,"size_decoded":118587,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 814x1536, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d6d5fce7d0d3d929a8099e08dfa4ec54","sha1":"87a9777b6c462cdbb1473bddca7f55509121d6ef","sha256":"c15069041718b9400891ef041a0d5e819938e1cee3469ca269c6385d1f50a059","sha512":"85fc7666bf61791121e36cacaa5d5d294c9575e5cc7c35fde16d143bd1cc059b54d859d7a4765f876583ba345faa6c047018ccaafe60e37edce1ac09e363acb0","ssdeep":"3072:IF3AaP20k5UL+8tWghqjWQAsiHRvzb+K+:IlZOUq8IghqCQAsiHJbe","tlshash":"8fc312f225610bd8ed62859804bce72d76e148d33540562b6befecd034b1adef89f852","first_seen":"2026-05-30T19:50:15.07297Z","last_seen":"2026-10-16T02:35:36.354797Z","times_seen":3,"resource_available":false,"data":null}},"time_used":4905,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2686,"receive":2219,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-includes/js/wp-emoji-release.min.js?ver=6.8.10","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:23.599Z","timestamp":1792117943599,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.8.10 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 18 Jun 2025 05:53:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4769\r\ndate: Fri, 16 Oct 2026 02:32:23 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":19251,"size_decoded":5068,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (16277)","md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-10-16T07:26:17.640096Z","times_seen":215688,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sell.app/style-DMintRX0.mjs","fqdn":"cdn.sell.app","domain":"sell.app","tld":"app"},"ip":{"addr":"172.66.45.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:23.673Z","timestamp":1792117943673,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.sell.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Oct 2026 10:00:21 GMT","end":"Sun, 10 Jan 2027 11:00:18 GMT"},"fingerprint":{"sha1":"0D:11:4E:08:1C:3C:F9:0A:AB:AF:A4:B9:B1:6B:B0:A6:F7:51:3E:11","sha256":"64:3A:02:19:6C:6E:40:52:F6:97:41:90:B8:BB:EE:EE:9D:86:C6:53:E7:AE:6E:37:F2:D0:40:93:68:43:84:B3"}}},"request":{"raw":"GET /style-DMintRX0.mjs HTTP/1.1\r\nHost: cdn.sell.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.sell.app/embed/script.js\r\nOrigin: https://nordiciptvplay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 16 Oct 2026 02:32:23 GMT\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZLQ3XVlB102BMPKjdo%2Ff9d0ZxNNQ6xZPg9NxWQN6IXRM9WdG2XS3izAjsL0285tj5OPLosrN%2B8tMRKDFDCIT3B9N9ScdGh7T5FIP5OHiS%2Bp%2F0ug1xlyLDZD9ebHwMMc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6e3d5701caefbf8ba62d7c723c18244f\"\r\ncf-ray: a4b3a71bf88bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27996,"size_decoded":5813,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (27968)","md5":"d1316a88adc8d4dc9e0dcf9b44492faa","sha1":"518b2b39042f2824e981954eb1342ad611367d78","sha256":"665a37243ef0b0aec8247e9f427c0dd9d0f01163e70d76e53b47a371866d95f0","sha512":"dddc94f1c0fa9f64dcf7f80db7e0db0a00937e855244b8f211e36daee6fd4dd0eda1832dc559ad668522568436f67ba3d17982c571b4f2d64fe769596a285e82","ssdeep":"192:hP1XFp6PD2mzzCmdF5xui8qPQOPqRQ0BIy+Hq77fuVrTX+sXtjnX4jweJljIGV8R:ZKqffC4F8fIVgj","tlshash":"b8c233b6d1327238191fba1aab68931ed317f703ed12d5e8b20251158ac77f54ba0e4f","first_seen":"2026-01-07T15:07:43.611716Z","last_seen":"2026-10-16T02:35:36.357516Z","times_seen":11,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.css?ver=5.15.3","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.530Z","timestamp":1792117937530,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.css?ver=5.15.3 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Feb 2024 16:51:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 12526\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":72184,"size_decoded":12898,"mime_type":"text/css","magic":"ASCII text","md5":"aae648ec410260f859ac89e58a8372c1","sha1":"f7320458aadcbaa2ed94c43c8d7ddb9361d0b106","sha256":"d417b6ed49cb6ae3dfe2b0bab5d865472052cd0286a9478c74cbb09a02a56d0d","sha512":"88c7cfdc35aa5e4ecbd8023b966758f30aa7d1f5367820a1443922988c06a4a5a96fc500fab19985a090cbc85c9e2e5db63470e50fbc93f5596fee59346c3b73","ssdeep":"768:0bUiiiukQWIsjoQCSsncTpsTO3DNnYGmLN0yPburmvXnH4:0giii1IohCSicdsa3DNnYGeZPK4XY","tlshash":"d963dcfee1ff10944311e4812643e2e4f329b66cec8a4c98d2a67d9df1c165ca186bdd","first_seen":"2024-05-17T06:44:22Z","last_seen":"2026-10-16T07:30:51.382576Z","times_seen":43588,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/cookieadmin/assets/js/consent.js?ver=1.2.6","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.946Z","timestamp":1792117937946,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/cookieadmin/assets/js/consent.js?ver=1.2.6 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 12 Oct 2026 17:37:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 5536\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":22128,"size_decoded":5835,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (638)","md5":"ebbf107902e370fb529a413ddcd4fa9c","sha1":"37c37bf98c74945a2bc99d16149cb735b8cc1cfd","sha256":"73c4602cc619d15b345133418c37982dd083a895788c168461cbad8c5839c449","sha512":"584f93256bb1a1ac306c07e52ba1587559b0c2f36e37538203b4e4507a6d3169ff7bf3ebac4d3d392445ba53ceb52ad83095b0add8dfbb488a2a1ab2928bff54","ssdeep":"384:tIsxr+JyNy291yIR/iF/iiO45iJfiT3iqJklrzKCNXd4/iifie2ij8ivfihfij39:t7rFAIR6F6R4AJaTyqJklrzKCNXd46iv","tlshash":"0ea210a4fedd962c00e512e9e56a558db42c5032f841a89e3f3cb4f48ae0fd78cd5a47","first_seen":"2026-10-13T05:17:41.120596Z","last_seen":"2026-10-16T02:35:36.364376Z","times_seen":6,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/2025/09/xBox.svg","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.195Z","timestamp":1792117938195,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/xBox.svg HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 23 Sep 2025 21:08:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1089\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2482,"size_decoded":1465,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4099c0739b482f6c2cf8bd3a89244e5e","sha1":"2655e95fd64d168148f892927c78f7294f5e4931","sha256":"5f0e068f659f42b8cd4e5224f3246d1d428de7d1d68f82fe421eafcb5b500e5d","sha512":"0064fcf01a5a0da9506aae95c64bd100f322d74e04987720f01b6338c4db946b7b44e10e2a4c9c874fb390686ebe989d0bd17654c95937054e6405f0aaab5246","ssdeep":"","tlshash":"8f5144c28b238194e500c9f67dfb3944cc2b32e9b56564e4cb715e07d91d0fc48ad9e2","first_seen":"2026-04-13T06:43:13.260382Z","last_seen":"2026-10-16T02:35:36.365186Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=4.3.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.262Z","timestamp":1792117938262,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=4.3.5 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 01 Sep 2026 15:47:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 15971\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":53086,"size_decoded":16271,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29778)","md5":"064158d77b47175f4fa06137e18e6384","sha1":"c9e498e2ed37b6d086b53191b26fe5b878edbded","sha256":"2636846470306c226883fb4ede46a96d71a54454d6c8b1bd9e26e6baf72db965","sha512":"e7e6f870505ca8b91eb3ee6a8ccaa1c1705f1a0f71d6813cbda20455a7ec400ed70691ffa176aca644a81b4783f009427f39cb154d132c290c0f12577e7992b9","ssdeep":"1536:z2GruANhDXVyVaQDRSSHQ7dr3kOYdA6i9CSj8S/9q4mq4cR8ULDp8lo19iNTWlnq:zF6ANpFM69b1O","tlshash":"6d33c9827b91b867429ed076e02f5009f3264988a80da05cbe7edde1b8f9c461376f75","first_seen":"2026-09-16T00:25:03.444898Z","last_seen":"2026-10-16T07:30:51.461179Z","times_seen":5941,"resource_available":true,"data":null}},"time_used":2668,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2668,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/karla/v33/qkBbXvYC6trAT7RVLtyU4LZOsAU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:19.065Z","timestamp":1792117939065,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/karla/v33/qkBbXvYC6trAT7RVLtyU4LZOsAU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nordiciptvplay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 19:43:15 GMT\r\nexpires: Tue, 12 Oct 2027 19:43:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 283744\r\nlast-modified: Wed, 10 Sep 2025 16:45:33 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32236,"size_decoded":33049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32236, version 1.0","md5":"460580ff5d5f9daad7aebcd7203507bc","sha1":"d005e16fd29071beec3d948aaacfa2da74526fe0","sha256":"e3483281fbf916fd2549365cb4ba48a389ce8dc1fb74fc766fb0623ffd0473bc","sha512":"1fa713a68410646252d6a1567fe325baf0b5a74294dd136121726079829255d82f82404d15d86866f120e94715a7f1cc909216bbbd9f6d7dc34cde512a92d842","ssdeep":"768:mMZ+9ps2ddJm9wj26zI5fIVNpUnhkEob2y:mM5YPzeaNpQhpol","tlshash":"7ce2f076c16155f4c4aa80408f677390bba7906ac46a9f254307e0e3debf6de3860787","first_seen":"2025-09-12T17:16:52.812006Z","last_seen":"2026-10-16T05:48:05.493284Z","times_seen":3107,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=4.3.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.439Z","timestamp":1792117937439,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=4.3.5 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 23 Apr 2023 15:22:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 12380\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":59344,"size_decoded":12752,"mime_type":"text/css","magic":"ASCII text, with very long lines (59158)","md5":"74bab4578692993514e7f882cc15c218","sha1":"b6293bcfd851f963edbe859498570c4c0c7eaae4","sha256":"d87ddf917b7a1449ab45e2b8e3c98354629bdd65b6659c37e6023bbea1ce1386","sha512":"8810579bc7d6f74fa7b8b7122a56e6acf70b6b4393f76c4ed4122c67ecb00d6642beab1681c715de0168441bf4cfef1d2c9832007221477e5565cda833f808d7","ssdeep":"768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzl:0E0PxXE4YXJgndFTfy9lt5B","tlshash":"0a43fbb8e54c01c9b731c44bef82b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-10-16T07:23:39.914647Z","times_seen":122774,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/elementor/css/post-414.css?ver=1791947066","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.510Z","timestamp":1792117937510,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-414.css?ver=1791947066 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 Oct 2026 03:04:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1958\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":21657,"size_decoded":2329,"mime_type":"text/css","magic":"ASCII text, with very long lines (21657), with no line terminators","md5":"c767fe7d5cdf786364738b5a3ad7529b","sha1":"03fe0099b7cfca0df3333bf98637acee6584e115","sha256":"e7e72112c2f0c0e26496a0231d0853870fb730c3720aee32d9a66f224164e3b2","sha512":"27e7ed1879e5bf09c3a07f92d91f7fe781cd34f72b6cca9b7506286b44142a43f5b1aec88baa526ccead6ca243b07def972f70f920e3ebd883cecf017c7f1c02","ssdeep":"192:pidu27mu+h5cOVMP51UpJCQLNeXTWq3QOsJal5dqBg5QbZ1eXTW1OWRdMP/NxLv8:JNvmT0gmy+PZ","tlshash":"89a2c2817ce7b02975bfa11f80af915e5b281dc8d62db1a2e8a2811bff35e4077d4d12","first_seen":"2026-10-16T02:35:36.368239Z","last_seen":"2026-10-16T02:35:36.368239Z","times_seen":1,"resource_available":true,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/2026/02/final_destination_bloodlines_ver7.jpg","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.203Z","timestamp":1792117938203,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/final_destination_bloodlines_ver7.jpg HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 28 Feb 2026 23:46:45 GMT\r\naccept-ranges: bytes\r\ncontent-length: 170900\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":170900,"size_decoded":171237,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 509x755, components 3","md5":"b1a61b74178af947585833e3788f8bd4","sha1":"6f1af332c008eb096a55151bd0e56473599a8de0","sha256":"40f9cb202fc8cc230ee9d464a635627a4fb8f5f3eb2d08751f954073d448f61a","sha512":"f9ddf378addb13304886a67b86eb1bc154a4ddb7dbf214b4166159e2d8d43f3a25782c793ad98362f8a12dfa45cdc6f71541aafcb5d6e21082960aef3707749d","ssdeep":"3072:zJ9k0CG5fUWWgj+wF3QSnS7aq7W+RJJrFxpbakJTDQsXb//HL7xbDCOd7pX6HWkT:zzCng2Sn4JXxpWkJTksXLPL7Rd7pX6HF","tlshash":"12f32372441b354e29742e66f8e592d2e0abbd3cb6106f605d3761da7c2d0ee2c1353b","first_seen":"2026-10-16T02:35:36.370285Z","last_seen":"2026-10-16T02:35:36.370285Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1367,"receive":1881,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.289Z","timestamp":1792117938289,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 30 Sep 2024 09:11:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1571\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4776,"size_decoded":1870,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4741)","md5":"c6fddbb6be69793478de26fc245b2acf","sha1":"a136ebf5054fdc19729b3592005fe0fefec4bb4c","sha256":"9a1e0d38b691f1d22a92cff65ec0439b428170ac39a4493c7ecb06d5585f56a3","sha512":"8a766304caa9c888cfcab64eabab906905965e7fbcfc4f79c74ab122b892456abad215d0883df17023a16a18ba15a6a4b3d0fa5345cab7173d778f725b827c33","ssdeep":"96:vmK40IdSs6c7DE/3sc/YrEBnUBPwKxbqe/Ds91sBYt1Em4kCofWQRemN:OK40IdS/cHg3NZBnUJbqe/DeGYtu7kC6","tlshash":"b4a161c47482b870a2237457e0bb1485757eabb5743990c5a24dd8a02db3dcfe0a7a3e","first_seen":"2024-11-13T05:08:51.627546Z","last_seen":"2026-10-16T07:26:17.654528Z","times_seen":234735,"resource_available":true,"data":null}},"time_used":2467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2467,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/jeg-elementor-kit/assets/js/elements/nav-menu.js?ver=3.2.21","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.321Z","timestamp":1792117938321,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/jeg-elementor-kit/assets/js/elements/nav-menu.js?ver=3.2.21 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 08 Oct 2026 17:41:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1475\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4700,"size_decoded":1774,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4700), with no line terminators","md5":"5341ff00a33a736421c8b32eb149f841","sha1":"66428885e8cd1b759c8ba411129ec007fdd08ccf","sha256":"12b8738e85d5e3d66e77f00e4f2ae8c5b6a07212c6c02e27c47a692c36ce865d","sha512":"b6f4e224873b5b2fc471c2b3d5d735003692698aa1aeac86186e66953be8a925def21e3220347655c6ed454dd539ac73f41c765514e01068884b8039c654f64f","ssdeep":"96:14+MCTe/dBnAX7IyWEn6v70c7ESJTH0cTHYSfV6hoobqAPV6oA55Oonodzc+x/8Z:wdB+7Iy96Dvd5HvHRfV6G2qAPV6oA555","tlshash":"4fa15156b0e470f911bf609e602b60293767092ea109a04672b8c0ba7e76c8533f5b3a","first_seen":"2026-10-03T12:03:00.632928Z","last_seen":"2026-10-16T02:35:36.372409Z","times_seen":12,"resource_available":true,"data":null}},"time_used":2616,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2616,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.26.2","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.336Z","timestamp":1792117938336,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.26.2 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Sep 2025 11:30:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 10180\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":44624,"size_decoded":10480,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (44580)","md5":"79a591a01877f6c85e4da1c5940fd9db","sha1":"debff31bb6520e43d3e884d1ce18aabd123c8aec","sha256":"e7b19e12a9606bdacfc7e4fcf230aa6e23ba5ea25be54136f717516fe698a93e","sha512":"dbf6551b0bf09a1192d4fe1db528e083f51de37be6ea3c478af5a3cb048973fb0cf4b6d3bd2a6c14d107b173474c879099fd7e826683a9cad6370fe6d62d603e","ssdeep":"768:5/bt9JJD1+WE9A5yLce/I9d0dbdTdGdadWdDdILdUd1dvd6dfdMdxdndTdVdFg71:Vt5D1+WE9A5yLcWI9mBtIoERuWfRMBKc","tlshash":"d113a511716aca6945cf84abf463164fb7229c9cf413f0e67afc8d82b464e87a394731","first_seen":"2024-12-23T11:26:33.69751Z","last_seen":"2026-10-16T02:35:36.373155Z","times_seen":1331,"resource_available":true,"data":null}},"time_used":2602,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2602,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/css/widget-spacer.min.css?ver=4.3.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.470Z","timestamp":1792117937470,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-spacer.min.css?ver=4.3.5 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Oct 2025 16:51:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 287\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1793,"size_decoded":657,"mime_type":"text/css","magic":"ASCII text, with very long lines (1793), with no line terminators","md5":"c329a1f8486b82d9b9c7cb4d7060f346","sha1":"85b874b1c09c4f163738d439cacd53e6141f4f2b","sha256":"808a659eb4e85607c6efe022bff149c3076853c5570a322bd35e5e8cb9458904","sha512":"414974a35c9d401df85422ca92e886a3e0b57c6cd071023dd97d2987157fc9976d777d7b44c0c8d4a8caac81b0c1b862828bdaa67e5b05345894964a1dbe81a4","ssdeep":"","tlshash":"3731f650bd07662c787fa60f8413129c658494dee581ccc6dba1f60aa2fcde33336935","first_seen":"2025-04-08T12:29:44.439106Z","last_seen":"2026-10-16T07:30:51.449051Z","times_seen":47594,"resource_available":true,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sell.app/embed/script.js","fqdn":"cdn.sell.app","domain":"sell.app","tld":"app"},"ip":{"addr":"172.66.45.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.976Z","timestamp":1792117937976,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.sell.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Oct 2026 10:00:21 GMT","end":"Sun, 10 Jan 2027 11:00:18 GMT"},"fingerprint":{"sha1":"0D:11:4E:08:1C:3C:F9:0A:AB:AF:A4:B9:B1:6B:B0:A6:F7:51:3E:11","sha256":"64:3A:02:19:6C:6E:40:52:F6:97:41:90:B8:BB:EE:EE:9D:86:C6:53:E7:AE:6E:37:F2:D0:40:93:68:43:84:B3"}}},"request":{"raw":"GET /embed/script.js HTTP/1.1\r\nHost: cdn.sell.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://nordiciptvplay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HI2b%2FP6b0PPQsangasY6TbMO7eKVP0QRT6RHOngqcwkVYyiFv5E80u66NNe1iH4esgReanfguWTKQLQFhQQORFvL2Q1pXiJNBxpqdhzR4U7L%2F6jdWQYtddc30Lp%2B4co%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"8403fc37c7757ddea79065008fdc7726\"\r\ncf-ray: a4b3a6faebdec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1381734,"size_decoded":454667,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (650)","md5":"a726ed1d9b451247bd815d8ccd79bf99","sha1":"acd829a8588878a85f4be207852c9976b4af9875","sha256":"0198a30b1feb18c17bc066906aec4e523165385e3b94c582797183df25172192","sha512":"3d89ec582f7552690e789f25d7964a920b6649079b5635e352b36e7570cb941ee271af26d76b894021002e6a75ede214dab0eb44046e4b99728b97e5e7de348e","ssdeep":"24576:0CxEhU6jIUBdapA92uzp1djSwE4PUjjwxFEYxSXgRlvM45OR:0CxEhU6jIadapA92uzp1djSwE4PUjjwm","tlshash":"6e25d514b6f224314253e0782d2fdd4ab229560f5a99fc987b9c52a41f4c83da3f7b9c","first_seen":"2026-10-16T02:35:36.376093Z","last_seen":"2026-10-16T02:35:36.376093Z","times_seen":1,"resource_available":true,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":379,"connect":29,"send":0,"wait":64,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/2025/09/Boitier-IPTV.svg","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.181Z","timestamp":1792117938181,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Boitier-IPTV.svg HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 23 Sep 2025 21:08:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2488\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":9354,"size_decoded":2864,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a47a935ae29d1495670ccd24d46a962c","sha1":"c951631189b8f1121848e6d0ae4628c821367e9c","sha256":"319f1c99a6404e95e375e0c5c62a90d265b90f3f826b95414c59586161762aa4","sha512":"473ac49832cc6e4d355d88aa9bfa7b7123f65dd68c8214d970d93eb7f930afdb83962f057b4b22a44b39ca59115929bfc139719d37097cc6e15c95419292e136","ssdeep":"192:Ws9InbrJL9/ZhdCsHMPLLOWeAK22B2sptAzwJ9KnR2y0VwlcmyP7A:UFx3sPLaUZwJ4","tlshash":"f61253db4a76def1974bcfc27561d8ac312470967927253ad1803da2dcb2db60b8d40a","first_seen":"2026-04-13T06:43:13.177876Z","last_seen":"2026-10-16T02:35:36.377544Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/2025/09/MAC-PC.svg","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.190Z","timestamp":1792117938190,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/MAC-PC.svg HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 23 Sep 2025 21:08:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1174\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3182,"size_decoded":1550,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cb323daeb5bb9fc5dceaf9d252c8f900","sha1":"5bf72d432dd7e5f41c8db5caccb9391a4005ccde","sha256":"b5209444372e6b7d2430b7af352ad70b8481b934d4af15a5543ea863558c7551","sha512":"5db09e3cc91c526c24757c803078a86ab92e7fcb06442b1917b99f01b7f93b19b719ac1c8133fbcb483c281d2485d51b87c23d667117f042158fb6bc4bb6af9e","ssdeep":"","tlshash":"dc61c9c14adde3fcdb0b438c91a2f819a43634c5706391e449e83a6dee26fdd856d512","first_seen":"2026-04-13T06:43:13.211301Z","last_seen":"2026-10-16T02:35:36.379409Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/js/chunks/section-stretched-section.min.js?ver=4.3.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:23.699Z","timestamp":1792117943699,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/chunks/section-stretched-section.min.js?ver=4.3.5 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 01 Sep 2026 15:47:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 506\r\ndate: Fri, 16 Oct 2026 02:32:23 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1057,"size_decoded":804,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1057), with no line terminators","md5":"8218a1d889cee8ed6094f392bdb7fc64","sha1":"ddc353bb95b2d89f6cfc8fc13ee32574f63b0561","sha256":"234201e19453b4a7ed9678ec3b2e8354f1d1c2a7b264c4f072b6a645b6d15499","sha512":"fc201da4a00c090622cd13c9d1be5f928e8b0384b730b5b0a4245d73a00c79969564429ddbed936226de456431ddd3599d00098302be550af7dffb2f9cf19cc2","ssdeep":"","tlshash":"a011e2777891b4e30187605bd7772489e3681cfd42387094afb985f97ea144290e17af","first_seen":"2026-09-22T07:38:49.763173Z","last_seen":"2026-10-16T07:04:48.171079Z","times_seen":3205,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/js/chunks/background-video.min.js?ver=4.3.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:23.702Z","timestamp":1792117943702,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/chunks/background-video.min.js?ver=4.3.5 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 01 Sep 2026 15:47:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 8041\r\ndate: Fri, 16 Oct 2026 02:32:23 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":24570,"size_decoded":8340,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24569), with no line terminators","md5":"b7626a0716115132216ad55f8b49e35b","sha1":"307b9ba77fbd7f172205d93a6cdb9f49d37b09ed","sha256":"4bafd11c752be817df7d0a1bf792465c6198e5d957700e64fb6263affb784f1f","sha512":"1f7e7e8f82052f0ab365e09886720fc24dbf1a3a4f64451527fe374d28891ff0188b8c941d16df8be97429a21a7fe99d0820ea53e1eb4f1bd419f6fa6cdc1bb7","ssdeep":"384:HstSPep7waQ3uowkPxw9mGpJwcCkMm1UjiVgd/ZID5Nuhav8R6nTFJ/NPxzW8Hsc:Mt/peuow+8xJXhHzVg2NuxwTFnxzW8Ht","tlshash":"dab2554739d1f8696266e4b1943f2505f3290548a80cd1acfa3feae06cfdc0612b6fb5","first_seen":"2026-09-16T00:25:03.430288Z","last_seen":"2026-10-16T07:23:38.61211Z","times_seen":5934,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=4.3.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.442Z","timestamp":1792117937442,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=4.3.5 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 23 Apr 2023 15:22:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3987\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":26702,"size_decoded":4358,"mime_type":"text/css","magic":"ASCII text, with very long lines (26516)","md5":"c55205bce667f5d812354fd1353e7389","sha1":"f22de0af271eba636a022c873c94fbcd81b4c89a","sha256":"c55902832fb84522d02ea1a60a30747403a140d8651fa748f13ba398b0c0df3a","sha512":"89a2e11075b7a7e64d8240ca062e3311f1fe69600c189ec8ee78ea0f78ca9db374bb1e0692e9aedaf8ee23bd58528bf6d0e20f977477daff073be57ee8e81bbd","ssdeep":"192:dP6RT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPbJVR8XD7mycP:0Ral4w0QK+PwK05eavpmgPPeXD7mycP","tlshash":"1ec20665930c60d3a3eef847ba0172a8277577999a864c54f30b7c9c8dc3a5772e8f18","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-10-16T07:23:38.753367Z","times_seen":97482,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Gruppo:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.934Z","timestamp":1792117937934,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css?family=Gruppo:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 16 Oct 2026 02:32:18 GMT\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":831,"size_decoded":1044,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"de8b60254bced30605fbdec62468cb31","sha1":"a633a025ca343ee79a77b12e8e37b5529208a9e2","sha256":"c779bce8af66f8baa0aa21ba8e538055868d58790fe8648e3c24db28ff07185e","sha512":"d1ae1bd215abd4882b55f6097f4c6b72d1c244e42218e374af1ad964bd01f4d7127121237d78f5bfb30699c0c5b42dccb4ed540756b4eeb1a769813d3583a292","ssdeep":"","tlshash":"0d01ce91087b9500dbc30dc212ce7e33fe0f6250a85999795efd2488acaad569393b1d","first_seen":"2026-10-05T18:30:47.991967Z","last_seen":"2026-10-16T02:35:36.386527Z","times_seen":4,"resource_available":true,"data":null}},"time_used":630,"timings":{"blocked":-1,"dns":309,"connect":19,"send":0,"wait":35,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/2026/02/superman_ver2.jpg","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.212Z","timestamp":1792117938212,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/superman_ver2.jpg HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 28 Feb 2026 23:46:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 100815\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":100815,"size_decoded":101152,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 509x755, components 3","md5":"d79bb879bd1d793e2d1d2cf2110d9d9e","sha1":"2e52717ffcb708f68bc4d2c3254d2cf24b13e88a","sha256":"85840f77f07341625dc703cf49a8cdbe6a8d99c2d831092e0ee1cbd40eda7b83","sha512":"c1b6a96a627a4698378224a8ebac59d32aef88b77434c13dccb6747e8a14785fa31d17a61845d61aa4e717aa2d41ac37e4adee0650d14103352f9de965c9e4a8","ssdeep":"1536:uHdNPkHja4L2cIfWyaqaapGZL8nZy+ByyRNHVRVtfLyAeC0ZGJT2T/j3fwvCynsQ:ubPkXq3WFacKMeVF1e9gJ4/j3fanJVZ","tlshash":"e6a302ee726a53a3e35d867468fa2a267fe4130d57385ce078ce52d1c6883608fce1d5","first_seen":"2026-10-16T02:35:36.389491Z","last_seen":"2026-10-16T02:35:36.389491Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3697,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1532,"receive":2165,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/css/widget-social-icons.min.css?ver=3.24.0","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.525Z","timestamp":1792117937525,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-social-icons.min.css?ver=3.24.0 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Oct 2025 16:51:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1039\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":5110,"size_decoded":1410,"mime_type":"text/css","magic":"ASCII text, with very long lines (5110), with no line terminators","md5":"d026a17938c5380cc610572fdda43f40","sha1":"2b5df61e56b7fe1dfb88f1707d4b017909b02a75","sha256":"91079644ee1e76145b30c207470b56866770b0564f0fbf1373ab8b11d94f8c9f","sha512":"00dd387f3726c15e71f2f7379c4fd3bdef41c2d81d73f22f3212991b4d18d4b663ae89906722fd9e188606c1061f3f8b5472deee2cd514680e64a29f8193cd66","ssdeep":"48:FDoWozmcbWsiYPt3U/vjfQIeyiZ8Fu2ifnFNZP1NsXUyG9eoL:5oz/WkBUHjfQL7aFu2if3Jf9HL","tlshash":"e5b17651be4f9586321f002a0993f309d05a12c5dc8c6f78f856b16e59b6fe43a73eb2","first_seen":"2025-02-28T14:24:31.329664Z","last_seen":"2026-10-16T07:23:41.978982Z","times_seen":92744,"resource_available":true,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/cookieadmin-pro/assets/js/consent.js?ver=1.1.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.944Z","timestamp":1792117937944,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/cookieadmin-pro/assets/js/consent.js?ver=1.1.5 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 03 Feb 2026 11:28:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 510\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1154,"size_decoded":808,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text","md5":"6c8c8099ca4f87f8900af97260cdd756","sha1":"4b61029ea20e7921605fa72ae7b0eed25bb3dfc3","sha256":"11458ef33ed4110701855f75c2191a4f80cbd592d295945d5fa390e859efeca3","sha512":"dceabff2a22918971c8323962b4ed02ca506ff3b7c25db82f931ec92a3152d49099fc022964971496e3edc91467f3d2ce5bd475a2c63c030f6583eddd6f5b6af","ssdeep":"","tlshash":"df21e1817eec495517e931f0c91ac4087069fc207985c86e9a2430ea5f95feedcd1b97","first_seen":"2026-02-14T03:52:07.674951Z","last_seen":"2026-10-16T02:35:36.392313Z","times_seen":267,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js?ver=8.4.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.266Z","timestamp":1792117938266,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js?ver=8.4.5 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 23 Apr 2023 15:22:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 38152\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":143709,"size_decoded":38452,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65279)","md5":"83e9b29f0086bba50d653f1cb8dedc3c","sha1":"f8f89387c9aca9d524bb638eae457d4659efca52","sha256":"2ac3af00c283c0b2ae6108fa83a2053e51274a2a812fb063916cbe19bc4f96b5","sha512":"c8018876ee96b4600ae32342ec6d21b452ad4109d605fb838f146b734de274ef5e37179567a2c67ec828dc1b673364637fc82e7dfe8f7adbb18e20555577160c","ssdeep":"3072:pJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/Yvr:pJLC4dkEUYnafpl9v8cIWybV4y+oGMMG","tlshash":"fce3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","first_seen":"2023-03-14T09:12:04Z","last_seen":"2026-10-16T07:26:06.742086Z","times_seen":114662,"resource_available":true,"data":null}},"time_used":3451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2670,"receive":781,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/metform/assets/libs/htm/htm.js?ver=4.3.2","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.294Z","timestamp":1792117938294,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/metform/assets/libs/htm/htm.js?ver=4.3.2 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 30 Aug 2026 14:30:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 770\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1933,"size_decoded":1068,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (543)","md5":"dd6a9a25acf85e7b2107d9b6fafc2334","sha1":"93158aeb0a403305759d03b62c3efca7c6d7915f","sha256":"5620a4aedbb462c87205657d5bec22013079576d7e1665190f1d90d7ebef593a","sha512":"7b3f5fcb563222464fafa79c0a66a59b300e5ebc82880ebe805cae8e6e1f004491c4307d133ba6e1ea65039a591eddf41489c66661f378939c44af93c5c4c2c3","ssdeep":"","tlshash":"24419ae293de2139e91fe0a15619845e60bc2c7831c4345e2e6d01c6c6858aa1f7df9f","first_seen":"2026-08-31T02:44:11.664083Z","last_seen":"2026-10-16T04:41:08.403298Z","times_seen":288,"resource_available":true,"data":null}},"time_used":2643,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2643,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/karla/v33/qkBbXvYC6trAT7RVLtyU4LZOsAU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:19.067Z","timestamp":1792117939067,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/karla/v33/qkBbXvYC6trAT7RVLtyU4LZOsAU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nordiciptvplay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 19:43:15 GMT\r\nexpires: Tue, 12 Oct 2027 19:43:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 283744\r\nlast-modified: Wed, 10 Sep 2025 16:45:33 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32236,"size_decoded":33049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32236, version 1.0","md5":"460580ff5d5f9daad7aebcd7203507bc","sha1":"d005e16fd29071beec3d948aaacfa2da74526fe0","sha256":"e3483281fbf916fd2549365cb4ba48a389ce8dc1fb74fc766fb0623ffd0473bc","sha512":"1fa713a68410646252d6a1567fe325baf0b5a74294dd136121726079829255d82f82404d15d86866f120e94715a7f1cc909216bbbd9f6d7dc34cde512a92d842","ssdeep":"768:mMZ+9ps2ddJm9wj26zI5fIVNpUnhkEob2y:mM5YPzeaNpQhpol","tlshash":"7ce2f076c16155f4c4aa80408f677390bba7906ac46a9f254307e0e3debf6de3860787","first_seen":"2025-09-12T17:16:52.812006Z","last_seen":"2026-10-16T05:48:05.493284Z","times_seen":3107,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/2025/09/Decoder-IPTV.svg","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.186Z","timestamp":1792117938186,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Decoder-IPTV.svg HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 23 Sep 2025 21:08:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3650\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16298,"size_decoded":4026,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9b8bf2656949f51e36216dd91f9d8dc1","sha1":"6cc2aa2103009dbb60eb7694394d3149b5bd8303","sha256":"84dd4f6daf2808089e6d043818b45cb547e7890558fa442cc85043b53cda79a4","sha512":"356a54cccecae14471fef501b248745761d64c861a76a3cd53ba90bdc37d2ce65b6a3a9c1897c9e3d21b88b1c24bc4ab389ff1b89632e0df30457b7d076cd586","ssdeep":"192:1YNYli4Duy58zQhThTuwpZxj6sxzbPuLKI8mACuyg0UHFV3BTD5fZy2Yyu/R9nFq:1lJ5KQhThTuwpZtZzbjlmGdV3gCWlRFU","tlshash":"927242a092b32bc5700ec2e8a5e67722df2f3fe4256157a4c7076dd26e1169312be4dc","first_seen":"2026-04-13T06:43:13.176835Z","last_seen":"2026-10-16T02:35:36.394867Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/2026/02/IPWATCH-IPTV-MOVIE-Alien-Romulus-1.webp","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.202Z","timestamp":1792117938202,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/IPWATCH-IPTV-MOVIE-Alien-Romulus-1.webp HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:18 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sat, 28 Feb 2026 23:46:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 53050\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":53050,"size_decoded":53386,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 540x810, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bfc66cf3f22d1cde03cc31c51023ded7","sha1":"b498bf7e04190ccf865d1b02c5685aeb669224b2","sha256":"43a16f9366a4be07179d699fae9bf0db4bbc4d4046b6c37ab377329f353d1260","sha512":"7ae8f9620fbc78d5ac0eed2a1d09bc98d5ceaa672aaf8804427244932c4ec00a091507138917370ab1212a1063ad444fe8ac1f6f565303b717d7ab3e43a6cff7","ssdeep":"1536:B8X674nAb31HoLWfwqAXeef2LoPNJJAYhr8rfHQfMvW6:Bua4Ar1HHe+ojj6rfHQfM9","tlshash":"483302921d30a4f925ec3903a2136b6fe931d8d24e99b7f588cf3c60109b59bc766a90","first_seen":"2026-10-16T02:35:36.396622Z","last_seen":"2026-10-16T02:35:36.396622Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1912,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1370,"receive":542,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/2026/02/dreadful.webp","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.220Z","timestamp":1792117938220,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/dreadful.webp HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:18 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sat, 28 Feb 2026 23:45:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 123944\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":123944,"size_decoded":124281,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"087f6ebbbd5bfefc44e08a83ecc74e3c","sha1":"0b85a033a27043ef84f71ef9410ea8d4e3f2a2ff","sha256":"242818a0a47262a9dabf06107e2b5b092257726f4da1bdb4fb8335546c63876d","sha512":"ae69fb152378001a51bea399ecd3a98a644049e2e25580b575341925092527ced18f5fd3121d342cc9ac24fc3a4ca93f39be60bf485c941387bc0db15d0a1f3a","ssdeep":"3072:O4X7PxuUPAjrE7/mJhgMACUEsRB43X45S1P5i:O4Vz4jrE7/rMAZEz4+4","tlshash":"50c302967324b6b6d8e18a3fee738f162744a05bfd85d204eed7a11074a47c32ed8290","first_seen":"2026-10-16T02:35:36.398013Z","last_seen":"2026-10-16T02:35:36.398013Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3099,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1559,"receive":1540,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-includes/js/dist/vendor/react.min.js?ver=18.3.1.1","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.268Z","timestamp":1792117938268,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-includes/js/dist/vendor/react.min.js?ver=18.3.1.1 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 22 Jul 2024 14:02:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4006\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10628,"size_decoded":4305,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10391)","md5":"3b97c19585abe23d7f55603028ab9b80","sha1":"9923fc707c0d8d6c27ed9cf24b0355fb94300fe6","sha256":"32b43e6f80b9818f13f0dbb16baa6b801f4b922babfcdcaa2554d986f5067ce6","sha512":"af3e1a4cdcba84ec1c2255dce52f8f53773127b5a70ca7b82bb861744c5f5afbf0e3036f7167b7ebb5b9b41e672be88de144d484c98c2da776551d05f02cf493","ssdeep":"192:NaXdVaxC6DY81/ZUeXopdQAxiJeHhK/0Sxrl1+MFK:NCkC6DYILUdQeLHkl1+MFK","tlshash":"f722c8d8b492b02557b37572013f601f733e656a3c0d49a4a261e9d97cf88adc117f4e","first_seen":"2024-11-13T06:33:24.997552Z","last_seen":"2026-10-16T06:50:23.843234Z","times_seen":34246,"resource_available":true,"data":null}},"time_used":2472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2472,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/uploads/elementor/css/post-193.css?ver=1791951336","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.257Z","timestamp":1792117938257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-193.css?ver=1791951336 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 Oct 2026 04:15:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1592\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":25476,"size_decoded":1963,"mime_type":"text/css","magic":"ASCII text, with very long lines (25476), with no line terminators","md5":"f50edbf16db665d66767ba2d402e5d7e","sha1":"ff5f9138059440709a9b5fa24eed506e0ec08264","sha256":"a4b8c501ebafb12d5e1d891028cfde014ca6b0b3874d1357ed548cdf38c48fde","sha512":"3dfb55c1dfdbf0a6e92dcd531d8c39ab84b0394a04d4b80838974c45b4029d4975965ebf4f2f9930f11239b18cd40274c2f498b07d3a1c728bcb332efc7203f5","ssdeep":"768:WL1U6UHU5MwAEI6h8QJNwAyAdwA2gwA6wS:xyhb8","tlshash":"fab2cdd23d43426cb23f205f9513ab9c21289ccfe57e6ac7f8111613f47aea1b790a59","first_seen":"2026-10-16T02:35:36.400484Z","last_seen":"2026-10-16T02:35:36.400484Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2668,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2668,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-includes/js/dist/escape-html.min.js?ver=6561a406d2d232a6fbd2","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:18.273Z","timestamp":1792117938273,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-includes/js/dist/escape-html.min.js?ver=6561a406d2d232a6fbd2 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 31 Jan 2024 17:59:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 476\r\ndate: Fri, 16 Oct 2026 02:32:18 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1000,"size_decoded":774,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (965)","md5":"aef7a048c0e0677cbab0efeefb9dbcc6","sha1":"7c166985c69f2915f8abda5fc88a387db12a8788","sha256":"037171f4a3a999572ccd4332d70596ae631a893eadf47539a7ea530ce884e90d","sha512":"40bbe86f4a0cecec0d8dc8f48f5894fb97c7d294afa55fa2bad966b6b56b4554119492b4c9c2d98b6fc55c89bdaf282c81785cb3fbd6129193d6ae021a289867","ssdeep":"","tlshash":"db11029670e2f998331a5191883e2087f33cdaa012ada1f0f208e0a1397047a2339d2e","first_seen":"2024-04-05T11:13:46Z","last_seen":"2026-10-16T03:11:29.676403Z","times_seen":29322,"resource_available":true,"data":null}},"time_used":2471,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2471,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nordiciptvplay.com/wp-content/plugins/elementor/assets/css/widget-icon-box.min.css?ver=4.3.5","fqdn":"nordiciptvplay.com","domain":"nordiciptvplay.com","tld":"com"},"ip":{"addr":"66.29.146.193","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nordiciptvplay.com/","date":"2026-10-16T02:32:17.489Z","timestamp":1792117937489,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nordiciptvplay.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:8A:A4:7F:97:96:E7:CC:F6:FD:92:75:ED:B2:AB:1B:5B:7C:E4:3C","sha256":"2B:F1:E0:A1:D9:C6:4D:EC:E5:17:B0:47:16:2E:4B:DC:D6:84:B5:7B:8B:D8:21:A1:95:7B:BC:39:41:29:5F:B1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-box.min.css?ver=4.3.5 HTTP/1.1\r\nHost: nordiciptvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordiciptvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 02:32:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 07 Jan 2026 20:32:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 356\r\ndate: Fri, 16 Oct 2026 02:32:17 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4726,"size_decoded":726,"mime_type":"text/css","magic":"ASCII text, with very long lines (4726), with no line terminators","md5":"c5fd583e176fa5c734da0599bfa3dab0","sha1":"cb5471dfa3e203d47469046bc1533a7269c5e000","sha256":"398e2425ac154b75384c55af3fcb40cf68ef50e15714b9dda11bf54ee0b9fc35","sha512":"666a401784702b993c79d2868133b6a2541e283054f82c01ba510aa21070135259a6842ae45eb7d0a8502d2910a30ecc52f12104fd32afa83913e6ea916c4240","ssdeep":"96:jm1PrPhP7VSPdiDPvmRpwPRAE3wBfPJLFZkPhO:jm1PrPhP7VSPdiDPvUmPV3wBfPJLFZkE","tlshash":"53a1910238d32002192f951f0a53291c557588d8dcdbb9a6f862e7169bffdca376287d","first_seen":"2026-01-07T23:29:45.243297Z","last_seen":"2026-10-16T06:57:58.056546Z","times_seen":22633,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"nordiciptvplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}