{"report_id":"4d5bd080-9c5d-40d5-bdb3-2c0e5bacf291","version":6,"status":"done","tags":[],"date":"2025-12-09T14:48:22Z","url":{"schema":"http","addr":"megakino.cx/films/5892-five-nights-at-freddys-2.html","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"104.21.33.149","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"megakino.cx/films/5892-five-nights-at-freddys-2.html","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"title":"Five Nights at Freddy's 2 kostenlos anschauen","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"megakino.cx/films/5892-five-nights-at-freddys-2.html","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"104.21.33.149","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-13T14:48:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"cvt-s1.adangle.online","ip":{"addr":"104.21.67.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-10-16","domain_rank":1507278,"first_seen":"2025-03-14T03:53:44.560095Z","last_seen":"2025-12-09T14:00:05.30889Z","alert_count":0,"request_count":1,"received_data":968,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-12-07T22:19:32.033314Z","alert_count":0,"request_count":3,"received_data":106790,"sent_data":1363,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"glxpl01.com","ip":{"addr":"104.21.9.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-15","domain_rank":973289,"first_seen":"2025-06-07T18:04:20.285318Z","last_seen":"2025-11-24T21:32:13.939946Z","alert_count":0,"request_count":1,"received_data":804614,"sent_data":556,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"watch.gxplayer.xyz","ip":{"addr":"172.67.148.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-10-02","domain_rank":0,"first_seen":"2023-03-26T00:48:00Z","last_seen":"2025-11-22T14:47:37.906552Z","alert_count":0,"request_count":11,"received_data":1325739,"sent_data":5346,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery:2.0.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-07T22:16:37.28363Z","alert_count":0,"request_count":1,"received_data":432858,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"glxpl03.com","ip":{"addr":"104.21.91.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-15","domain_rank":973059,"first_seen":"2025-10-30T10:37:34.94315Z","last_seen":"2025-11-22T14:47:37.681779Z","alert_count":0,"request_count":1,"received_data":1285682,"sent_data":556,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cvt-s2.agl006.host","ip":{"addr":"172.67.212.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-03-29","domain_rank":0,"first_seen":"2025-06-21T21:21:13.012444Z","last_seen":"2025-12-09T14:00:05.207547Z","alert_count":0,"request_count":2,"received_data":12706,"sent_data":1115,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"yastatic.net","ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2013-11-28","domain_rank":3963,"first_seen":"2014-03-11T07:15:28Z","last_seen":"2025-12-08T04:30:11.820293Z","alert_count":0,"request_count":1,"received_data":146558,"sent_data":412,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"maxcdn.bootstrapcdn.com","ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":6807,"first_seen":"2014-06-18T00:37:31Z","last_seen":"2025-12-08T00:25:17.96889Z","alert_count":0,"request_count":1,"received_data":31943,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"megakino.cx","ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-28","domain_rank":0,"first_seen":"2025-12-09T14:00:04.772079Z","last_seen":"2025-12-09T14:00:04.77208Z","alert_count":34,"request_count":34,"received_data":1527650,"sent_data":22370,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-12-07T22:25:33.399392Z","alert_count":0,"request_count":1,"received_data":280997,"sent_data":422,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-12-07T22:25:46.118111Z","alert_count":0,"request_count":2,"received_data":22722,"sent_data":872,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ssl.p.jwpcdn.com","ip":{"addr":"151.101.130.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-08-07","domain_rank":16928,"first_seen":"2017-01-30T05:00:14Z","last_seen":"2025-12-09T10:00:55.653288Z","alert_count":0,"request_count":1,"received_data":108527,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool@latest","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fa174926682313cc5a067077b0bb22d","sha1":"609109d82deb0c7dd3d9d212808dcba0548ce3d1","sha256":"5a7b9b2c807f85575c9ebc1f508e849b53430870b2d0fb6c02b2de3df661cb63","sha512":"83a593d4b8648b78031259becd96b4c33226e9462c2e26013ee0746ff58a7b710159d0d380d001d7740e9485ee346491c16e3fdb0d334f5b6cfabe6f90cda9b6","ssdeep":"192:m+5ekRvDLCpBK+BpP78nPk6O9ShgzsqcSYV0GtI+uwicvsbIUiJE2KmnyKU:mLiPCvRvT8nPk6cSCzsqGVJeZcsb8S9","tlshash":"0582c4ccb48270715b77a9e9507f454ab23aae96888c8040f13ed8e42c7c56ec267f7d","size":17684,"data":"","first_seen":"2025-08-02T03:49:54.562881Z","last_seen":"2026-04-05T12:41:13.861184Z","times_seen":3601,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/Counter-Up/1.0.0/jquery.counterup.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"319b28bb622c3a7f5d5517e2ce8d8011","sha1":"a9494c763337fa5fe663ed6863c2e3d157dadc15","sha256":"c2575fc32549c80ef5a0a7ba49b6b47ca664691e82330b5bd039d6710b3a3756","sha512":"fbfe10fb11fd8d76cc349ccdb7678cad8bff66cdabcebe01bb6b617efce5b21641bc7d60f9518fe795bc6fac5f92ed1cd0a92713baa56c13e10cfac715b80ae2","ssdeep":"","tlshash":"0b51c1467cbf25981d33f4296bdfb2095234a4b71005dd0ab8dc62808f5193ca35aff4","size":2576,"data":"","first_seen":"2023-03-07T12:25:21Z","last_seen":"2026-04-05T12:36:00.707189Z","times_seen":584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/films/5892-five-nights-at-freddys-2.html","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"70d1a34bc1e44c0e9bc12e63281a6b52","sha1":"ffea3082ff5f9af6dcf3bc05771a5ba06bd4ea98","sha256":"4efeadee04f780e29bcffefc93713a820138b306e736a20110249bb19a44ac84","sha512":"f0f83c7445875f50dec1e94eb385f424e8618ca557ad61835ba1a1061fa31d6bc53974605e7a9cc7b61dc37d9ddc4e1f88738949a73db99f0252dd505b89aab1","ssdeep":"","tlshash":"eec02b8c220e1c7052f727048b3fb700b003321494e0bd31490963044d30e03f764c10","size":153,"data":"","first_seen":"2025-12-05T12:49:36.015323Z","last_seen":"2025-12-09T14:48:33.828767Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/engine/lazydev/dle_filter/lib/dle_filter.js.php","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e64fc3914e46bff9cbb777abc3868872","sha1":"5c62a4c0550b0b44adfdf72b2c1ce760205f9d92","sha256":"1c7f42954d984bc42a3faa10e6d44381134ae22f34d176a177b058788247fb27","sha512":"ab5b73d0412e1f322921b37bfbe6c098d6a84af30b049efe1994d8cbcd97b99b03c767a126118ff67e3164954e8b38c04313bb57b7d802fcec0c79693398c226","ssdeep":"","tlshash":"53e026d920a0046f6b2ddcedbd7dcf03636827b4681dd460840c045ae38b637c0e78e8","size":349,"data":"","first_seen":"2023-05-05T01:31:46Z","last_seen":"2026-04-04T18:52:02.090489Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/films/5892-five-nights-at-freddys-2.html","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"11c51811ca52c1054024c7d47bf4ee10","sha1":"8c9f49c124408b8e4d84d6c0cfb55aa68f0b223b","sha256":"d95c01daeade75bb4610f69abd2c0a0ff669bb712aba71e4bda45567fcb7e371","sha512":"3a47dac69c1963e6df723fa17398c7e22efb5a6278d656ec1f80d739312ef45295b0d9633a83307a6544a26374e2b0bc511aa3acb5535e7f74504e71dd97cdd7","ssdeep":"","tlshash":"60f0ac7a0c71c491098335ca103eb40d0a68501b3c10be9cbe9ddc941f08e1f1979af0","size":618,"data":"","first_seen":"2025-06-21T21:21:19.43217Z","last_seen":"2026-04-04T18:52:02.123379Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/films/5892-five-nights-at-freddys-2.html","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a7d91867c2b3bbc3fd8ed677095f3553","sha1":"07fcb938a590d1edd16cb453f64ebb47f9a942bf","sha256":"7872ac9c9ec9b6c7e04f322bec932e1ad2b348ca581d149cc4d95338df9ed1ac","sha512":"efb1e48b2e2df8bd2a608f4e9e60af82557339fbc9abde2baa6b4cf6249529fca0f0944ae65a5877dc5fc8c307b13c2debc85dbe28654ff193f15c3233cddb7f","ssdeep":"","tlshash":"e441c84a9e6497f61053346728df249bbce20079525ce11df89ccae92389b178279bcd","size":2381,"data":"","first_seen":"2025-07-18T16:39:55.140198Z","last_seen":"2026-04-04T18:52:02.126807Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-0Q50V6DX0B","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"18432ac7622d0d5c93e04342a58ce3bc","sha1":"48da08349d4396a33b8b760ef7b58a7171db39e8","sha256":"6a123d4fbea95ebce55592c746cb72aadd09d44500a87fede4ac37062a9288f3","sha512":"1def72881024a0d472df49b8457dc07ba02331c92c84d15f0dd264ccc8b126edb084305f9b2f33be6c2716d0057bee800067ca09291542772a7c2434d687ed6c","ssdeep":"6144:T9S9munndgbw4GmPoiB0Mqtw0+TCAZ+EDWBUWSTxNHIT8d:w04dZ4G8oeZ+EHXlhIq","tlshash":"5394098e73da74625396f078503f018ba57b28a2f45dc896f189cce41e74a9a0277f7c","size":432254,"data":"","first_seen":"2025-12-09T14:48:33.757712Z","last_seen":"2025-12-09T14:48:33.757712Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/countupjs/1.8.5/countUp.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2f328abd730fff77983938b4afed8ae","sha1":"2f4eb4bd2f5f692bf282d6fd9789fad6d62aabc9","sha256":"f4b3de1bf6a0b69c0c9bcade8cf33282447815561195ec7395e3cc1f3dc469a2","sha512":"d5833a6c473cb815a01c62f241b059c8a81be97e922acdf147d68ff00c1fc963cc7f8a652ccf20debfbbebda4689e6f0396dcbf103cfd26dcf5b289a1c9e6b38","ssdeep":"","tlshash":"6071f3c6a0322a63afaf22a3791b0345267159b03c485cb9657d52d99fd2c0f97837bc","size":3548,"data":"","first_seen":"2023-03-29T23:51:01Z","last_seen":"2026-04-04T18:52:02.080658Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cvt-s2.agl006.host/o/f/lib.js?v=1765206000000","fqdn":"cvt-s2.agl006.host","domain":"agl006.host","tld":"host"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a96d476d58aa372fa9ce96529a4a8472","sha1":"4a6733348a7bbbe1441b1df407224fadea06e605","sha256":"61a04cb333d91ea0c92849ff5a6f9ed5a693da0c01e4678044e415e3968d8f45","sha512":"88380b7b9afc52dd4a81d3669f968f1bc8bcf1cdcafd769745f7d66a2a83d8dbbc505c297bad65f3d53411a0773c08e5fad3ade14f70274659f47050e40db6df","ssdeep":"1536:fg6vwcmIsmIbgqc5WVIXFjOvU20As+5JYaMci7nKC7GjAI1clDTxOeJiMT2iPut:DvwcmI1nK+3lnxi","tlshash":"bad3d6b956e11135a987b17f5def81012f72826b2c40bc213a1c96908f8db3d56b6fbc","size":139519,"data":"","first_seen":"2025-11-12T16:25:18.090296Z","last_seen":"2026-02-20T15:05:31.295589Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/films/5892-five-nights-at-freddys-2.html","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab313b5b83047d40a63e8b8f2c6b2407","sha1":"5e6f3a00b4079f2a17e4d958ae0d52b47dcb73cd","sha256":"2cfd0e6f5af107a4c32164495c2a931e5cc974b7d59f4893856a3f61a1e59f7b","sha512":"2c1cf6e756574076b649e9f2cf910ff0378506dd3e116396c11f9189bf7eea773221406649659d49654d346235ef0de6b66e08ecef3b696b481327aa7c6b8f01","ssdeep":"","tlshash":"dde09af5b2b92be571af327686bb54b57f391d8725010a01e02217a09d3450568e2d4e","size":324,"data":"","first_seen":"2024-06-22T20:47:38Z","last_seen":"2026-04-04T18:52:02.127324Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"watch.gxplayer.xyz/assets/player/jwplayer-8.26.5/jwplayer.js","fqdn":"watch.gxplayer.xyz","domain":"gxplayer.xyz","tld":"xyz"},"ip":{"addr":"172.67.148.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffa8d214623986c201da654817b652ca","sha1":"e2d0bb183992d56484921f089aa34382f31088f8","sha256":"74e064966ca06f0d3fc05898d8e7bc15648c4c64447b3defe6b43117222ea746","sha512":"f3172f829a2faedb3f6b942e08c7f062812f6fab39dacd91a8120bf4b55be829384516da27d352b0c4d9f1fac9a90686b66b0627a7c62368b19017c760868402","ssdeep":"1536:EFZAto2Gmpu8Qk/XyMTMpmSgW5cdEAXi9h:TOYpuroXOH5cY","tlshash":"e8c393ddb1d2b06603a730b5917f610ff23b59c5284e8594e621e9d5bcb8a4e8037fac","size":119002,"data":"","first_seen":"2023-03-12T23:07:06Z","last_seen":"2026-04-04T18:52:02.079325Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"watch.gxplayer.xyz/watch?v=5Z4YVCRW","fqdn":"watch.gxplayer.xyz","domain":"gxplayer.xyz","tld":"xyz"},"ip":{"addr":"172.67.148.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d4ea17d1139bea0818458b99cfa79c1","sha1":"c85628121660b668ce8260b05e7111597eb80bd8","sha256":"aae176d9afea68bb0c9cb11838285afa4d5a5dda9594940bf522d9cd4e456bfe","sha512":"e7d9e1ec4754378698d3075363ef3319ffa79bc30abe3ddd482a7ec8f3e80bf682b7526f20fcbc84019d591180beb075c6fd6d502c1eba36d45b1eb763dc81c1","ssdeep":"","tlshash":"4431335312d0213c71174a1d7dc162e570206a4692727af4f92eaae1c3ce2fe5b5ab49","size":1797,"data":"","first_seen":"2025-10-30T10:37:45.913807Z","last_seen":"2026-04-04T18:52:02.123951Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/templates/popcornie-dark/js/libs.js?5","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ba53b5eeaa2597f7953d92f4920b3e0","sha1":"a94b3720d0702b67fab5cb907191c45c5755f9c0","sha256":"32f17ad03c74c85eb9c82eca576d5d997763832dd33a4898af9e527bf52dd507","sha512":"735af14e15ef46cb53be000ca8e4073e4f005998cd29fdfd42c44a68a5427bc1b5699e0c3e3f455fbb5bd618487f22d2a2d79c864c61298cc4c1d7f9c3dec61d","ssdeep":"768:HM1gLCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSRc7UuHjRUQuFBt3e:HM1g+ITMFC4dbMVRSRcgRD8","tlshash":"ad33a446f3202d2a869b61a0663f120bb23a241de405507db97d96de6d7d98c313ffbc","size":52787,"data":"","first_seen":"2024-12-15T10:43:21.678818Z","last_seen":"2026-04-04T18:52:02.095949Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/films/5892-five-nights-at-freddys-2.html","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-04-05T13:45:46.309922Z","times_seen":78462,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cvt-s2.agl006.host/o?vst=_jMvNDY1NT_jNmUtNTVjYiWWZTZiL-I2ODEtM-NkZDJiMzBkZGRk%2C_jMvYjM1ZDZhM2MtNzRjNSWWZTIyL-ExM-QtOGUWNzYxN-NmOTJj\u0026lang=en\u0026container=.pmovie__player.tabs-block\u0026cp=%7B%22domain%22%3A%22megakino.dad%22%2C%22host%22%3A%22757f0897b6694b79aad7cbf152c4d567%7Cmegakino.dad%22%7D","fqdn":"cvt-s2.agl006.host","domain":"agl006.host","tld":"host"},"ip":{"addr":"172.67.212.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f3e9025af8ec5682e773822ebd6a5f2","sha1":"abfe19dab5c71cc8a4827d83ddaf83575da24f97","sha256":"99ac2577b65c4eff59b1b5e017892a6276c22c482e13011964fde55bf08ff68f","sha512":"cb4da0629b2e146b44244c1f87fc8bb330b6586c19d7b3843c64d387ac40126132af6dd06490dee59c6844d64dcbfd9d19384c8680abca127d087cb46339cf1e","ssdeep":"","tlshash":"4751c8af1dac84350de5008bf9cc7e49875940af761058c4c64ddc3b8a9cde771a9ad6","size":2779,"data":"","first_seen":"2025-12-09T14:48:33.824694Z","last_seen":"2025-12-09T14:48:33.824694Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/waypoints/4.0.1/jquery.waypoints.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4aa246e37085616c037be899ebd51e52","sha1":"afdb3efef99d69531ead73d514a58ed04188b585","sha256":"5c06e8d032a023b4323d4b07cbf9c006652560faba58fb27b572af4f477a7ac2","sha512":"086df548e3643f6b782956fb0773fd4f7a3e3bed145ecb440c3aba3b672108963b6f5701a7e29ae448305f22f9d132a9e8201e67e796f7bc34ba9c1e04cea580","ssdeep":"384:5BtFLqx76l7FdKcjJ0MKMW9hAPx4oLm8W92yShKqfvTFOUiVonen:5Fqxgn4E7vfrF/+onen","tlshash":"ef72cc482eeb20136f4b60b9fc5b51467276812b54c95c6778dc92d80fe21391ebaff8","size":17547,"data":"","first_seen":"2023-04-09T10:24:53Z","last_seen":"2026-04-05T11:07:27.777228Z","times_seen":563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/share2/share.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f973d0107433443697bdf08f487bfe16","sha1":"39fbe888a6085e1053bb013447b33e5c22ffc785","sha256":"a796e6837815ffd5ce839246cdb66ed0740e406ed4751a812110c0edee294c2c","sha512":"8f282e346c4f8dd7402ed189f57b6369dc95de30eb26794a17a3487c4c05e7a5cc393c659c39f1605c6312fc3ea736941d35fa4187785d3dafd7b91ee6df35ee","ssdeep":"1536:+45QpjY2UwOr2zqNxB1z9YUF3VBKbGybr1R3PRjt42D+RdBttpHg:+JWB1uD1bn3PRjt42DItI","tlshash":"73e3098d3d80b45e139b9168b51bf00ff2298c15e8e90c91f690c5d8d9f384ddb5abae","size":145642,"data":"","first_seen":"2023-11-29T21:12:42Z","last_seen":"2026-04-05T14:03:07.127104Z","times_seen":5704,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cvt-s2.agl006.host/o/s/a941312e99999aac85c8d55346033a2f.js","fqdn":"cvt-s2.agl006.host","domain":"agl006.host","tld":"host"},"ip":{"addr":"172.67.212.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec3e8b85b2f88ac7ef1264c1b3b6df8a","sha1":"8e6e8d4a65460fa513fa25e87bdafb2ba795c073","sha256":"8b7f90b38ee55c258858510c03506a85b0267628e8b136c765bacd1de4c4d047","sha512":"4ff9da33c39325d979bc9d4dc78cb8e98f1e6823c6b710ff068f7695803b36b2bfd3b439599ea81e75300aa27cea461f8d42cbc3e306cfe80c3b6bb017ae60d1","ssdeep":"192:KAyBLQKs89yYY/75x/I7RTohARShRZIil86ivuwXGfXTv9Rz3:YMxc4IdUhARShRZ8DWL/","tlshash":"5002b5613ea4253082b6835f71bfa358b6760066b4054484a63c8cba3d7de8b41b7fed","size":8540,"data":"","first_seen":"2025-11-21T23:22:46.872217Z","last_seen":"2026-01-28T11:01:35.07748Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"watch.gxplayer.xyz/assets/player/jwplayer-8.26.5/provider.hlsjs.js","fqdn":"watch.gxplayer.xyz","domain":"gxplayer.xyz","tld":"xyz"},"ip":{"addr":"172.67.148.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a93d76950d84ee91e0c47324a5df8a8","sha1":"a4a0a648bd3a3f3313f6f5a98340add255f114fd","sha256":"f8b34355d8fd06168b3ec1939c06d3310ddeb4550a02b29e3cd9555200639de9","sha512":"3c777483291c31ff6963d8ec9d12b071d3685cf737391cbbd557a91c65ae554a7b71822567a3939e42bdb815036db7cf253513f586e0a027458723b7db2ed69d","ssdeep":"6144:QiY41OZdKOOf+nSIY/4nN/Aq5YrOue7stE6KgT/:HY+/4BAq5Yr1eG","tlshash":"81842adeb695b0664283b1a4903f5607633b7d0a7409c1acfb27e5d61db8889b03bf74","size":386590,"data":"","first_seen":"2023-03-12T15:37:46Z","last_seen":"2026-04-04T18:52:02.093948Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/engine/classes/min/index.php?g=general3\u0026v=bc993","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0732e3eabbf8aa7ce7f69eedbd07dfdd","sha1":"4cd5ddc413b3024d7b56331c0d0d0b2bd933f27f","sha256":"ce9d07500ad91ec2b524c270764ec4c9a33e78320d8d374ec400ede488f6251b","sha512":"41d24c426abcf913be59917591d906318a547661280036b098a2b1b948bcf9ff14f268b140db10956730d64a857a61b81034d888ed7f857419dee6b8d327447c","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vE:eIh8GgP3hujzwbhd3XvSiDQ47GKq","tlshash":"e19309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89503,"data":"","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-04-05T13:14:33.213573Z","times_seen":17389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"watch.gxplayer.xyz/watch?v=5Z4YVCRW","fqdn":"watch.gxplayer.xyz","domain":"gxplayer.xyz","tld":"xyz"},"ip":{"addr":"172.67.148.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ae578a7d55455957b2f4afea705cee5f","sha1":"8905679c0ac10371226309cfc874db2fb4e25513","sha256":"752809a5e025082a50fa9284a3bec5f894ce751e31e9936d55219e1f60fc4428","sha512":"cb499427a47c0400f0b31c82bbdb8d1ef219b0fdef188521a8ebc54b445bda8d5a9dc5117deefbdd2c084ca9d6614229ec75167164dbae9f21561c1f9d36bf0f","ssdeep":"","tlshash":"7ee0ab2d9ce706384cf63a441078da3930f838a0aaa3d067525cc82ccd39fc50c00aec","size":424,"data":"","first_seen":"2025-10-30T10:37:45.917083Z","last_seen":"2026-04-04T18:52:02.12441Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/engine/classes/min/index.php?f=engine/classes/js/jqueryui3.js,engine/classes/js/dle_js.js,engine/classes/js/lazyload.js\u0026v=bc993","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"23be8d3af4cb9c839b31f2118df902ab","sha1":"32d09e093a064be9ae2cce43fe7b23c352fa062d","sha256":"bc7e6d834102ba014c8ec8473becdf115ff7e6d5a658fe279c9ac6129283cc22","sha512":"15a68930e68312e998f6ac03553c269785c8f96641439033fd166f9724e6dce68aa1bb2deddbb652b91934ba57e00fa7c940b346b24919de65cdb1a2ee2ee2b5","ssdeep":"3072:8MeBbOLOVu6ISFZnAQKRvFNn9GlZ1+kN6nSygxdeJG7ARvAV:kiO1RFBrKn+yW3","tlshash":"77f3294db210392356eba275207f1a0ea2364619e605848cb43dcede6e7de4871b7f7c","size":167902,"data":"","first_seen":"2023-03-14T04:07:09Z","last_seen":"2026-04-05T02:02:51.272432Z","times_seen":1596,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.4.1.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"11c05eb286ed576526bf4543760785b9","sha1":"7faa15a054093f3b5d674e63b6567c835a6fa217","sha256":"5a93a88493aa32aab228bf4571c01207d3b42b0002409a454d404b4d8395bd55","sha512":"b096b9296ab717df5039e8a350e9bd3be0600e056dceb58105a819b63956ec5dc8e3b34ed4e68d26f6eeb7ef4a38f9a336be166f76e5538bd0890762f9993ac2","ssdeep":"6144:V0Hh4V/Y+TCtlIhTze/RZcYmDvzK8m/7EtPx+WI+Y7cFys/CL/+uQxN0IPfKuGAv:atZcYmDhOgPx+WI+Y7cFycuq1PfQAv5B","tlshash":"4454a4d9f78d112e423231aa9c2f12cdb77cd1b1560458aebd4d597c24a083d83baf7a","size":280364,"data":"","first_seen":"2023-03-07T01:03:49Z","last_seen":"2026-04-05T08:29:58.617173Z","times_seen":1889,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"watch.gxplayer.xyz/assets/player/jwplayer-8.26.5/jwplayer.core.controls.js","fqdn":"watch.gxplayer.xyz","domain":"gxplayer.xyz","tld":"xyz"},"ip":{"addr":"172.67.148.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"63a963853b34e6de450b5bfdd2e5c05d","sha1":"eba88cc5db9b599dfffcb3fe7a0777d5f0aa5b55","sha256":"207f02b7115a168fafab345cc7b02954256a44df1c597b1f060a062a97a03a53","sha512":"d33a0375f4188be0224c7e74eb185c1b8a62564e86cb74544a091fca0f78feab6bd0166a14a6f41456830daa26f5cbb431f8954c30e73575ba15a0a206a4562d","ssdeep":"6144:RII9XOT6xEXffnxpv+cQDdEMcXoQuwmjaji:20OT6xEXf/xpvSEMVae","tlshash":"2b641a39b142323556d7a2a9625b4609b33b9045b5068bacff29e9d84c7c48f30f7fb4","size":334623,"data":"","first_seen":"2023-03-12T14:32:06Z","last_seen":"2026-04-04T18:52:02.089245Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.26.5/vast.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.130.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"89a45a2fdea801da89e01cdb029f5982","sha1":"15e32e648835ed52752775a673333559e9a5a343","sha256":"1a026991eda6c5cc7958b8358472add2fb462633f5c3470a72b7fa7e0787db98","sha512":"b842c3fbb17d43c08d5f421b0c65b6fd1fa66ee190512eb826585331d554fd77cc5d2da703394046be3c720a7a6bb264f65ef826081b3b4199f7e4774f5839bf","ssdeep":"1536:c0DxdvIpdFrmTIrH7TvcruEE/OGGEXBqEMuK0VjE346RAWuSpizRm74//e8brJvM:cynRuEE/n8UCerXcufs","tlshash":"99b3988e7395f52146d2a0b8603f01067337160f680e826cf56aedea5c6da4e727bf74","size":107949,"data":"","first_seen":"2023-03-12T18:06:04Z","last_seen":"2026-04-04T18:52:02.088675Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"watch.gxplayer.xyz/watch?v=5Z4YVCRW","fqdn":"watch.gxplayer.xyz","domain":"gxplayer.xyz","tld":"xyz"},"ip":{"addr":"172.67.148.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"281639d36973dca283bb9fa5ca3ebc9c","sha1":"9b875abdca116d0287fd35d1824f7d3b166446c2","sha256":"8227914602e0c839f953432ebcca40278918fb2526c1dc1f4039303407fc8dca","sha512":"d69008c999e3d73d64a2985c2f0fa77c28f555846b567c926d5e2c0d5a9371d5ee8f3d0b4e6016f55642acbce93f1b26c73ceb2461a05c15b96d47ac09683590","ssdeep":"384:OpO8o/h/sf+lEOI9+gicPjAOhMXKjR8oCH7xMTsg+srpsl00pziTydY6xF+7GMis:z8IsfRfAKsi+srDTUM7GO","tlshash":"411393d568b3103585b372ad976b65012b751603e208fa467d0ea3891fcb739cab1ef8","size":44123,"data":"","first_seen":"2025-12-09T14:48:33.83879Z","last_seen":"2025-12-09T14:48:33.83879Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/c3dfad5b-eaa6-4a87-a91c-f857f5c12e51","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb0144078a945c65bd9ee33b4f02c08a","sha1":"d9cf0485eff8e7a2c6c5da8d4a1f730a05945a89","sha256":"bd5c16082ff8e165284d2f5801151bf207f5b44a3af36d18858f944a38b976f4","sha512":"6523470ce671a40f27fb528eb237b593129ed2bebe1038078732da5eca5f00e25e614eaaf944fa254fdfa6908197cb18e3d23300cb7a6b453e42b40079e59bf2","ssdeep":"","tlshash":"71f0559f2129c8220d942c8b784c7e8e5f9458a363606fdce78d9c670a148930275b81","size":441,"data":"","first_seen":"2025-09-05T04:22:40.388986Z","last_seen":"2025-12-31T02:31:24.615347Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/2.0.3/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccd0edd113b78697e04fb5c1b519a5cd","sha1":"a6eedf84389e1bc9f757bc2d19538f8c8d1cae9d","sha256":"a57b5242b9a9adc4c1ef846c365147b89c472b9cd770face331efcb965346b25","sha512":"7a9cc9f66b3ed0fabecc532b1b595754dbe311782d7cac7d8ae116ab3de199b694da6fc3a75a5c9a9633b927432ea5fa3cc223ccc3b2185c0c73e4a480584c16","ssdeep":"1536:mnWi6p4BmVLFijGb2gXke71t5tgPBHlxNLIJBanUEwf7rmvsMn3lhMr:GUL5uxNL/4Cr3lOr","tlshash":"8083f9dd73c2b06257bb20b9006f640ff2364d6a280d8564f125d8e9bcb5a4d827bf6d","size":83606,"data":"","first_seen":"2023-03-07T01:16:40Z","last_seen":"2026-04-05T14:09:38.038402Z","times_seen":5645,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"watch.gxplayer.xyz/watch?v=5Z4YVCRW","fqdn":"watch.gxplayer.xyz","domain":"gxplayer.xyz","tld":"xyz"},"ip":{"addr":"172.67.148.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bc035c6f396197cf821ef800547c2321","sha1":"51200a5d793d2f1f43636e6a7f4f140f1e703021","sha256":"8d5aac77287cad4faaa751b9878fade089231b778ae2ec81228dc01f06251ddc","sha512":"417315c67d7f7b57c0e7d29fed5c9128e9045b833ecaf3e99527476db10de9e6609a79d822e6ba47e16d75d9d62c3747384ab648b1f8e8839abc2a828a7c26ac","ssdeep":"","tlshash":"78311067b4b965300f5bb2bb979be71432344107f806ec903d4f870c2f2476496aabca","size":1601,"data":"","first_seen":"2025-10-30T10:37:45.927705Z","last_seen":"2026-04-04T18:52:02.128035Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/templates/popcornie-dark/lazydev/dle_filter/assets/dle_filter.js","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02536f0c70fa37aff7c29479f1acb8fd","sha1":"b6c02c2c06a7a524b4fb39d420d82607737247d1","sha256":"80c9544cf11c0ad6c8820da3d66f0cf7602f5d376a71bffa02420f891b3e80cc","sha512":"de66cbb2a5907696eb32ef2f461bd3b2404394696c6c013114b9a87213beda1f8378157b1b7a2e4e4b2a6d85b18b5460aa7663ad7fa8f3cc660e6bdbd96fc325","ssdeep":"192:+i6cdyno5+yAr0Yz1Jp/iSC8ubmSCF3kbSChf0/7/hzCZvyCGz4C5vzxUVI1CoIk:mz1JuORvI6wJnjRvSWELwnnXkCYfT3l","tlshash":"1c03ea4925f200161163307fafde9104a676a85b1418cf04bc4d9b84ffd6935ebfabaa","size":38054,"data":"","first_seen":"2023-04-07T12:00:07Z","last_seen":"2026-04-05T12:22:30.607715Z","times_seen":104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"megakino.cx/templates/popcornie-dark/css/engine.css","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:58.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megakino.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:45:04 GMT","end":"Thu, 26 Feb 2026 22:43:37 GMT"},"fingerprint":{"sha1":"39:A6:86:EB:F5:46:7E:D2:2E:2A:00:ED:69:EA:6D:93:45:42:07:C9","sha256":"5E:5C:2F:8A:DB:3F:98:96:80:8E:DB:D8:6E:4A:E7:A6:B6:D2:53:4B:04:6A:33:0C:AF:7F:D3:2F:34:96:6F:F7"}}},"request":{"raw":"GET /templates/popcornie-dark/css/engine.css HTTP/1.1\r\nHost: megakino.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/films/5892-five-nights-at-freddys-2.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yg_token=1765291678.7650d60511aa4d7ae12a98ff0aa9bc9dcc9416046f0ae7703c1c6f12963a6de1; PHPSESSID=tt3vqe33abnk6gekore9ipas5i\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 14:47:58 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Sun, 01 Sep 2024 13:37:14 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 02 Dec 2026 18:28:07 GMT\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nage: 591591\r\ncf-cache-status: HIT\r\netag: W/\"66d46e0a-7922\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z3gPoxHPmog6CP6rSDtGSBKs8bKi68UZRPYqJ%2By%2BdvXzQFRH2MlczZ48DUu2X78bAPa9v3w1sSXaFZBJneTBqIINWtNaz6Jfpw%3D%3D\"}]}\r\ncf-ray: 9ab54cfd8c26b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31010,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ac2e6c387b10b1cab4188be1432e6e7c","sha1":"e1b6e4f1aa7b85b12a105c01d783189c4961db41","sha256":"019fc9891f407cee2cf0a4240166b111efb9dd6c59c995d5a8455d0fd813619f","sha512":"ab7a24ae2e8dacce94db68aaeafcd9df99ca0ddb814f3f6e2db25e38046265577e0886315baed999ac078d6d26877392588ee77175b12de50306a54db2761f62","ssdeep":"768:M4MC0RRMKAuOhFdHGytKqJm5i/fHECX02x309MZO9wNTdhLagQ:M4wn8pX33OM49wNvc","tlshash":"6ad295217a441108b11bf196f9b3e7abbf2f6011e30345faa8a63554c2cd6a7017b7dd","first_seen":"2024-09-29T14:15:46Z","last_seen":"2026-04-04T18:52:02.09535Z","times_seen":48,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/engine/classes/min/index.php?f=engine/classes/js/jqueryui3.js,engine/classes/js/dle_js.js,engine/classes/js/lazyload.js\u0026v=bc993","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:58.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megakino.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:45:04 GMT","end":"Thu, 26 Feb 2026 22:43:37 GMT"},"fingerprint":{"sha1":"39:A6:86:EB:F5:46:7E:D2:2E:2A:00:ED:69:EA:6D:93:45:42:07:C9","sha256":"5E:5C:2F:8A:DB:3F:98:96:80:8E:DB:D8:6E:4A:E7:A6:B6:D2:53:4B:04:6A:33:0C:AF:7F:D3:2F:34:96:6F:F7"}}},"request":{"raw":"GET /engine/classes/min/index.php?f=engine/classes/js/jqueryui3.js,engine/classes/js/dle_js.js,engine/classes/js/lazyload.js\u0026v=bc993 HTTP/1.1\r\nHost: megakino.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/films/5892-five-nights-at-freddys-2.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yg_token=1765291678.7650d60511aa4d7ae12a98ff0aa9bc9dcc9416046f0ae7703c1c6f12963a6de1; PHPSESSID=tt3vqe33abnk6gekore9ipas5i\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 14:47:59 GMT\r\ncontent-type: application/x-javascript; charset=utf-8\r\ncontent-length: 44459\r\npriority: u=3,i=?0\r\nexpires: Wed, 09 Dec 2026 14:47:59 GMT\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 14 Sep 2021 11:18:02 GMT\r\netag: \"pub1631618282;gz\"\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gToIFLmiLgVxH1XwNNZOyFDwGyMLf%2Fyev%2BU9w17bfqlBStPT7%2FLK0fnfevqm5ZLlgT0OjsL35MUvce1rGB1pjnFmzGqcQQ6%2FAg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ab54cfdbc32b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167902,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32087), with CRLF line terminators","md5":"23be8d3af4cb9c839b31f2118df902ab","sha1":"32d09e093a064be9ae2cce43fe7b23c352fa062d","sha256":"bc7e6d834102ba014c8ec8473becdf115ff7e6d5a658fe279c9ac6129283cc22","sha512":"15a68930e68312e998f6ac03553c269785c8f96641439033fd166f9724e6dce68aa1bb2deddbb652b91934ba57e00fa7c940b346b24919de65cdb1a2ee2ee2b5","ssdeep":"3072:8MeBbOLOVu6ISFZnAQKRvFNn9GlZ1+kN6nSygxdeJG7ARvAV:kiO1RFBrKn+yW3","tlshash":"77f3294db210392356eba275207f1a0ea2364619e605848cb43dcede6e7de4871b7f7c","first_seen":"2023-03-14T04:07:09Z","last_seen":"2026-04-05T02:02:51.272432Z","times_seen":1596,"resource_available":true,"data":null}},"time_used":776,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":729,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"watch.gxplayer.xyz/assets/player/jwplayer-8.26.5/jwplayer.js","fqdn":"watch.gxplayer.xyz","domain":"gxplayer.xyz","tld":"xyz"},"ip":{"addr":"172.67.148.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://watch.gxplayer.xyz/watch?v=5Z4YVCRW","date":"2025-12-09T14:47:58.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxplayer.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 14:28:46 GMT","end":"Sun, 15 Feb 2026 15:26:02 GMT"},"fingerprint":{"sha1":"14:20:13:71:30:43:F8:E3:C9:A4:EA:55:8D:3C:C1:01:17:F4:FD:8D","sha256":"3D:D4:2A:57:98:06:76:F5:AE:D3:FB:4F:6E:38:2D:39:DC:72:96:9F:06:E7:3E:2D:4F:83:BB:2A:D8:C2:BA:1C"}}},"request":{"raw":"GET /assets/player/jwplayer-8.26.5/jwplayer.js HTTP/1.1\r\nHost: watch.gxplayer.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://watch.gxplayer.xyz/watch?v=5Z4YVCRW\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 14:47:58 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 08 Jan 2023 16:34:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"63baf098-1d0da\"\r\nexpires: Tue, 09 Dec 2025 14:48:58 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GtVHY7WhGOdw%2BqUFWvNBmV0jABrmG7MnIBTU5a2c6rY4sxwg8ko%2FhdIrX3rggM0ckAfBmX4I4KGHGv9%2BUnOXaIohjeJ%2B69PyrGuBECVbg4xDHQ%3D%3D\"}]}\r\ncf-ray: 9ab54d006f665fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119002,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"ffa8d214623986c201da654817b652ca","sha1":"e2d0bb183992d56484921f089aa34382f31088f8","sha256":"74e064966ca06f0d3fc05898d8e7bc15648c4c64447b3defe6b43117222ea746","sha512":"f3172f829a2faedb3f6b942e08c7f062812f6fab39dacd91a8120bf4b55be829384516da27d352b0c4d9f1fac9a90686b66b0627a7c62368b19017c760868402","ssdeep":"1536:EFZAto2Gmpu8Qk/XyMTMpmSgW5cdEAXi9h:TOYpuroXOH5cY","tlshash":"e8c393ddb1d2b06603a730b5917f610ff23b59c5284e8594e621e9d5bcb8a4e8037fac","first_seen":"2023-03-12T23:07:06Z","last_seen":"2026-04-04T18:52:02.079325Z","times_seen":48,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/uploads/posts/2025-12/8fcd9b34-89e3-4c07-88fe-792fa1a0676f.webp","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:59.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megakino.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:45:04 GMT","end":"Thu, 26 Feb 2026 22:43:37 GMT"},"fingerprint":{"sha1":"39:A6:86:EB:F5:46:7E:D2:2E:2A:00:ED:69:EA:6D:93:45:42:07:C9","sha256":"5E:5C:2F:8A:DB:3F:98:96:80:8E:DB:D8:6E:4A:E7:A6:B6:D2:53:4B:04:6A:33:0C:AF:7F:D3:2F:34:96:6F:F7"}}},"request":{"raw":"GET /uploads/posts/2025-12/8fcd9b34-89e3-4c07-88fe-792fa1a0676f.webp HTTP/1.1\r\nHost: megakino.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/films/5892-five-nights-at-freddys-2.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yg_token=1765291678.7650d60511aa4d7ae12a98ff0aa9bc9dcc9416046f0ae7703c1c6f12963a6de1; PHPSESSID=tt3vqe33abnk6gekore9ipas5i; _ga_0Q50V6DX0B=GS2.1.s1765291678$o1$g0$t1765291678$j60$l0$h0; _ga=GA1.1.1734660940.1765291679\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 14:47:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16908\r\nlast-modified: Fri, 05 Dec 2025 22:31:49 GMT\r\npriority: u=4,i=?0\r\netag: \"69335d55-420c\"\r\nexpires: Sat, 05 Dec 2026 22:53:47 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 316452\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F5cyTLXOn%2FOnvPTipu7jyy5JBCb79dyIbIhqmBlMlH49q2NJalCAi4%2F10Y64IvOT8g%2BCjbALDTEvWxNfKtCf4pSNRxPPP%2B1PKQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ab54d040ca8b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16908,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 318x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f54f19eab2f6f25a2ee1cda5cc5d4231","sha1":"535df1cb40ae02b64a05941e66add9c210211a8f","sha256":"47abc1d3ad9e00f878e1889950dd0157cae181dbfa6bc52c8d589a75c0222e85","sha512":"ad9f6bfbb2c9980942c41d8d9280c000c80a9171889df313697ed6185f5aa04019998bee4a6c9958bb9bae172fdfe1124fd7723c74beff36eb2d7104e9db6fe6","ssdeep":"384:40AlXehJBA9qSAb775ZBv4GiEJZzgNFZJEtjQ4ZXgyj:4bOhazAb775fv41+G2tjmyj","tlshash":"c372d1621201e2b3fc20e1ac735db53fa066e674542d455abdfbbc26cd90884c47cbe5","first_seen":"2025-12-09T14:48:33.744346Z","last_seen":"2025-12-09T14:48:33.744346Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/templates/popcornie-dark/webfonts/fredoka-one-400.woff2","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:58.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megakino.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:45:04 GMT","end":"Thu, 26 Feb 2026 22:43:37 GMT"},"fingerprint":{"sha1":"39:A6:86:EB:F5:46:7E:D2:2E:2A:00:ED:69:EA:6D:93:45:42:07:C9","sha256":"5E:5C:2F:8A:DB:3F:98:96:80:8E:DB:D8:6E:4A:E7:A6:B6:D2:53:4B:04:6A:33:0C:AF:7F:D3:2F:34:96:6F:F7"}}},"request":{"raw":"GET /templates/popcornie-dark/webfonts/fredoka-one-400.woff2 HTTP/1.1\r\nHost: megakino.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/films/5892-five-nights-at-freddys-2.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yg_token=1765291678.7650d60511aa4d7ae12a98ff0aa9bc9dcc9416046f0ae7703c1c6f12963a6de1; PHPSESSID=tt3vqe33abnk6gekore9ipas5i\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 14:47:58 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15524\r\nlast-modified: Sun, 20 Jun 2021 13:03:10 GMT\r\npriority: u=3,i=?0\r\netag: \"60cf3c8e-3ca4\"\r\nexpires: Wed, 02 Dec 2026 18:30:50 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 591427\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WVhhaZVw3HhUiMNS3RST8IRw99W7jMIMqSlvW02Ho6qzdnizExla9I4M94fFezt7jH4NxJKLOiD1AkzYCQHK0LeoTMCcpHr1%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ab54cfd8c2ab500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15524,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15524, version 1.0","md5":"e12e0aa363a60ce6f2140ba7565cadf6","sha1":"0486d5844472a791a9175179257cbd011e3b4f28","sha256":"8c77cd0cb3cc4a3f294c6b86ba5302fe3139f89758ac460e5f5fb6a6a01b5dec","sha512":"3d788031eb02b7622ecd7fafb42b33dcfb47ae590fbfb61440752da77acf39ee8e0c2a0a3fd45b3216d1b8a9e7174df786bd7f0e6983fb0bd2902645afa00dc4","ssdeep":"384:qg8jtJ0fWr9Dx7STDL7CM243ONccRvB8++FXtQOIFwpF:qpjb0fW5ZSTuwacu69BIWpF","tlshash":"9462c08f16644257faad4a7d746f091e26d5bf286b493cbc14488cb123ddf12e3e3944","first_seen":"2023-04-30T22:26:17Z","last_seen":"2026-04-04T18:52:02.104194Z","times_seen":240,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.4.1.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://watch.gxplayer.xyz/watch?v=5Z4YVCRW","date":"2025-12-09T14:47:58.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.4.1.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://watch.gxplayer.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-4472c\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 09 Dec 2025 14:47:58 GMT\r\nage: 2421289\r\nx-served-by: cache-lga21923-LGA, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 19, 270\r\nx-timer: S1765291679.879997,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 82889\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":280364,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"11c05eb286ed576526bf4543760785b9","sha1":"7faa15a054093f3b5d674e63b6567c835a6fa217","sha256":"5a93a88493aa32aab228bf4571c01207d3b42b0002409a454d404b4d8395bd55","sha512":"b096b9296ab717df5039e8a350e9bd3be0600e056dceb58105a819b63956ec5dc8e3b34ed4e68d26f6eeb7ef4a38f9a336be166f76e5538bd0890762f9993ac2","ssdeep":"6144:V0Hh4V/Y+TCtlIhTze/RZcYmDvzK8m/7EtPx+WI+Y7cFys/CL/+uQxN0IPfKuGAv:atZcYmDhOgPx+WI+Y7cFycuq1PfQAv5B","tlshash":"4454a4d9f78d112e423231aa9c2f12cdb77cd1b1560458aebd4d597c24a083d83baf7a","first_seen":"2023-03-07T01:03:49Z","last_seen":"2026-04-05T08:29:58.617173Z","times_seen":1889,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":68,"dns":4,"connect":20,"send":0,"wait":14,"receive":20,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/countupjs/1.8.5/countUp.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://watch.gxplayer.xyz/watch?v=5Z4YVCRW","date":"2025-12-09T14:47:58.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /countupjs/1.8.5/countUp.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://watch.gxplayer.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"ddc-L060vS9faSvygtb9l4n61tYqq8k\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 09 Dec 2025 14:47:58 GMT\r\nage: 1612568\r\nx-served-by: cache-fra-eddf8230020-FRA, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 1274\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3548,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3548), with no line terminators","md5":"d2f328abd730fff77983938b4afed8ae","sha1":"2f4eb4bd2f5f692bf282d6fd9789fad6d62aabc9","sha256":"f4b3de1bf6a0b69c0c9bcade8cf33282447815561195ec7395e3cc1f3dc469a2","sha512":"d5833a6c473cb815a01c62f241b059c8a81be97e922acdf147d68ff00c1fc963cc7f8a652ccf20debfbbebda4689e6f0396dcbf103cfd26dcf5b289a1c9e6b38","ssdeep":"","tlshash":"6071f3c6a0322a63afaf22a3791b0345267159b03c485cb9657d52d99fd2c0f97837bc","first_seen":"2023-03-29T23:51:01Z","last_seen":"2026-04-04T18:52:02.080658Z","times_seen":75,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":59,"dns":2,"connect":19,"send":0,"wait":14,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"watch.gxplayer.xyz/assets/langs/localization-en.json","fqdn":"watch.gxplayer.xyz","domain":"gxplayer.xyz","tld":"xyz"},"ip":{"addr":"172.67.148.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://watch.gxplayer.xyz/watch?v=5Z4YVCRW","date":"2025-12-09T14:47:59.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxplayer.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 14:28:46 GMT","end":"Sun, 15 Feb 2026 15:26:02 GMT"},"fingerprint":{"sha1":"14:20:13:71:30:43:F8:E3:C9:A4:EA:55:8D:3C:C1:01:17:F4:FD:8D","sha256":"3D:D4:2A:57:98:06:76:F5:AE:D3:FB:4F:6E:38:2D:39:DC:72:96:9F:06:E7:3E:2D:4F:83:BB:2A:D8:C2:BA:1C"}}},"request":{"raw":"GET /assets/langs/localization-en.json HTTP/1.1\r\nHost: watch.gxplayer.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://watch.gxplayer.xyz/watch?v=5Z4YVCRW\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 14:47:59 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 04 Aug 2024 10:24:38 GMT\r\nset-cookie: SITE_TOTAL_ID=3d927aa805d4301c75f0ae5990dde0fb; Path=/; Max-Age=259200000; HttpOnly\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9il83AnxXsbRMYdt4DPazG1xgh8LRYaFvbcnpOSpNiV1Zpqno7a8A6qIgoLWriInngTQepOSblBGM1N9xTEhy6TzXIXRknpItv172Qq6mJkxgA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"66af56e6-381\"\r\ncontent-encoding: br\r\ncf-ray: 9ab54d0269055fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":897,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"414d9f9a4d5ffee664ce67198bb908ab","sha1":"8d12943812c27ea9e2f8c2bc9616cb747c83a4c5","sha256":"ffb9f5be2f3612c6605661af09cf6e5add4bf7b01c1dcf102e714c709caa2369","sha512":"7104ec92b5becf2407694c07d3172faf27c823e17ba6b73b053127c2f2f8e1d4cea05d3650f937b265891ce11e3c4249523878d32ad6aac390e419b9a15673f4","ssdeep":"","tlshash":"6c118937c4189ef300bcda8ab99115a3f328834f9208950f70bc669c1f361428589591","first_seen":"2025-10-30T10:37:45.861948Z","last_seen":"2026-04-04T18:52:02.087953Z","times_seen":12,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.26.5/vast.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.130.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://watch.gxplayer.xyz/watch?v=5Z4YVCRW","date":"2025-12-09T14:47:59.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.26.5/vast.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://watch.gxplayer.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=86400, immutable\r\nlast-modified: Fri, 16 Dec 2022 18:56:49 GMT\r\netag: \"89a45a2fdea801da89e01cdb029f5982\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 09 Dec 2025 14:47:59 GMT\r\nage: 86337\r\nx-served-by: cache-lga21936-LGA, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 2335, 1\r\nx-timer: S1765291679.439628,VS0,VE1\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 30196\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":107949,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"89a45a2fdea801da89e01cdb029f5982","sha1":"15e32e648835ed52752775a673333559e9a5a343","sha256":"1a026991eda6c5cc7958b8358472add2fb462633f5c3470a72b7fa7e0787db98","sha512":"b842c3fbb17d43c08d5f421b0c65b6fd1fa66ee190512eb826585331d554fd77cc5d2da703394046be3c720a7a6bb264f65ef826081b3b4199f7e4774f5839bf","ssdeep":"1536:c0DxdvIpdFrmTIrH7TvcruEE/OGGEXBqEMuK0VjE346RAWuSpizRm74//e8brJvM:cynRuEE/n8UCerXcufs","tlshash":"99b3988e7395f52146d2a0b8603f01067337160f680e826cf56aedea5c6da4e727bf74","first_seen":"2023-03-12T18:06:04Z","last_seen":"2026-04-04T18:52:02.088675Z","times_seen":15,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":93,"dns":3,"connect":27,"send":0,"wait":28,"receive":9,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-0Q50V6DX0B","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:58.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"GET /gtag/js?id=G-0Q50V6DX0B HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 09 Dec 2025 14:47:58 GMT\r\nexpires: Tue, 09 Dec 2025 14:47:58 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 142934\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":432254,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"18432ac7622d0d5c93e04342a58ce3bc","sha1":"48da08349d4396a33b8b760ef7b58a7171db39e8","sha256":"6a123d4fbea95ebce55592c746cb72aadd09d44500a87fede4ac37062a9288f3","sha512":"1def72881024a0d472df49b8457dc07ba02331c92c84d15f0dd264ccc8b126edb084305f9b2f33be6c2716d0057bee800067ca09291542772a7c2434d687ed6c","ssdeep":"6144:T9S9munndgbw4GmPoiB0Mqtw0+TCAZ+EDWBUWSTxNHIT8d:w04dZ4G8oeZ+EHXlhIq","tlshash":"5394098e73da74625396f078503f018ba57b28a2f45dc896f189cce41e74a9a0277f7c","first_seen":"2025-12-09T14:48:33.757712Z","last_seen":"2025-12-09T14:48:33.757712Z","times_seen":1,"resource_available":true,"data":null}},"time_used":460,"timings":{"blocked":183,"dns":4,"connect":9,"send":0,"wait":34,"receive":26,"ssl":199},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/templates/popcornie-dark/webfonts/manrope-500.woff2","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:58.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megakino.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:45:04 GMT","end":"Thu, 26 Feb 2026 22:43:37 GMT"},"fingerprint":{"sha1":"39:A6:86:EB:F5:46:7E:D2:2E:2A:00:ED:69:EA:6D:93:45:42:07:C9","sha256":"5E:5C:2F:8A:DB:3F:98:96:80:8E:DB:D8:6E:4A:E7:A6:B6:D2:53:4B:04:6A:33:0C:AF:7F:D3:2F:34:96:6F:F7"}}},"request":{"raw":"GET /templates/popcornie-dark/webfonts/manrope-500.woff2 HTTP/1.1\r\nHost: megakino.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/films/5892-five-nights-at-freddys-2.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yg_token=1765291678.7650d60511aa4d7ae12a98ff0aa9bc9dcc9416046f0ae7703c1c6f12963a6de1; PHPSESSID=tt3vqe33abnk6gekore9ipas5i\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 14:47:58 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 16844\r\nlast-modified: Sat, 20 Mar 2021 10:04:36 GMT\r\npriority: u=3,i=?0\r\netag: \"6055c8b4-41cc\"\r\nexpires: Wed, 02 Dec 2026 18:30:50 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 591427\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qHL8QohxjmzhuvM5VrsqCtqLSWjKO%2FCHy%2F3Fx3pt8Feai0hg3s9NhUERZ9GiTMYaO%2BO1NSgU%2FQ8hXg108%2BoRSiYnFRWgchE9ZA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ab54cfd8c29b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16844,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16844, version 1.0","md5":"f5ba7886a105d85631211a638c9ffe58","sha1":"314fcba3f67c65d11bb034eef1eeff07ec5b7a5e","sha256":"c42c621b98783335b6b3bb5656296c50f6a77737afc1baf1a42db37dd22e02ac","sha512":"3abf37cb9da5fa8ac9ef5dd0c7f969f169991a1356d50988aa52fdeb2233c09ec74afd1290efd9c7a1143c291f03439443170404c71c82884390134eda0dfdf6","ssdeep":"384:xwotBb1Ou4J+1/1ZZXMTRnYH7jUIWkrEBa4crhg0Z3hLWRuW0VP:6o/1OuqaypYHPUIWDBvcV37WRuBP","tlshash":"fc72dfed0692ca93d77b372d389ec9505f74882ec3d3dceb7c78b612667528d8691088","first_seen":"2023-05-08T20:32:58Z","last_seen":"2026-04-04T18:52:02.118164Z","times_seen":832,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/templates/popcornie-dark/images/favicon.svg","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:59.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megakino.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:45:04 GMT","end":"Thu, 26 Feb 2026 22:43:37 GMT"},"fingerprint":{"sha1":"39:A6:86:EB:F5:46:7E:D2:2E:2A:00:ED:69:EA:6D:93:45:42:07:C9","sha256":"5E:5C:2F:8A:DB:3F:98:96:80:8E:DB:D8:6E:4A:E7:A6:B6:D2:53:4B:04:6A:33:0C:AF:7F:D3:2F:34:96:6F:F7"}}},"request":{"raw":"GET /templates/popcornie-dark/images/favicon.svg HTTP/1.1\r\nHost: megakino.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/films/5892-five-nights-at-freddys-2.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yg_token=1765291678.7650d60511aa4d7ae12a98ff0aa9bc9dcc9416046f0ae7703c1c6f12963a6de1; PHPSESSID=tt3vqe33abnk6gekore9ipas5i; _ga_0Q50V6DX0B=GS2.1.s1765291678$o1$g0$t1765291678$j60$l0$h0; _ga=GA1.1.1734660940.1765291679\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 14:47:59 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Fri, 18 Jun 2021 08:21:22 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 02 Dec 2026 18:28:10 GMT\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nage: 591589\r\ncf-cache-status: HIT\r\netag: W/\"60cc5782-1209\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1iDqFoRkf6PF%2Bv6GPO5t2w0TtvqpRFj1wLDQjdyb4BdYjN1GJG%2BT0RD80DXtTUue7SqAYhyX55fkC4bG5ZRadKY696Lu9E60TA%3D%3D\"}]}\r\ncf-ray: 9ab54d056cbdb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4617,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"936cb555cfed264d51267a5ffa0eb0ed","sha1":"d889ddb70e4e6223d4e67d8e77050bbb6bf653f1","sha256":"6765ec1ca8e9169ab4aaf65fe9c0f36f88fc6caa6afc11a38fc2bdae4d2ec7fe","sha512":"7c4be7f3e56e52a823fb0b47032174750e88aeb264b76039750dd9de120b7492e083d9aa9de8f58a69622849b9ec99e3eb1982741fc8c283b7716d8354b5d892","ssdeep":"96:jO9wa2d9qtGjwEqJBSKfeDWfUGd/vY7Yu8dXrwc6Dh84P4pZBm3dk:5jYsZwdm8dXrwhagtk","tlshash":"8a9152b5df3e61bbe1aca3fdcf68543e36be04ff9240873484989b4a04256c7490ca94","first_seen":"2023-10-22T16:18:44Z","last_seen":"2026-04-04T18:52:02.092996Z","times_seen":103,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"watch.gxplayer.xyz/stream/bTN1OC8zLzQ4YmI1OGFkOWZhZDJkZjM0NDFjZDQ0NTJmOWQyNGE2LzI0MHAvMjQwcC5tM3U4P2lkPTI0NTcy","fqdn":"watch.gxplayer.xyz","domain":"gxplayer.xyz","tld":"xyz"},"ip":{"addr":"172.67.148.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://watch.gxplayer.xyz/watch?v=5Z4YVCRW","date":"2025-12-09T14:47:59.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxplayer.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 14:28:46 GMT","end":"Sun, 15 Feb 2026 15:26:02 GMT"},"fingerprint":{"sha1":"14:20:13:71:30:43:F8:E3:C9:A4:EA:55:8D:3C:C1:01:17:F4:FD:8D","sha256":"3D:D4:2A:57:98:06:76:F5:AE:D3:FB:4F:6E:38:2D:39:DC:72:96:9F:06:E7:3E:2D:4F:83:BB:2A:D8:C2:BA:1C"}}},"request":{"raw":"GET /stream/bTN1OC8zLzQ4YmI1OGFkOWZhZDJkZjM0NDFjZDQ0NTJmOWQyNGE2LzI0MHAvMjQwcC5tM3U4P2lkPTI0NTcy HTTP/1.1\r\nHost: watch.gxplayer.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://watch.gxplayer.xyz/watch?v=5Z4YVCRW\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 14:47:59 GMT\r\ncontent-type: application/x-mpegURL\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-robots-tag: noindex,nofollow,noarchive,nosnippet,noydir,noodp\r\nset-cookie: PHPSESSID=pm5r69pacnog567f1d2o8fep84; expires=Tue, 16-Dec-2025 14:47:13 GMT; Max-Age=604800; path=/\nSITE_TOTAL_ID=db450f9b34f6866d9e77458c2f531eeb; Path=/; Max-Age=259200000; HttpOnly\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\naccess-control-allow-origin: *\r\nx-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FKWivlgmVdjOLspUPEgDQKTO71sJen%2BH%2BqMV5uMcNewRENb6lqjHspvdjPVTsDnkU4estjK%2BosThNhm2kKsXmViOv46ZsjelTq8kZTLc%2BNNEIA%3D%3D\"}]}\r\ncf-ray: 9ab54d067c325fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95425,"size_decoded":0,"mime_type":"application/x-mpegurl","magic":"M3U playlist, ASCII text","md5":"e90ba70ef0ceb706ed28ab071538d231","sha1":"5106135eb4e387f0130ec193a75eb5c18180a73b","sha256":"15c1f6292afdd7c42ae30ac434acf382e623556ed1811350ba88db63df57b4ab","sha512":"16e9941201423311f262e6795bb5594b70c03e282c8449bd578fb0e422bb33a0ccc6e1fa429212bd9da125670b4f21d7e766d1ec74d6a2d573e72b0071048127","ssdeep":"1536:w0BbEGv8sPyMPLXNXwxLSVGXMSPTkQPA5CaJo04NoAMYmjdiq1c7ytGFqvSypiA:wC4i95WjWzd","tlshash":"a3931f9f8371f1043a9e5c549eb921c86371efe50d8aeac6897939ffc0edd211a6d240","first_seen":"2025-12-09T14:48:33.762971Z","last_seen":"2025-12-09T14:48:33.762971Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/engine/modules/antibot/antibot.php","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:58.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megakino.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:45:04 GMT","end":"Thu, 26 Feb 2026 22:43:37 GMT"},"fingerprint":{"sha1":"39:A6:86:EB:F5:46:7E:D2:2E:2A:00:ED:69:EA:6D:93:45:42:07:C9","sha256":"5E:5C:2F:8A:DB:3F:98:96:80:8E:DB:D8:6E:4A:E7:A6:B6:D2:53:4B:04:6A:33:0C:AF:7F:D3:2F:34:96:6F:F7"}}},"request":{"raw":"GET /engine/modules/antibot/antibot.php HTTP/1.1\r\nHost: megakino.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/films/5892-five-nights-at-freddys-2.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yg_token=1765291678.7650d60511aa4d7ae12a98ff0aa9bc9dcc9416046f0ae7703c1c6f12963a6de1; PHPSESSID=tt3vqe33abnk6gekore9ipas5i\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 14:47:58 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nexpires: Mon, 26 Jul 1997 05:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mhCo%2BcQdGfOeDFVbR%2BVMaHy4J306Adgbh%2Bu%2FO6k27KMt5BfHZHC5z6Tg%2BtyPaDUjrPAomSwFF4ztKFaGY5n%2B7fPoWmbNb5UqOQ%3D%3D\"}]}\r\ncf-ray: 9ab54cfdac2fb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5708,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 160x80, components 3","md5":"785510eec5913709aebcf843ed90b0bf","sha1":"3881e9f76176d984967c4056048b4840ad96eba1","sha256":"dcd6fe11339107ced4c998d34ca0efbf4a1d14f45a431101efe994ca666571bd","sha512":"185e2f393a13b6719335b2ce34785ccea38a80ad56fca13280febe910a25fcc2e826961a44e02c9aeee55c78dfb70d0a267c9292f4853447e5497e2b08dc5363","ssdeep":"96:XE1Uh4w5Nk0u+m813a8jga2YkI86eTg5uEDLVLRCwYKYUJTGW17g6mAIOCh1u:XtB5N9uWnCjTtEDLJRDBYiGeg6mAIOwu","tlshash":"9fc19ef8eb43b3d1753885b6617b0c81e6f91bc228a67d4bb7dd4b0106d1d94c942198","first_seen":"2025-12-09T14:48:33.765172Z","last_seen":"2025-12-09T14:48:33.765172Z","times_seen":1,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/templates/popcornie-dark/css/common.css","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:58.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megakino.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:45:04 GMT","end":"Thu, 26 Feb 2026 22:43:37 GMT"},"fingerprint":{"sha1":"39:A6:86:EB:F5:46:7E:D2:2E:2A:00:ED:69:EA:6D:93:45:42:07:C9","sha256":"5E:5C:2F:8A:DB:3F:98:96:80:8E:DB:D8:6E:4A:E7:A6:B6:D2:53:4B:04:6A:33:0C:AF:7F:D3:2F:34:96:6F:F7"}}},"request":{"raw":"GET /templates/popcornie-dark/css/common.css HTTP/1.1\r\nHost: megakino.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/films/5892-five-nights-at-freddys-2.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yg_token=1765291678.7650d60511aa4d7ae12a98ff0aa9bc9dcc9416046f0ae7703c1c6f12963a6de1; PHPSESSID=tt3vqe33abnk6gekore9ipas5i\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 14:47:58 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Sun, 27 Jun 2021 10:09:48 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 02 Dec 2026 18:28:06 GMT\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nage: 591592\r\ncf-cache-status: HIT\r\netag: W/\"60d84e6c-1bfb\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6RP44snZO1Aq%2FtdAJVfSifbKcxpD2bVHYesC6BZasn9bgCQ5Fualnvgbe%2BgF206Dv3zlsasONNehi8Yn8pzw4oLOrPCIxrf5FA%3D%3D\"}]}\r\ncf-ray: 9ab54cfd7c24b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7163,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"25bd6aea7158ddfc7ebc1a44a481c232","sha1":"9532b20b6175d40fdc4bafc76a983cde8a983878","sha256":"fa66b17a71aa490bb5df2dbe3cf3ee755630b55ee02c920c1f37553504baab8e","sha512":"77af02a3942e93fea70ad7c0fe4354774004e9311c4abaf7a5edcf4cb8a021a1c4df966db15235d98f5b88939b3e5a531885e37b15a2ac27c20a35176b056efb","ssdeep":"192:g4hI3Je80ZD6o0/Fyk0nTgg/e5RJoFCZD4:uJh0ZsFyLnTp/r+c","tlshash":"53e192302e037204d75bd4697ab69f4dce1f9154d10321f962e211ae96cf4aa0abe3de","first_seen":"2025-06-21T21:21:19.379256Z","last_seen":"2026-04-04T18:52:02.078023Z","times_seen":44,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cvt-s1.adangle.online/b/data","fqdn":"cvt-s1.adangle.online","domain":"adangle.online","tld":"online"},"ip":{"addr":"104.21.67.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:59.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adangle.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 14:44:23 GMT","end":"Sat, 14 Feb 2026 15:42:44 GMT"},"fingerprint":{"sha1":"10:84:52:BE:3B:06:BB:83:10:34:A8:34:3B:44:23:A3:52:6E:4C:B8","sha256":"ED:80:AC:4C:84:CA:A5:1F:E4:0A:0F:41:18:83:B0:8B:F4:F3:02:0C:5C:45:D6:C7:61:35:FC:5C:0F:6F:D5:4E"}}},"request":{"raw":"POST /b/data HTTP/1.1\r\nHost: cvt-s1.adangle.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/\r\nContent-Type: text/plain\r\nContent-Length: 271\r\nOrigin: https://megakino.cx\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":271,"data":"[{\"cp\":{\"host\":\"39f199aed1bd4b98a92539a0e4e0fe3b%7Cmegakino.ink\",\"domain\":\"megakino.ink\"},\"key\":\"db6f7550-dc92-46e9-b50b-ea0dda9dfd40\"},{\"cp\":{\"host\":\"39f199aed1bd4b98a92539a0e4e0fe3b%7Cmegakino.ink\",\"domain\":\"megakino.ink\"},\"key\":\"a194e23a-9276-4eae-aab3-1b19d679a85b\"}]"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 14:47:59 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: https://megakino.cx\r\naccess-control-allow-methods: GET, POST\r\naccess-control-allow-credentials: true\r\nset-cookie: uid=caa2abc8fb18ac4803bfb5b333280a42; Path=/; Domain=.adangle.online; SameSite=Lax\r\nuwebsockets: 20\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x9aqQi%2FyTHBpjHz6RzDUYvRqyOXVimrNYeNFf6D6wHnhEvDy0DyqriyD%2FSsaYsyd5k3ne%2F7IdiIqJMulaQD5xXuX891LkzcglQeEGjU8my8aMYM%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ab54d03da5eb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":108,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e9abef76e1092069947e59e466dc23ec","sha1":"973ea178a607a9b862cc91b4329ffc4cf6c3456c","sha256":"98b754dd53bcaa94dbe930863ebadddd4c3985842c5475425f2f5c040e6948bf","sha512":"999a193dbd5c9bb3f8f039bedd2821f6288be030e3d0ff0c3ce8f85522c9bbe3e650aaf64d1bfe78b7fd56de1ccf030394598a533037361e1dcdbfd75b75c574","ssdeep":"","tlshash":"7cb012d4dc4c21f7cee5a01b98bcbd14c9dfa162d8151958f70509d81ffa38d056014b","first_seen":"2025-12-09T14:48:33.768265Z","last_seen":"2025-12-09T14:48:33.768265Z","times_seen":1,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":61,"dns":35,"connect":1,"send":0,"wait":144,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/uploads/posts/2025-12/31df9e6c-85e1-4e3f-93ba-0bb0fa217dd3.webp","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:59.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megakino.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:45:04 GMT","end":"Thu, 26 Feb 2026 22:43:37 GMT"},"fingerprint":{"sha1":"39:A6:86:EB:F5:46:7E:D2:2E:2A:00:ED:69:EA:6D:93:45:42:07:C9","sha256":"5E:5C:2F:8A:DB:3F:98:96:80:8E:DB:D8:6E:4A:E7:A6:B6:D2:53:4B:04:6A:33:0C:AF:7F:D3:2F:34:96:6F:F7"}}},"request":{"raw":"GET /uploads/posts/2025-12/31df9e6c-85e1-4e3f-93ba-0bb0fa217dd3.webp HTTP/1.1\r\nHost: megakino.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/films/5892-five-nights-at-freddys-2.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yg_token=1765291678.7650d60511aa4d7ae12a98ff0aa9bc9dcc9416046f0ae7703c1c6f12963a6de1; PHPSESSID=tt3vqe33abnk6gekore9ipas5i; _ga_0Q50V6DX0B=GS2.1.s1765291678$o1$g0$t1765291678$j60$l0$h0; _ga=GA1.1.1734660940.1765291679\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 14:47:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23414\r\nlast-modified: Fri, 05 Dec 2025 22:31:49 GMT\r\npriority: u=4,i=?0\r\netag: \"69335d55-5b76\"\r\nexpires: Sun, 06 Dec 2026 02:28:35 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 303563\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GbZ3Ph8X8UX4QYNRVdw17wVxCxRVSqEVzSHKYX7PmO4SQtldMo65mq%2FmumPnDOkq5t%2BIyuW0HPudKe6a%2BD%2BJ1VA%2BXU3t33aaAA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ab54d042caab500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23414,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x675, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fdf24ea3882d73567aa1e4c6e92e78e7","sha1":"e8171a246093acf491808b8493575d52f2c3a8dc","sha256":"6e8372b4fb5947d6b2eb282269280fa5e3c6dd97528a26cd2ed5974f4385ed94","sha512":"385afd3c2e5f7589c2b18985e661786c1eac7e5d46407c24caedf4bf756794eafd0fcf8d96ff5575e5d4cf72f8c7b3d58a3e92789ad3c6980a9ab4797beadbf4","ssdeep":"384:XhhhhhhhhhhhVSqmwjDvqM7phhhhhhWAPff+/xfhQqGl0vrAYasCpazAFZzEcVYT:XhhhhhhhhhhhVB3DvqcphhhhhhWAPfmN","tlshash":"63b2df4ffc3446d9c4d4c3f789f218cd07cab09874e12b6ea90b62dd4e92608962d9e3","first_seen":"2025-12-09T14:48:33.770795Z","last_seen":"2025-12-09T14:48:33.770795Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/templates/popcornie-dark/webfonts/fa-light-300.woff2","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:58.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megakino.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:45:04 GMT","end":"Thu, 26 Feb 2026 22:43:37 GMT"},"fingerprint":{"sha1":"39:A6:86:EB:F5:46:7E:D2:2E:2A:00:ED:69:EA:6D:93:45:42:07:C9","sha256":"5E:5C:2F:8A:DB:3F:98:96:80:8E:DB:D8:6E:4A:E7:A6:B6:D2:53:4B:04:6A:33:0C:AF:7F:D3:2F:34:96:6F:F7"}}},"request":{"raw":"GET /templates/popcornie-dark/webfonts/fa-light-300.woff2 HTTP/1.1\r\nHost: megakino.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/films/5892-five-nights-at-freddys-2.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yg_token=1765291678.7650d60511aa4d7ae12a98ff0aa9bc9dcc9416046f0ae7703c1c6f12963a6de1; PHPSESSID=tt3vqe33abnk6gekore9ipas5i\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 14:47:58 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 185360\r\nlast-modified: Tue, 10 Dec 2019 08:52:13 GMT\r\npriority: u=3,i=?0\r\netag: \"5def5cbd-2d410\"\r\nexpires: Wed, 02 Dec 2026 18:30:51 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 591427\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m9xJq%2F%2BsfrkBXNWp3xoyK5o8vxpV%2FIthRl6We4RTTjPOz%2F%2BOq58KFLySdK8WgD29AYLYNak29BP7Y1oRNdmmKZ6%2FnTs17pdYDw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ab54cfd8c2bb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":185360,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 185360, version 330.-16253","md5":"86683af0360cc024c998f00de4c43e9e","sha1":"1fcee9aad4deb962910abe1db91dc02b822124b5","sha256":"2dc0e215dc2374fc5cdacf24707fabeabc2e4193e12ec9c0203ac9a52a5daf3e","sha512":"9523889c06752c7859507dc064de9cd5db06959caa4e3d01cdd1e661952e50a8fd1183d8dc0e636469f1541eab129f2f005225a2ec4e4f850e569eac46d84f79","ssdeep":"3072:OoCxquaClGde+Rb/2HBkq9QpwX1ZeS1uD8O5/Q9+0TKwXrxh5mvA6WkRz1XwlFeg:OJou/0de+J/23QpwXWZgOBQ9+YKaxev0","tlshash":"16041269b40ca494447badf5608bac1feac9a25040b6fc0d36368fab7b4d157d02c73c","first_seen":"2023-04-06T18:45:25Z","last_seen":"2026-04-05T12:22:30.616843Z","times_seen":1493,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/templates/popcornie-dark/lazydev/dle_filter/assets/dle_filter.css","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:58.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megakino.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:45:04 GMT","end":"Thu, 26 Feb 2026 22:43:37 GMT"},"fingerprint":{"sha1":"39:A6:86:EB:F5:46:7E:D2:2E:2A:00:ED:69:EA:6D:93:45:42:07:C9","sha256":"5E:5C:2F:8A:DB:3F:98:96:80:8E:DB:D8:6E:4A:E7:A6:B6:D2:53:4B:04:6A:33:0C:AF:7F:D3:2F:34:96:6F:F7"}}},"request":{"raw":"GET /templates/popcornie-dark/lazydev/dle_filter/assets/dle_filter.css HTTP/1.1\r\nHost: megakino.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/films/5892-five-nights-at-freddys-2.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yg_token=1765291678.7650d60511aa4d7ae12a98ff0aa9bc9dcc9416046f0ae7703c1c6f12963a6de1; PHPSESSID=tt3vqe33abnk6gekore9ipas5i\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 14:47:58 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Wed, 05 Jan 2022 09:17:55 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 02 Dec 2026 18:28:08 GMT\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nage: 591589\r\ncf-cache-status: HIT\r\netag: W/\"61d56243-a775\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5DGZChaAF5%2F7%2FYZI67VBNaRI6CNsMQgnjXnMzOQ89O%2F2XvAhS22AvyNiQacpz6UggUEdDx%2FT7vv6GsS4Fo%2Fe5fgQKDZovZpRpA%3D%3D\"}]}\r\ncf-ray: 9ab54cfdbc34b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42869,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (15199)","md5":"119f413ec95972a0624554ff4fa56b21","sha1":"20c40d5669087fae0cd12e19c4c0b60609259fc9","sha256":"cf4d4dd4c7f8ed5f29fe717e8c7782a88eb49154e407fb42aa8be4e3f93d1a35","sha512":"720064875b5d47abc26b76a6b5b2b93ffd2aa352f27aea49891165867e00a88be6284aaac72b917546bea0b227b3b2432de9e8e134d69fbfa6f6623defc69993","ssdeep":"192:6fqvPFKhjm4746mShSNAmmfXYHyZLTUEJkbGzd7b2wGk0Yh+F+wfF+dF+IF+3iPY:AcPCxZ7+EwsSBEXRWZcN9doG1htEbj","tlshash":"48139475d6d02029b47bc4ba5590ae8e3635fda3d4120fadf95ff264c6820e73483b4a","first_seen":"2025-04-19T08:48:21.833077Z","last_seen":"2026-04-04T18:52:02.04309Z","times_seen":142,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"watch.gxplayer.xyz/images/loading.svg","fqdn":"watch.gxplayer.xyz","domain":"gxplayer.xyz","tld":"xyz"},"ip":{"addr":"172.67.148.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://watch.gxplayer.xyz/watch?v=5Z4YVCRW","date":"2025-12-09T14:47:59.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxplayer.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 14:28:46 GMT","end":"Sun, 15 Feb 2026 15:26:02 GMT"},"fingerprint":{"sha1":"14:20:13:71:30:43:F8:E3:C9:A4:EA:55:8D:3C:C1:01:17:F4:FD:8D","sha256":"3D:D4:2A:57:98:06:76:F5:AE:D3:FB:4F:6E:38:2D:39:DC:72:96:9F:06:E7:3E:2D:4F:83:BB:2A:D8:C2:BA:1C"}}},"request":{"raw":"GET /images/loading.svg HTTP/1.1\r\nHost: watch.gxplayer.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://watch.gxplayer.xyz/watch?v=5Z4YVCRW\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 14:47:59 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 05 Apr 2022 16:16:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"624c6b68-d53\"\r\ncontent-encoding: gzip\r\nx-cache: EXPIRED\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dELRxmRB2kijtMQ%2Be%2FRlhjB4O9TJ0b7KAdNs9S72V%2BkyE6Nhbu4aYp7Vbhaz2w4RBKqUbk5TAanXLjrYOBVSOHrwIAH%2B7iLwjDk9gPKAH%2FMibg%3D%3D\"}]}\r\ncf-ray: 9ab54d0258fd5fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3411,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dd8d60fc7dfc30204b321825808e0169","sha1":"05af67fd8410200d9a1a51fc0790f89d5309346a","sha256":"60d458753688ba0da55c0361a3d03fd8e69ef00dfd98151bd9585a345c4db082","sha512":"0ac796226ba0ccb4655f1e16823a61841b8338b82560e393c991d456c3a24b325eebe080b7cefbd487ee86451a26c4ee153d5fc38d8f84706dff6e73a1b8d717","ssdeep":"","tlshash":"7f61ac35fe44880f8f0453aaf34d0401a811e2675f4e8ca8b5c2af3b5b5899b9c7d62f","first_seen":"2023-05-09T20:02:13Z","last_seen":"2026-04-05T00:03:45.009642Z","times_seen":211,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/templates/popcornie-dark/css/styles.css","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:58.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megakino.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:45:04 GMT","end":"Thu, 26 Feb 2026 22:43:37 GMT"},"fingerprint":{"sha1":"39:A6:86:EB:F5:46:7E:D2:2E:2A:00:ED:69:EA:6D:93:45:42:07:C9","sha256":"5E:5C:2F:8A:DB:3F:98:96:80:8E:DB:D8:6E:4A:E7:A6:B6:D2:53:4B:04:6A:33:0C:AF:7F:D3:2F:34:96:6F:F7"}}},"request":{"raw":"GET /templates/popcornie-dark/css/styles.css HTTP/1.1\r\nHost: megakino.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/films/5892-five-nights-at-freddys-2.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yg_token=1765291678.7650d60511aa4d7ae12a98ff0aa9bc9dcc9416046f0ae7703c1c6f12963a6de1; PHPSESSID=tt3vqe33abnk6gekore9ipas5i\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 14:47:58 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Sat, 19 Apr 2025 17:25:44 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 02 Dec 2026 18:28:06 GMT\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nage: 591591\r\ncf-cache-status: HIT\r\netag: W/\"6803dc98-91df\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0dHXPGfJoGH2HpqjzySLRvv7J7r4LE5qX2UTaIrv2nORqY%2F0jS%2BePQB5LH9tIvR9kATYjymoOR02o%2BzHaTSKZ1IVKCMO2D0zQg%3D%3D\"}]}\r\ncf-ray: 9ab54cfd8c25b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37343,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"a50301ccf048813905fd74a24be7e968","sha1":"a1fa46087d3b63986ba44eb4a84e58fea42fda2d","sha256":"b9cf7883fc81f0959092c6dfc2440cf5313206f166a182058b8afc80bfeea338","sha512":"d08a1677ce206ff9060c6f21c100cf7a293eb42c460633826e2ed50cdba8041f20ca6c4c225ddb2c1c283be48cfde1b6cc98b4e9bd9fb3d7a9f8dfb9f016029e","ssdeep":"768:xm/tbQRTGonwAyeq3LPfIkl0Qw2t6LAr89M:xm/qTGmwiuIu0PWu2","tlshash":"a9f274216e242159f61bf166bef29f5aeb1fa006d20105fcb8d53404c2ce67b427e79e","first_seen":"2025-06-21T21:21:19.383644Z","last_seen":"2026-04-04T18:52:02.065209Z","times_seen":44,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/uploads/posts/2022-01/starwars.webp","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:59.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megakino.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:45:04 GMT","end":"Thu, 26 Feb 2026 22:43:37 GMT"},"fingerprint":{"sha1":"39:A6:86:EB:F5:46:7E:D2:2E:2A:00:ED:69:EA:6D:93:45:42:07:C9","sha256":"5E:5C:2F:8A:DB:3F:98:96:80:8E:DB:D8:6E:4A:E7:A6:B6:D2:53:4B:04:6A:33:0C:AF:7F:D3:2F:34:96:6F:F7"}}},"request":{"raw":"GET /uploads/posts/2022-01/starwars.webp HTTP/1.1\r\nHost: megakino.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/films/5892-five-nights-at-freddys-2.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yg_token=1765291678.7650d60511aa4d7ae12a98ff0aa9bc9dcc9416046f0ae7703c1c6f12963a6de1; PHPSESSID=tt3vqe33abnk6gekore9ipas5i; _ga_0Q50V6DX0B=GS2.1.s1765291678$o1$g0$t1765291678$j60$l0$h0; _ga=GA1.1.1734660940.1765291679\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 14:47:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 47018\r\nlast-modified: Sat, 19 Apr 2025 13:50:25 GMT\r\npriority: u=4,i=?0\r\netag: \"6803aa21-b7aa\"\r\nexpires: Wed, 02 Dec 2026 18:28:18 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 591580\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rzYDlgHyDgpFQjuRY%2FYiSEdiNnrRwK2BRd%2B13OKeFfNe62Lcxp0PMZZVDCTVcxTzPfJYMSKCoONsfMvDsrWUm1ysKnlmZRb9jg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ab54d040ca6b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47018,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 860x399, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8556fa3b9fa7910696e442d5ce673f7a","sha1":"e64f665ffa9a09422657cffbf432346d342d823a","sha256":"d35533f0dd099a3a84f2fda6ffeb42fc90752429eb030bf593f0a12f551a8af2","sha512":"73b5463e2e557e808e8461452f8e6efe6c454d26134901297fa970a5603ef4ea5c66b77a163fa388a284e9ab6bc6632a3b6ee53f0698fb20187779b7a462d31a","ssdeep":"768:ig10tCAlp9V9/QG2NnSG8ht+RMPxyhHlpizEuJ5/UvM80gVUg9RR:v04AlkVNv8nGM8lO5/4rUgt","tlshash":"9d23f22cc234631964f607cb0de07da05c6394bee1564e04867e9d9faec385f2e9560e","first_seen":"2025-06-21T21:21:19.402222Z","last_seen":"2026-04-04T18:52:02.067447Z","times_seen":21,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/uploads/posts/2022-01/forsag.webp","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:59.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megakino.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:45:04 GMT","end":"Thu, 26 Feb 2026 22:43:37 GMT"},"fingerprint":{"sha1":"39:A6:86:EB:F5:46:7E:D2:2E:2A:00:ED:69:EA:6D:93:45:42:07:C9","sha256":"5E:5C:2F:8A:DB:3F:98:96:80:8E:DB:D8:6E:4A:E7:A6:B6:D2:53:4B:04:6A:33:0C:AF:7F:D3:2F:34:96:6F:F7"}}},"request":{"raw":"GET /uploads/posts/2022-01/forsag.webp HTTP/1.1\r\nHost: megakino.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/films/5892-five-nights-at-freddys-2.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yg_token=1765291678.7650d60511aa4d7ae12a98ff0aa9bc9dcc9416046f0ae7703c1c6f12963a6de1; PHPSESSID=tt3vqe33abnk6gekore9ipas5i; _ga_0Q50V6DX0B=GS2.1.s1765291678$o1$g0$t1765291678$j60$l0$h0; _ga=GA1.1.1734660940.1765291679\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 14:47:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22212\r\nlast-modified: Sat, 19 Apr 2025 13:50:25 GMT\r\npriority: u=4,i=?0\r\netag: \"6803aa21-56c4\"\r\nexpires: Wed, 02 Dec 2026 18:28:18 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 591580\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OC6UTGNvKuGTTEaOUtiFXLZspe5VT98iOQg8f5dPnB5HnbVmFwurYC6kJZufkEPPqwZXJlPsQDDL47MCPO28VWh3MSAxmjqOVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ab54d040ca9b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22212,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 860x291, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4174925f8a0bcbb71d3db372c00a6b62","sha1":"1ec1fa13854395299683ccfbc525f9b86bb25114","sha256":"87fa09374888013a2042946b51af4ef5f30b85898d454b7a316484d91e62aa74","sha512":"e1e3e879635b893953b0f61725c647a92f7b8c16c0985125eec2a1f65daec6f89f4fe8bc0c79651435a908ea2b22bf34f5daca526b9c79bcadade1c916aadc56","ssdeep":"384:P5xS88QbMUOCM3XiDkvaai/686r+Fsv9dZGu02yrlwVApXl8K7WiZ76In9l:B38EOt3XNvNX+iZGzbOqTiI9l","tlshash":"e2a2e04836a4de61a448fc7f085018b1e6223cde73a8947403a9e6bd24f650e4f4d3ba","first_seen":"2025-06-21T21:21:19.412201Z","last_seen":"2026-04-04T18:52:02.098389Z","times_seen":21,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"watch.gxplayer.xyz/m3u8/3/48bb58ad9fad2df3441cd4452f9d24a6/thumbnails.vtt","fqdn":"watch.gxplayer.xyz","domain":"gxplayer.xyz","tld":"xyz"},"ip":{"addr":"172.67.148.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://watch.gxplayer.xyz/watch?v=5Z4YVCRW","date":"2025-12-09T14:47:59.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxplayer.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 14:28:46 GMT","end":"Sun, 15 Feb 2026 15:26:02 GMT"},"fingerprint":{"sha1":"14:20:13:71:30:43:F8:E3:C9:A4:EA:55:8D:3C:C1:01:17:F4:FD:8D","sha256":"3D:D4:2A:57:98:06:76:F5:AE:D3:FB:4F:6E:38:2D:39:DC:72:96:9F:06:E7:3E:2D:4F:83:BB:2A:D8:C2:BA:1C"}}},"request":{"raw":"GET /m3u8/3/48bb58ad9fad2df3441cd4452f9d24a6/thumbnails.vtt HTTP/1.1\r\nHost: watch.gxplayer.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://watch.gxplayer.xyz/watch?v=5Z4YVCRW\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 14:47:59 GMT\r\ncontent-type: application/x-mpegURL\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-robots-tag: noindex,nofollow,noarchive,nosnippet,noydir,noodp\r\nset-cookie: PHPSESSID=bj7dap5bml7es8l7idmhmj4c46; expires=Tue, 16-Dec-2025 14:47:53 GMT; Max-Age=604800; path=/\nSITE_TOTAL_ID=29afe20ad22bff800fe00d65bbdfafae; Path=/; Max-Age=259200000; HttpOnly\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ryhP14TnLiLd1ns8fX%2FMHLysZ993GNaQqWq857oBqENcME2YpTsYAnKEItzQLDXF%2FrMCmyenV%2BIeQIQBWBosR0ONfEv%2F1cC%2FxFUsD5eO0KJ9Mw%3D%3D\"}]}\r\ncf-ray: 9ab54d058b755fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":58187,"size_decoded":0,"mime_type":"application/x-mpegurl","magic":"HTML document, ASCII text, with very long lines (56756)","md5":"aedbc1b9ade8a946486c724eb626d2ba","sha1":"c1c8f5988c2baf5a69b0f7834bbbceb8ad78f788","sha256":"5be36296c1b614ad3ecc299493cba8db4d6662d683e7a47f08a0b31b7ce17da0","sha512":"5dc2f56f20a50131cc436cdef561c395ad22f1f14ecdada53768e613bac36f1fe75e3a587cbd4e97fd39944ad30540a320ce667d8eb8208255d393dc659fb0bf","ssdeep":"768:cHJYDDQHVZHIs91TXESJBjgBSp00yCqJ3Z+IYM3WiesRQiULO0bpD9tcNQEfdom9:cmDD6oeFUycwpk06hWp1b99c7V3","tlshash":"6e43021803de40a2dd9d78d9426f2f3d842a1863da1c94bd1f5b6df0cb0d8a4667f2e9","first_seen":"2025-09-18T04:22:02.004691Z","last_seen":"2026-04-04T23:54:11.221421Z","times_seen":422,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"watch.gxplayer.xyz/stream/bTN1OC8zLzQ4YmI1OGFkOWZhZDJkZjM0NDFjZDQ0NTJmOWQyNGE2LzcyMHAvNzIwcC5tM3U4P2lkPTI0NTcy","fqdn":"watch.gxplayer.xyz","domain":"gxplayer.xyz","tld":"xyz"},"ip":{"addr":"172.67.148.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://watch.gxplayer.xyz/watch?v=5Z4YVCRW","date":"2025-12-09T14:48:00.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxplayer.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 14:28:46 GMT","end":"Sun, 15 Feb 2026 15:26:02 GMT"},"fingerprint":{"sha1":"14:20:13:71:30:43:F8:E3:C9:A4:EA:55:8D:3C:C1:01:17:F4:FD:8D","sha256":"3D:D4:2A:57:98:06:76:F5:AE:D3:FB:4F:6E:38:2D:39:DC:72:96:9F:06:E7:3E:2D:4F:83:BB:2A:D8:C2:BA:1C"}}},"request":{"raw":"GET /stream/bTN1OC8zLzQ4YmI1OGFkOWZhZDJkZjM0NDFjZDQ0NTJmOWQyNGE2LzcyMHAvNzIwcC5tM3U4P2lkPTI0NTcy HTTP/1.1\r\nHost: watch.gxplayer.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://watch.gxplayer.xyz/watch?v=5Z4YVCRW\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 14:48:00 GMT\r\ncontent-type: application/x-mpegURL\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-robots-tag: noindex,nofollow,noarchive,nosnippet,noydir,noodp\r\nset-cookie: PHPSESSID=b1ll405afj736ohlt2e2btlcv6; expires=Tue, 16-Dec-2025 14:47:40 GMT; Max-Age=604800; path=/\nSITE_TOTAL_ID=135699b02a0657770f347be0d99ee79e; Path=/; Max-Age=259200000; HttpOnly\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\naccess-control-allow-origin: *\r\nx-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FvWC15Fy1PpUjYEEkGEMo0tfgvqQaSXip%2F3uRW4n337dZFKjqNZ%2F8v%2Bh%2BHIIeHeysDuIvA13UKhP1b2mF5v%2BpF67f%2BSTHBt9uKBf0c8bIYh83g%3D%3D\"}]}\r\ncf-ray: 9ab54d087df45fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95429,"size_decoded":0,"mime_type":"application/x-mpegurl","magic":"M3U playlist, ASCII text","md5":"94e0a1f56ae719490d3f42e6da475144","sha1":"276cd14595f2ad88e2c2bfb62c2eaf6f68bd7e2e","sha256":"fcf8da003a2b214fdd36b86fcc26575fe66235fda3a60b2c9d8ead0d43a425be","sha512":"841105ee1cfc7b879cf2492754d2a37d651b9a2df0943df8fa29b668acfa141c096cf54cba15de32c5f57d6ade90abbd0ff5f67615f14d4e024ffd54ce0f91de","ssdeep":"1536:wz/FwR0UKpbE0yGzGqTai3JgW3j6fa4KoXUrRc0nE9TU/IcmIfsnQS:wz93PPJcTUK0YavS","tlshash":"4293219fc371f1043a9e5c549eb921c8a372efe50d8aeac6457939fec0edd211a2d250","first_seen":"2025-12-09T14:48:33.781592Z","last_seen":"2025-12-09T14:48:33.781592Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/films/5892-five-nights-at-freddys-2.html","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-09T14:47:57.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megakino.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:45:04 GMT","end":"Thu, 26 Feb 2026 22:43:37 GMT"},"fingerprint":{"sha1":"39:A6:86:EB:F5:46:7E:D2:2E:2A:00:ED:69:EA:6D:93:45:42:07:C9","sha256":"5E:5C:2F:8A:DB:3F:98:96:80:8E:DB:D8:6E:4A:E7:A6:B6:D2:53:4B:04:6A:33:0C:AF:7F:D3:2F:34:96:6F:F7"}}},"request":{"raw":"GET /films/5892-five-nights-at-freddys-2.html HTTP/1.1\r\nHost: megakino.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 14:47:57 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-store\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HQi3Uc0w%2F1513JpYsYasCmhufq5FZkQE9V4ttS8z0wahRAPM2xQV7BTIf4fj4o%2FOL8o6yFdjO%2FTysc9%2F46e59B3qIlQejDT9tg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9ab54cf95c2b0b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":262,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"dcde2e45ee57bbc3a9cfd7439fbb6d20","sha1":"b8a59f57f3e2be7d675a3c1bbce1ac7d1d855606","sha256":"22359e6bf285523bacc05f89d3e4dac4856fff5fdc5068acaf7c8908e84631fd","sha512":"b66154bbaef056f3ae397b987df97b7fb29f04c069c107921759f05319b81e99b3ecf5bfafbe763b01655819f1c8819eb549adb46a4790960ed6619f85858f45","ssdeep":"","tlshash":"d1d02e837898c20219a3ea72caa3e00dd12730835c90c0553a0c34a65fb83cd0c0bac8","first_seen":"2025-12-09T14:48:33.785605Z","last_seen":"2025-12-09T14:48:33.785605Z","times_seen":1,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":17,"dns":1,"connect":1,"send":0,"wait":159,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/films/5892-five-nights-at-freddys-2.html","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-09T14:47:58.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megakino.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:45:04 GMT","end":"Thu, 26 Feb 2026 22:43:37 GMT"},"fingerprint":{"sha1":"39:A6:86:EB:F5:46:7E:D2:2E:2A:00:ED:69:EA:6D:93:45:42:07:C9","sha256":"5E:5C:2F:8A:DB:3F:98:96:80:8E:DB:D8:6E:4A:E7:A6:B6:D2:53:4B:04:6A:33:0C:AF:7F:D3:2F:34:96:6F:F7"}}},"request":{"raw":"GET /films/5892-five-nights-at-freddys-2.html HTTP/1.1\r\nHost: megakino.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/films/5892-five-nights-at-freddys-2.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yg_token=1765291678.7650d60511aa4d7ae12a98ff0aa9bc9dcc9416046f0ae7703c1c6f12963a6de1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 14:47:58 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=1,i=?0\r\nset-cookie: PHPSESSID=tt3vqe33abnk6gekore9ipas5i; path=/; secure; HttpOnly\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlast-modified: Fri, 05 Dec 2025 23:38:24 +0100 GMT\r\ncontent-encoding: br\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4UBa%2FJyDtm44TAu3PugzEc%2FlxKLuByCKEyRyY4LWFHSp9epCHiatfBICeWbZQtx%2F%2Fz28WI6AWJP7y9Rf8W3tieYescQiTGcLQw%3D%3D\"}]}\r\ncf-ray: 9ab54cfbcc15b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":40568,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4054), with CRLF, LF line terminators","md5":"316d83c9de0516e692ee70c4831981c3","sha1":"7ffb6050afd2ac25d8bc04e23b6f80f2fd637f28","sha256":"c2385f22189d0754519e15e769dc8fd0b741ed2809d12dd33dd946976ec4976e","sha512":"c843ec7a693d7cf02592fe4ac05aef7b103d50dafc0c0f8f4ec6dfc018249ea9c527d9b7909dd6fec1a3b816b94588b8ec9c8a80a52f6ddb5a83c902340dc775","ssdeep":"768:k/mt1T5IIut94cW7fiPGnQvTeByoTbHnq:4mT5IX9r+sipbHnq","tlshash":"7c030931a0b81d76126362c1e4593b5ea5e7c917d9028980f6fecb24afc2e525a173cf","first_seen":"2025-12-09T14:48:33.787875Z","last_seen":"2025-12-09T14:48:33.787875Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":227,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"glxpl03.com/ts/L3VlSnhOcG4zUDUrS3pXVjF6V1V5a3U1N0EyM1RaazRmUEd0NGQzeTRTSGZ3NlJSNlZ4MFpWaG1KVnk1dVlzbQ%25253D%25253D.html%26id%3D24572","fqdn":"glxpl03.com","domain":"glxpl03.com","tld":"com"},"ip":{"addr":"104.21.91.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://watch.gxplayer.xyz/watch?v=5Z4YVCRW","date":"2025-12-09T14:48:00.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glxpl03.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Dec 2025 14:54:45 GMT","end":"Sat, 07 Mar 2026 15:52:22 GMT"},"fingerprint":{"sha1":"92:40:35:97:2D:CD:A8:CB:46:91:F8:3F:C3:33:53:AC:4E:64:B6:07","sha256":"CF:53:49:93:C4:2B:CA:63:53:94:47:E6:96:B5:CB:0E:D4:84:90:E0:31:D3:31:76:38:63:88:0F:A4:D4:05:5C"}}},"request":{"raw":"GET /ts/L3VlSnhOcG4zUDUrS3pXVjF6V1V5a3U1N0EyM1RaazRmUEd0NGQzeTRTSGZ3NlJSNlZ4MFpWaG1KVnk1dVlzbQ%25253D%25253D.html%26id%3D24572 HTTP/1.1\r\nHost: glxpl03.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://watch.gxplayer.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://watch.gxplayer.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 14:48:00 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-disposition: inline;\r\nlast-modified: Sun, 27 Feb 2020 13:25:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3nu2oQacZdF0i1SzPQVc2%2FGsjTTGCcxWieQt2WR1l9toRhmyluBVQlgJ8KALV8lPkgCUA222q0ONWDnlCCTHTrNV9zuYpOQYhg%3D%3D\"}]}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Requested-With, AMP-Access-Control-Allow-Source-Origin, Content-Type, Range, Origin, Cache-Control, Pragma, Authorization, Accept, Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: Accept-Ranges, Content-Encoding, Content-Length, AMP-Access-Control-Allow-Source-Origin, Content-Range\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9ab54d097be15697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1284604,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"data","md5":"5358c15f33f3f398b5d3a4e62bacd5bb","sha1":"6b96842dd864077215f37eab102e403940ed2ad9","sha256":"d255d653c4f74e3ae5c660d75f92433b3de99b939d6e6e025363b8f86fe1d82b","sha512":"5ae3afd39275122bc757b3f736a90546fa509ccda763b5a2971570068cc59fe8ea081d0c8abe3297df04f5b9aa058d7f4dfa4c2c1826f131a8dbbe826678a03d","ssdeep":"24576:5hkJqRG8cuUH9t1Wl/8Zawg1L6HA6Qoo2ZO46UcY/KrtZ+wZJ:5mP8cFjwlIg1LP6cG6ZtX+8","tlshash":"ed2523757b56a9aa8c152093c30843b7b2a28d015f98bf935544f36ef8f8bf9d0350b9","first_seen":"2025-12-09T14:48:33.790569Z","last_seen":"2025-12-09T14:48:33.790569Z","times_seen":1,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":29,"dns":10,"connect":1,"send":0,"wait":66,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/Counter-Up/1.0.0/jquery.counterup.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://watch.gxplayer.xyz/watch?v=5Z4YVCRW","date":"2025-12-09T14:47:58.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/Counter-Up/1.0.0/jquery.counterup.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://watch.gxplayer.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 14:47:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 774\r\ncf-ray: 9ab54d00ed4835a6-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03cee-a10\"\r\nlast-modified: Mon, 04 May 2020 16:03:58 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1569837\r\nexpires: Sun, 29 Nov 2026 14:47:58 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=0S8HawhO7yY3Ki0xTJ7gq9f1C%2BFDLc%2BjD1r6T8YhjUSzEUjkLs8zhTwaYtEc0jMdUgnwOUTeBpYdGwj0BgMuiwOVwqm5OR7EJ3s%2FvbVoB9iQSCcNY4L8DVb75%2Br8OmCa5rgsxJNO\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2576,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"319b28bb622c3a7f5d5517e2ce8d8011","sha1":"a9494c763337fa5fe663ed6863c2e3d157dadc15","sha256":"c2575fc32549c80ef5a0a7ba49b6b47ca664691e82330b5bd039d6710b3a3756","sha512":"fbfe10fb11fd8d76cc349ccdb7678cad8bff66cdabcebe01bb6b617efce5b21641bc7d60f9518fe795bc6fac5f92ed1cd0a92713baa56c13e10cfac715b80ae2","ssdeep":"","tlshash":"0b51c1467cbf25981d33f4296bdfb2095234a4b71005dd0ab8dc62808f5193ca35aff4","first_seen":"2023-03-07T12:25:21Z","last_seen":"2026-04-05T12:36:00.707189Z","times_seen":584,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":55,"dns":4,"connect":6,"send":0,"wait":10,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cvt-s2.agl006.host/o/s/a941312e99999aac85c8d55346033a2f.js","fqdn":"cvt-s2.agl006.host","domain":"agl006.host","tld":"host"},"ip":{"addr":"172.67.212.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:58.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agl006.host","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 07:14:06 GMT","end":"Fri, 30 Jan 2026 08:12:47 GMT"},"fingerprint":{"sha1":"80:21:9A:DF:14:FB:18:25:CD:66:CA:86:34:3A:13:34:30:AB:16:1C","sha256":"1F:E6:52:6E:85:38:1B:B9:05:CB:48:AD:F6:98:68:CC:A9:7C:AB:C1:47:F0:62:85:4D:53:25:EA:40:64:94:DA"}}},"request":{"raw":"GET /o/s/a941312e99999aac85c8d55346033a2f.js HTTP/1.1\r\nHost: cvt-s2.agl006.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 14:47:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nuwebsockets: 20\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FaSJD9LS7GZdOKYrV96REwKJ5lV95hgYxBxW0uIRzYUF%2BOr8nSBjY3XVfarA1Yzy0GRtnjEXzOSr%2FmPqNy07SqmdDmfbyIxS9Tl6LdjLLwM4wQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Tue, 09 Dec 2025 14:47:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ab54cfe19e02efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8540,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8497), with no line terminators","md5":"ec3e8b85b2f88ac7ef1264c1b3b6df8a","sha1":"8e6e8d4a65460fa513fa25e87bdafb2ba795c073","sha256":"8b7f90b38ee55c258858510c03506a85b0267628e8b136c765bacd1de4c4d047","sha512":"4ff9da33c39325d979bc9d4dc78cb8e98f1e6823c6b710ff068f7695803b36b2bfd3b439599ea81e75300aa27cea461f8d42cbc3e306cfe80c3b6bb017ae60d1","ssdeep":"192:KAyBLQKs89yYY/75x/I7RTohARShRZIil86ivuwXGfXTv9Rz3:YMxc4IdUhARShRZ8DWL/","tlshash":"5002b5613ea4253082b6835f71bfa358b6760066b4054484a63c8cba3d7de8b41b7fed","first_seen":"2025-11-21T23:22:46.872217Z","last_seen":"2026-01-28T11:01:35.07748Z","times_seen":95,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":26,"connect":1,"send":0,"wait":144,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"watch.gxplayer.xyz/watch?v=5Z4YVCRW","fqdn":"watch.gxplayer.xyz","domain":"gxplayer.xyz","tld":"xyz"},"ip":{"addr":"172.67.148.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:58.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxplayer.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 14:28:46 GMT","end":"Sun, 15 Feb 2026 15:26:02 GMT"},"fingerprint":{"sha1":"14:20:13:71:30:43:F8:E3:C9:A4:EA:55:8D:3C:C1:01:17:F4:FD:8D","sha256":"3D:D4:2A:57:98:06:76:F5:AE:D3:FB:4F:6E:38:2D:39:DC:72:96:9F:06:E7:3E:2D:4F:83:BB:2A:D8:C2:BA:1C"}}},"request":{"raw":"GET /watch?v=5Z4YVCRW HTTP/1.1\r\nHost: watch.gxplayer.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 14:47:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=vg22gg5slacpfdi8umjo2lio1k; expires=Tue, 16-Dec-2025 14:47:31 GMT; Max-Age=604800; path=/\nSITE_TOTAL_ID=365bfc9f4569bab2b5cbfb2e88402fb0; Path=/; Max-Age=259200000; HttpOnly\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-robots-tag: noindex,nofollow,noarchive,nosnippet,noydir,noodp\r\nexpires: Sun, 01 Jan 2014 00:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0\r\npragma: no-cache\r\nx-frame-options: ALLOW\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UxNaADlAm0L63Kc29qlMm16NAuRzcs5YoLRkzDo3b9BizIXZACx10sZAwtGUo5ha7wr1afRMPuDadZK8LLAnpwWp0xYUl%2BogKnuz1g6h2sRSYQ%3D%3D\"}]}\r\nx-cache: HIT\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9ab54cfeee235fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery:2.0.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65558,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1672), with CRLF, LF line terminators","md5":"61fcb2bc485daa85736eb98c425ee551","sha1":"6bb087da5d660c13a3213f36c88a2ff0329bfb2a","sha256":"6e12bfbdde43c7bd8dd46785506d9055a30db882ca8e2a9656b1154830be9ffd","sha512":"327ac45f4d0be597c14cb2af80d683b0ddcdb5e1afe4e2aa6e28f1b8ca5514239b377f1a843628c8b9be918a3f3ba3aff8da1dd6c349273881721ec2fee59f63","ssdeep":"1536:aFQur+wpOjSFUOEMpQ4yBeIsJfAKsi+srDTUM7lsDsGg3:aR4BePAHiPjJ1","tlshash":"5253e8d568b300259067b1bca7ab660537394103e308ee597d5ea3885fcb36cc9b1fe8","first_seen":"2025-12-09T14:48:33.794388Z","last_seen":"2025-12-09T14:48:33.794388Z","times_seen":1,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":76,"dns":55,"connect":1,"send":0,"wait":76,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/index.php?yg=token","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:57.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megakino.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:45:04 GMT","end":"Thu, 26 Feb 2026 22:43:37 GMT"},"fingerprint":{"sha1":"39:A6:86:EB:F5:46:7E:D2:2E:2A:00:ED:69:EA:6D:93:45:42:07:C9","sha256":"5E:5C:2F:8A:DB:3F:98:96:80:8E:DB:D8:6E:4A:E7:A6:B6:D2:53:4B:04:6A:33:0C:AF:7F:D3:2F:34:96:6F:F7"}}},"request":{"raw":"GET /index.php?yg=token HTTP/1.1\r\nHost: megakino.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/films/5892-five-nights-at-freddys-2.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 14:47:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=4,i=?0\r\nset-cookie: yg_token=1765291678.7650d60511aa4d7ae12a98ff0aa9bc9dcc9416046f0ae7703c1c6f12963a6de1; expires=Tue, 09 Dec 2025 15:02:58 GMT; Max-Age=900; path=/; secure; HttpOnly; SameSite=Lax\r\ncache-control: no-store\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JT9QwQjgx74TOwgT9Op5e0P9zXsbWL5Oa%2BiCNc9Ph%2BVSaQaymLUrbL8YcT30RPmdtCaGXAaykirFdlxHn1xgfmxCJN0j%2FJHoxQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ab54cfb6c11b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/templates/popcornie-dark/images/no-img.png","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:58.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megakino.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:45:04 GMT","end":"Thu, 26 Feb 2026 22:43:37 GMT"},"fingerprint":{"sha1":"39:A6:86:EB:F5:46:7E:D2:2E:2A:00:ED:69:EA:6D:93:45:42:07:C9","sha256":"5E:5C:2F:8A:DB:3F:98:96:80:8E:DB:D8:6E:4A:E7:A6:B6:D2:53:4B:04:6A:33:0C:AF:7F:D3:2F:34:96:6F:F7"}}},"request":{"raw":"GET /templates/popcornie-dark/images/no-img.png HTTP/1.1\r\nHost: megakino.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/films/5892-five-nights-at-freddys-2.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yg_token=1765291678.7650d60511aa4d7ae12a98ff0aa9bc9dcc9416046f0ae7703c1c6f12963a6de1; PHPSESSID=tt3vqe33abnk6gekore9ipas5i\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 14:47:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 952\r\nlast-modified: Tue, 08 Dec 2020 12:55:35 GMT\r\npriority: u=4,i=?0\r\netag: \"5fcf77c7-3b8\"\r\nexpires: Wed, 02 Dec 2026 18:28:08 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 591590\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=85z19ugnz0ip82jBPO6zqJmsPwkIF23%2FiDQ4fbrepGku0PuXeB%2F6GK36VeurB90kccaNAEb6Bp6a5Nq7l%2BsNUEw4y%2F8s4UY7DA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ab54cfdac2db500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":952,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit colormap, non-interlaced","md5":"12418edbbea5994d67f06636829e85e8","sha1":"78512bca00f13b95e5e1feb8f5890fa18ad1d6e7","sha256":"5028a2226c4e8591a9db17de0b5ddac6226fb4379b7f4580f2c9ecd5797a6a49","sha512":"2734083dd9a72d1e5cdbf908fd3010f670813747ba3fa2040b69866c6f76002bc0fed031e8c63e28aa472e2304bce5482baab83e7229c1e06569bf670c971ebf","ssdeep":"","tlshash":"a311144aee41384181c6c64718fac137c92245c0e5e4f662e9cec4171e701fd88199df","first_seen":"2023-05-11T12:26:14Z","last_seen":"2026-04-05T09:54:59.877777Z","times_seen":197,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/templates/popcornie-dark/images/ba_ibooks.png","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:58.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megakino.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:45:04 GMT","end":"Thu, 26 Feb 2026 22:43:37 GMT"},"fingerprint":{"sha1":"39:A6:86:EB:F5:46:7E:D2:2E:2A:00:ED:69:EA:6D:93:45:42:07:C9","sha256":"5E:5C:2F:8A:DB:3F:98:96:80:8E:DB:D8:6E:4A:E7:A6:B6:D2:53:4B:04:6A:33:0C:AF:7F:D3:2F:34:96:6F:F7"}}},"request":{"raw":"GET /templates/popcornie-dark/images/ba_ibooks.png HTTP/1.1\r\nHost: megakino.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/films/5892-five-nights-at-freddys-2.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yg_token=1765291678.7650d60511aa4d7ae12a98ff0aa9bc9dcc9416046f0ae7703c1c6f12963a6de1; PHPSESSID=tt3vqe33abnk6gekore9ipas5i\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 14:47:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 17526\r\nlast-modified: Tue, 27 May 2025 15:42:36 GMT\r\npriority: u=4,i=?0\r\netag: \"6835dd6c-4476\"\r\nexpires: Wed, 02 Dec 2026 18:28:17 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 591581\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f5Bjvn5IkaMd0S9dkUlkHmgEYKG3Gfd3im6fLwptFGjM4SffO5v7FRI%2Bk06gMaEogPcveUi7Gk8mgdPQm78QPJkooRUs2m72kg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ab54cfdac2eb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17526,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 728 x 90, 8-bit/color RGB, non-interlaced","md5":"ca457d591ec8e2866aa0ffb602665e6d","sha1":"2d3c1bb983ea9d1e99e69fe6535578ff9ad59553","sha256":"99f194775cd3821b2f1a1f1e3c8febf36fdc2cdae9d0d05831deeeb9c78361a7","sha512":"4aeb01052493ef3b0f5828ec377299923609e591f37789d819f4d923bec5a0a71f034ab23aaa81310205ed9bfd865e120efd8282a9ccbb662061eb3bd3880f2c","ssdeep":"384:z0P6hyBGlIobFjAWfWWSjBcipKThg5PpF8sVSamn4Tb:z0PklblqKThsxmsVJv","tlshash":"9472bf81face948327a5f33595e41f5a2606231f518f4da8fcfca84b9f08241ca4e65d","first_seen":"2025-06-21T21:21:19.384842Z","last_seen":"2026-04-04T18:52:02.069468Z","times_seen":20,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/share2/share.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:59.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /share2/share.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 09 Dec 2025 14:47:59 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-nginx-request-id: b4c4bc0a0ace7345\r\ncontent-encoding: br\r\netag: W/\"72e199079b77250d47f2f9c379273c4c\"\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nexpires: Fri, 12 Dec 2025 02:43:42 GMT\r\ncache-control: public, max-age=216009\r\nlast-modified: Wed, 29 Nov 2023 15:06:40 GMT\r\nx-strm-log-split: 1\r\nx-request-id: f4e805aadc5fc1b4\r\ncache-host: cloudcdn-rad-09.cdn.yandex.net\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":145721,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64803), with no line terminators","md5":"f973d0107433443697bdf08f487bfe16","sha1":"39fbe888a6085e1053bb013447b33e5c22ffc785","sha256":"a796e6837815ffd5ce839246cdb66ed0740e406ed4751a812110c0edee294c2c","sha512":"8f282e346c4f8dd7402ed189f57b6369dc95de30eb26794a17a3487c4c05e7a5cc393c659c39f1605c6312fc3ea736941d35fa4187785d3dafd7b91ee6df35ee","ssdeep":"1536:+45QpjY2UwOr2zqNxB1z9YUF3VBKbGybr1R3PRjt42D+RdBttpHg:+JWB1uD1bn3PRjt42DItI","tlshash":"73e3098d3d80b45e139b9168b51bf00ff2298c15e8e90c91f690c5d8d9f384ddb5abae","first_seen":"2023-11-29T21:12:42Z","last_seen":"2026-04-05T14:03:07.127104Z","times_seen":5704,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":141,"dns":1,"connect":19,"send":0,"wait":26,"receive":0,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/engine/classes/min/index.php?g=general3\u0026v=bc993","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:58.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megakino.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:45:04 GMT","end":"Thu, 26 Feb 2026 22:43:37 GMT"},"fingerprint":{"sha1":"39:A6:86:EB:F5:46:7E:D2:2E:2A:00:ED:69:EA:6D:93:45:42:07:C9","sha256":"5E:5C:2F:8A:DB:3F:98:96:80:8E:DB:D8:6E:4A:E7:A6:B6:D2:53:4B:04:6A:33:0C:AF:7F:D3:2F:34:96:6F:F7"}}},"request":{"raw":"GET /engine/classes/min/index.php?g=general3\u0026v=bc993 HTTP/1.1\r\nHost: megakino.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/films/5892-five-nights-at-freddys-2.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yg_token=1765291678.7650d60511aa4d7ae12a98ff0aa9bc9dcc9416046f0ae7703c1c6f12963a6de1; PHPSESSID=tt3vqe33abnk6gekore9ipas5i\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 14:47:58 GMT\r\ncontent-type: application/x-javascript; charset=utf-8\r\ncontent-length: 30835\r\npriority: u=3,i=?0\r\nexpires: Wed, 09 Dec 2026 14:47:58 GMT\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 29 Mar 2021 10:11:00 GMT\r\netag: \"pub1617012660;gz\"\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JXjsHdCHguK2AmA%2Fmr0SXWjcghQ9CZZ38VjlZggD0Cvf06ZAP%2FDvTEap94qwqlS1KRc9r6T5vZ6W%2B5Fkp6IDN4WDkSVMgEbrdA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ab54cfdbc31b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89503,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"0732e3eabbf8aa7ce7f69eedbd07dfdd","sha1":"4cd5ddc413b3024d7b56331c0d0d0b2bd933f27f","sha256":"ce9d07500ad91ec2b524c270764ec4c9a33e78320d8d374ec400ede488f6251b","sha512":"41d24c426abcf913be59917591d906318a547661280036b098a2b1b948bcf9ff14f268b140db10956730d64a857a61b81034d888ed7f857419dee6b8d327447c","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vE:eIh8GgP3hujzwbhd3XvSiDQ47GKq","tlshash":"e19309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-04-05T13:14:33.213573Z","times_seen":17389,"resource_available":true,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/templates/popcornie-dark/js/libs.js?5","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:58.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megakino.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:45:04 GMT","end":"Thu, 26 Feb 2026 22:43:37 GMT"},"fingerprint":{"sha1":"39:A6:86:EB:F5:46:7E:D2:2E:2A:00:ED:69:EA:6D:93:45:42:07:C9","sha256":"5E:5C:2F:8A:DB:3F:98:96:80:8E:DB:D8:6E:4A:E7:A6:B6:D2:53:4B:04:6A:33:0C:AF:7F:D3:2F:34:96:6F:F7"}}},"request":{"raw":"GET /templates/popcornie-dark/js/libs.js?5 HTTP/1.1\r\nHost: megakino.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/films/5892-five-nights-at-freddys-2.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yg_token=1765291678.7650d60511aa4d7ae12a98ff0aa9bc9dcc9416046f0ae7703c1c6f12963a6de1; PHPSESSID=tt3vqe33abnk6gekore9ipas5i\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 14:47:58 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Tue, 05 Nov 2024 16:28:38 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 02 Dec 2026 18:28:08 GMT\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nage: 591589\r\ncf-cache-status: HIT\r\netag: W/\"672a47b6-ce33\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zmZYOOhVZV4IIPbarP9%2FzmgfuVmT1lCcJygF9y1dPRWT2Mnlval%2BxVtZm7AC1fwx8pkgaz55CYo08hGpAIJHz91om%2Fdiy44L2Q%3D%3D\"}]}\r\ncf-ray: 9ab54cfdbc33b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52787,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31998), with CRLF line terminators","md5":"0ba53b5eeaa2597f7953d92f4920b3e0","sha1":"a94b3720d0702b67fab5cb907191c45c5755f9c0","sha256":"32f17ad03c74c85eb9c82eca576d5d997763832dd33a4898af9e527bf52dd507","sha512":"735af14e15ef46cb53be000ca8e4073e4f005998cd29fdfd42c44a68a5427bc1b5699e0c3e3f455fbb5bd618487f22d2a2d79c864c61298cc4c1d7f9c3dec61d","ssdeep":"768:HM1gLCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSRc7UuHjRUQuFBt3e:HM1g+ITMFC4dbMVRSRcgRD8","tlshash":"ad33a446f3202d2a869b61a0663f120bb23a241de405507db97d96de6d7d98c313ffbc","first_seen":"2024-12-15T10:43:21.678818Z","last_seen":"2026-04-04T18:52:02.095949Z","times_seen":45,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/templates/popcornie-dark/images/logo.svg","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:58.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megakino.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:45:04 GMT","end":"Thu, 26 Feb 2026 22:43:37 GMT"},"fingerprint":{"sha1":"39:A6:86:EB:F5:46:7E:D2:2E:2A:00:ED:69:EA:6D:93:45:42:07:C9","sha256":"5E:5C:2F:8A:DB:3F:98:96:80:8E:DB:D8:6E:4A:E7:A6:B6:D2:53:4B:04:6A:33:0C:AF:7F:D3:2F:34:96:6F:F7"}}},"request":{"raw":"GET /templates/popcornie-dark/images/logo.svg HTTP/1.1\r\nHost: megakino.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megakino.cx/templates/popcornie-dark/css/styles.css?v=14\r\nCookie: yg_token=1765291678.7650d60511aa4d7ae12a98ff0aa9bc9dcc9416046f0ae7703c1c6f12963a6de1; PHPSESSID=tt3vqe33abnk6gekore9ipas5i\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 14:47:58 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Fri, 18 Jun 2021 08:21:22 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 02 Dec 2026 18:28:09 GMT\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nage: 591588\r\ncf-cache-status: HIT\r\netag: W/\"60cc5782-1209\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iclaTlVVuVumeXVkByJwXGg%2FBamTw44fyj%2BQ55m5xlyd%2Bm0kZsUE5gRjulquvkZ%2Fsxbpl27Yi0U5%2BGQaTAewraUG%2BKJq3nkAiw%3D%3D\"}]}\r\ncf-ray: 9ab54cfe7c3fb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4617,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"936cb555cfed264d51267a5ffa0eb0ed","sha1":"d889ddb70e4e6223d4e67d8e77050bbb6bf653f1","sha256":"6765ec1ca8e9169ab4aaf65fe9c0f36f88fc6caa6afc11a38fc2bdae4d2ec7fe","sha512":"7c4be7f3e56e52a823fb0b47032174750e88aeb264b76039750dd9de120b7492e083d9aa9de8f58a69622849b9ec99e3eb1982741fc8c283b7716d8354b5d892","ssdeep":"96:jO9wa2d9qtGjwEqJBSKfeDWfUGd/vY7Yu8dXrwc6Dh84P4pZBm3dk:5jYsZwdm8dXrwhagtk","tlshash":"8a9152b5df3e61bbe1aca3fdcf68543e36be04ff9240873484989b4a04256c7490ca94","first_seen":"2023-10-22T16:18:44Z","last_seen":"2026-04-04T18:52:02.092996Z","times_seen":103,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/uploads/posts/2022-12/merry.webp","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:59.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megakino.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:45:04 GMT","end":"Thu, 26 Feb 2026 22:43:37 GMT"},"fingerprint":{"sha1":"39:A6:86:EB:F5:46:7E:D2:2E:2A:00:ED:69:EA:6D:93:45:42:07:C9","sha256":"5E:5C:2F:8A:DB:3F:98:96:80:8E:DB:D8:6E:4A:E7:A6:B6:D2:53:4B:04:6A:33:0C:AF:7F:D3:2F:34:96:6F:F7"}}},"request":{"raw":"GET /uploads/posts/2022-12/merry.webp HTTP/1.1\r\nHost: megakino.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/films/5892-five-nights-at-freddys-2.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yg_token=1765291678.7650d60511aa4d7ae12a98ff0aa9bc9dcc9416046f0ae7703c1c6f12963a6de1; PHPSESSID=tt3vqe33abnk6gekore9ipas5i; _ga_0Q50V6DX0B=GS2.1.s1765291678$o1$g0$t1765291678$j60$l0$h0; _ga=GA1.1.1734660940.1765291679\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 14:47:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 87326\r\nlast-modified: Sat, 19 Apr 2025 13:50:30 GMT\r\npriority: u=4,i=?0\r\netag: \"6803aa26-1551e\"\r\nexpires: Wed, 02 Dec 2026 18:28:17 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 591582\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qnSTWlutXacwCKNNJwWtsBvzmGgPetkk3Sdq%2FgktGDNWKly2HJYx27JN5mFQxP%2B61c9Crwn%2FlroQFCBhdL6jvjE9p2aX2hbr1w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ab54d03fca1b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87326,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 840x396, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"92468da4cd4c811209d9555f3ab936d8","sha1":"ec29e46115c4908064b4937e4a6a6968c175e96e","sha256":"9c154ec22ee29718158141b142bbc49d3d62500d32a4e3ef6bc9c1f210b163c4","sha512":"3788a52a06c74b2dfb4612a3b59e7d44d34596703f78c5836f3d8b2cc26b37f22d03490664a619014259f84560b585160aa13878ef334db530a268888f7934e7","ssdeep":"1536:rpdXNUmJnjY7jDfozcDgTcduM/68lVr66TaWnTtLE:rD2mJjS/hDgTyi8lNo85o","tlshash":"0383021536e7e428e0bb712a1c985b45d176e6c98ca678ce29a22fcd91c5cc78d3032e","first_seen":"2025-06-21T21:21:19.42962Z","last_seen":"2026-04-04T18:52:02.094662Z","times_seen":35,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/uploads/posts/2022-01/mcu.webp","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:59.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megakino.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:45:04 GMT","end":"Thu, 26 Feb 2026 22:43:37 GMT"},"fingerprint":{"sha1":"39:A6:86:EB:F5:46:7E:D2:2E:2A:00:ED:69:EA:6D:93:45:42:07:C9","sha256":"5E:5C:2F:8A:DB:3F:98:96:80:8E:DB:D8:6E:4A:E7:A6:B6:D2:53:4B:04:6A:33:0C:AF:7F:D3:2F:34:96:6F:F7"}}},"request":{"raw":"GET /uploads/posts/2022-01/mcu.webp HTTP/1.1\r\nHost: megakino.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/films/5892-five-nights-at-freddys-2.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yg_token=1765291678.7650d60511aa4d7ae12a98ff0aa9bc9dcc9416046f0ae7703c1c6f12963a6de1; PHPSESSID=tt3vqe33abnk6gekore9ipas5i; _ga_0Q50V6DX0B=GS2.1.s1765291678$o1$g0$t1765291678$j60$l0$h0; _ga=GA1.1.1734660940.1765291679\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 14:47:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 75440\r\nlast-modified: Sat, 19 Apr 2025 13:50:25 GMT\r\npriority: u=4,i=?0\r\netag: \"6803aa21-126b0\"\r\nexpires: Wed, 02 Dec 2026 18:28:17 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 591581\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dlRvGYuqsY8DMu2H3iBLvtoBegG1KyUMEB%2BNTh5Vu%2BIUdDiSDuQnxYJe31BHjgN0yVwcYoV0Lp%2B%2B1%2BD%2FE2%2FWA4%2FNAacx8ymg3g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ab54d040ca4b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75440,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 840x396, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a2082925af8a2220b2c7057ed99eacc6","sha1":"de22e322b55d4213f5c80965e16902ba42af014f","sha256":"eb948f21412cac9fbb58d3f013ea4ea177acd0cc1538fe40c96b3d1b7cbaa8df","sha512":"3f7d0c13bc5801018e1e2fec0db5a5ad28fc7c3ad8d0140b3efd347c8128827e221368935257a664b47650cbdedb71d22e92596b48ec581428f4b27ae2994846","ssdeep":"1536:F7gVV9Y9GJh304z5/hieXfvzryGD/hFGap3TUkuL5YcR906:F7gVV9YwJh3D/hBaGDpFGqbuL5YcRC6","tlshash":"4d7302bea103be03223e8da67fdd51154bca13f55940a5e60e5c4fca369a61f10f682b","first_seen":"2025-06-21T21:21:19.410971Z","last_seen":"2026-04-04T18:52:02.119315Z","times_seen":21,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/engine/classes/min/index.php?f=engine/editor/css/default.css\u0026v=bc993","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:58.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megakino.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:45:04 GMT","end":"Thu, 26 Feb 2026 22:43:37 GMT"},"fingerprint":{"sha1":"39:A6:86:EB:F5:46:7E:D2:2E:2A:00:ED:69:EA:6D:93:45:42:07:C9","sha256":"5E:5C:2F:8A:DB:3F:98:96:80:8E:DB:D8:6E:4A:E7:A6:B6:D2:53:4B:04:6A:33:0C:AF:7F:D3:2F:34:96:6F:F7"}}},"request":{"raw":"GET /engine/classes/min/index.php?f=engine/editor/css/default.css\u0026v=bc993 HTTP/1.1\r\nHost: megakino.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/films/5892-five-nights-at-freddys-2.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yg_token=1765291678.7650d60511aa4d7ae12a98ff0aa9bc9dcc9416046f0ae7703c1c6f12963a6de1; PHPSESSID=tt3vqe33abnk6gekore9ipas5i\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 14:47:58 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 731\r\npriority: u=2,i=?0\r\nexpires: Wed, 09 Dec 2026 14:47:58 GMT\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 05 Feb 2019 23:00:00 GMT\r\netag: \"pub1549407600;gz\"\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S9NHFRhlfUtP1bDRETUv2MBr%2BeWMLVeEVsVHolMSwhHVWawae%2FWY%2Fi1C3K571sUsghSCSyJqfYoiG3YO9L1zQ7r%2Fs5qKKvHXpw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ab54cfdbc30b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2615,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"9239ce738fb09559eb42ae9da350325a","sha1":"29438c7374f209f2a7923193e0d5ff70bd2ece7b","sha256":"84ac4668615a89556551d47504f98682ad26a78f14cd1cbdba10eddcaabee429","sha512":"5527f87deb8763166244e87d3eed27bb8fa99ec750fcb8d263d9411e88b25fec6c2ce4762703a8781f31ec17e283384622f7f0d0c75dce81af181242ee222cf5","ssdeep":"","tlshash":"1351aafaf9011100bb71cb342b813b247e6743b28f4346bf7ee0964c928a29a45e2d64","first_seen":"2023-04-05T15:52:43Z","last_seen":"2026-04-05T11:49:54.015797Z","times_seen":1179,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/uploads/posts/2022-01/harry.webp","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:59.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megakino.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:45:04 GMT","end":"Thu, 26 Feb 2026 22:43:37 GMT"},"fingerprint":{"sha1":"39:A6:86:EB:F5:46:7E:D2:2E:2A:00:ED:69:EA:6D:93:45:42:07:C9","sha256":"5E:5C:2F:8A:DB:3F:98:96:80:8E:DB:D8:6E:4A:E7:A6:B6:D2:53:4B:04:6A:33:0C:AF:7F:D3:2F:34:96:6F:F7"}}},"request":{"raw":"GET /uploads/posts/2022-01/harry.webp HTTP/1.1\r\nHost: megakino.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/films/5892-five-nights-at-freddys-2.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yg_token=1765291678.7650d60511aa4d7ae12a98ff0aa9bc9dcc9416046f0ae7703c1c6f12963a6de1; PHPSESSID=tt3vqe33abnk6gekore9ipas5i; _ga_0Q50V6DX0B=GS2.1.s1765291678$o1$g0$t1765291678$j60$l0$h0; _ga=GA1.1.1734660940.1765291679\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 14:47:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 61086\r\nlast-modified: Sat, 19 Apr 2025 13:50:25 GMT\r\npriority: u=4,i=?0\r\netag: \"6803aa21-ee9e\"\r\nexpires: Wed, 02 Dec 2026 18:28:18 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 591581\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zeyphDVi5cXjnp3%2FODz98kV2xDFMb0T74qqbtwtRA%2BBOn3EPUNTnvNtcAoKp68fKB37oCfQPhHEkK5LIYAorG4uW7V%2FXt9GV6Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ab54d040ca5b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61086,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 840x396, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4016ec16e889ce0d0f05bbbab74c80e3","sha1":"0192000010cf346e8850580e7d311a94d31259ee","sha256":"239f498d3e38009fd1abf0197d8f1cf758606d41a609a3e3a8fb70cf35e1fed9","sha512":"f23aec08fccb3a485d3da8bc13da704c15612b40ecb980567423d60055dd3f9bbd96ee0aa815fb237687d215f31cb74466f0dd0502bbbe86ee44486ab441b201","ssdeep":"1536:ZEjTa/iOnGEYw31PaHhVJutXipl7ZkB/DkLGo:ZEjO/iOvYwpEJutXiHVk5W","tlshash":"c353022b95d7022da3961de62a463315df1d3fc6d01738d7298f9ada0c1ac25c116cbf","first_seen":"2025-06-21T21:21:19.404534Z","last_seen":"2026-04-04T18:52:02.062696Z","times_seen":21,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"watch.gxplayer.xyz/m3u8/3/48bb58ad9fad2df3441cd4452f9d24a6/master.txt?s=1\u0026id=24572\u0026cache=1","fqdn":"watch.gxplayer.xyz","domain":"gxplayer.xyz","tld":"xyz"},"ip":{"addr":"172.67.148.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://watch.gxplayer.xyz/watch?v=5Z4YVCRW","date":"2025-12-09T14:47:59.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxplayer.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 14:28:46 GMT","end":"Sun, 15 Feb 2026 15:26:02 GMT"},"fingerprint":{"sha1":"14:20:13:71:30:43:F8:E3:C9:A4:EA:55:8D:3C:C1:01:17:F4:FD:8D","sha256":"3D:D4:2A:57:98:06:76:F5:AE:D3:FB:4F:6E:38:2D:39:DC:72:96:9F:06:E7:3E:2D:4F:83:BB:2A:D8:C2:BA:1C"}}},"request":{"raw":"GET /m3u8/3/48bb58ad9fad2df3441cd4452f9d24a6/master.txt?s=1\u0026id=24572\u0026cache=1 HTTP/1.1\r\nHost: watch.gxplayer.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://watch.gxplayer.xyz/watch?v=5Z4YVCRW\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 14:47:59 GMT\r\ncontent-type: application/x-mpegURL\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-robots-tag: noindex,nofollow,noarchive,nosnippet,noydir,noodp\r\nset-cookie: PHPSESSID=26a10kifsuik5lfpnkq6trb7da; expires=Tue, 16-Dec-2025 14:47:32 GMT; Max-Age=604800; path=/\nSITE_TOTAL_ID=7a6822417a22727a2dbb2cf5397a6aae; Path=/; Max-Age=259200000; HttpOnly\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\naccess-control-allow-origin: *\r\nx-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uhmj1b4O%2BLKwKUzlo63hzGc2Nm5aOwdYQ1MJvS%2FJP4sQsJKgkBfLhQYD9wRlCea%2B%2BgfY6P1ah4XOYX2Gji8SPyyRkAbIAa5XmA2UgY0NKMGOlg%3D%3D\"}]}\r\ncf-ray: 9ab54d05ebbc5fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":468,"size_decoded":0,"mime_type":"application/x-mpegurl","magic":"M3U playlist, ASCII text","md5":"6177168bd410df61a1bc1aa51319ee9b","sha1":"f76b7c83aa34038d77d0cac2410d697a83c7310e","sha256":"9aeaa131d2c33d17df4857734677bbd89f1550620d8fe7753587d0e478f4910a","sha512":"e3a4b55fa5a0c654ea777461b0ebf50606c8bc1eaa9e90d0126cee99a96ea03dd1482f52a319198d6d95663d7f10b1f38eadd6d73cae68c7f4d4ca36c1b14a9d","ssdeep":"","tlshash":"9df0e2a2225ed54b7a3c9cc978186b3298dbf9894e993426a1bf9c310057c682e8c310","first_seen":"2025-12-09T14:48:33.806496Z","last_seen":"2025-12-09T14:48:33.806496Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/templates/popcornie-dark/lazydev/dle_filter/assets/dle_filter.js","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:58.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megakino.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:45:04 GMT","end":"Thu, 26 Feb 2026 22:43:37 GMT"},"fingerprint":{"sha1":"39:A6:86:EB:F5:46:7E:D2:2E:2A:00:ED:69:EA:6D:93:45:42:07:C9","sha256":"5E:5C:2F:8A:DB:3F:98:96:80:8E:DB:D8:6E:4A:E7:A6:B6:D2:53:4B:04:6A:33:0C:AF:7F:D3:2F:34:96:6F:F7"}}},"request":{"raw":"GET /templates/popcornie-dark/lazydev/dle_filter/assets/dle_filter.js HTTP/1.1\r\nHost: megakino.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/films/5892-five-nights-at-freddys-2.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yg_token=1765291678.7650d60511aa4d7ae12a98ff0aa9bc9dcc9416046f0ae7703c1c6f12963a6de1; PHPSESSID=tt3vqe33abnk6gekore9ipas5i\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 14:47:58 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 05 Jan 2022 09:17:55 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 02 Dec 2026 18:28:09 GMT\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nage: 591588\r\ncf-cache-status: HIT\r\netag: W/\"61d56243-94bd\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Cg%2BuA6OqlO%2FTr%2BG%2BU%2F4nox6VzvEzsJp7nEZtWF6KK9ct448y1G9dXonYm3hjVZxSdqYjkhZeyz0e7gz5xEMZLjc4NC3TBVQOw%3D%3D\"}]}\r\ncf-ray: 9ab54cfdcc36b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38077,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"02536f0c70fa37aff7c29479f1acb8fd","sha1":"b6c02c2c06a7a524b4fb39d420d82607737247d1","sha256":"80c9544cf11c0ad6c8820da3d66f0cf7602f5d376a71bffa02420f891b3e80cc","sha512":"de66cbb2a5907696eb32ef2f461bd3b2404394696c6c013114b9a87213beda1f8378157b1b7a2e4e4b2a6d85b18b5460aa7663ad7fa8f3cc660e6bdbd96fc325","ssdeep":"192:+i6cdyno5+yAr0Yz1Jp/iSC8ubmSCF3kbSChf0/7/hzCZvyCGz4C5vzxUVI1CoIk:mz1JuORvI6wJnjRvSWELwnnXkCYfT3l","tlshash":"1c03ea4925f200161163307fafde9104a676a85b1418cf04bc4d9b84ffd6935ebfabaa","first_seen":"2023-04-07T12:00:07Z","last_seen":"2026-04-05T12:22:30.607715Z","times_seen":104,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/templates/popcornie-dark/css/styles.css?v=14","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:58.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megakino.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:45:04 GMT","end":"Thu, 26 Feb 2026 22:43:37 GMT"},"fingerprint":{"sha1":"39:A6:86:EB:F5:46:7E:D2:2E:2A:00:ED:69:EA:6D:93:45:42:07:C9","sha256":"5E:5C:2F:8A:DB:3F:98:96:80:8E:DB:D8:6E:4A:E7:A6:B6:D2:53:4B:04:6A:33:0C:AF:7F:D3:2F:34:96:6F:F7"}}},"request":{"raw":"GET /templates/popcornie-dark/css/styles.css?v=14 HTTP/1.1\r\nHost: megakino.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/films/5892-five-nights-at-freddys-2.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yg_token=1765291678.7650d60511aa4d7ae12a98ff0aa9bc9dcc9416046f0ae7703c1c6f12963a6de1; PHPSESSID=tt3vqe33abnk6gekore9ipas5i\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 14:47:58 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Sat, 19 Apr 2025 17:25:44 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 02 Dec 2026 18:28:07 GMT\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nage: 591590\r\ncf-cache-status: HIT\r\netag: W/\"6803dc98-91df\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SEan3ezCkSDIJWq9aH3D68aA%2BBWlLgDYQMNYtQGnXn%2FUcfLEo73de17LjRZObo%2FTDQ3%2Bxef7Gb2zSZ1KQ7YnxnRKm9XFNdhUCQ%3D%3D\"}]}\r\ncf-ray: 9ab54cfd9c2cb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37343,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"a50301ccf048813905fd74a24be7e968","sha1":"a1fa46087d3b63986ba44eb4a84e58fea42fda2d","sha256":"b9cf7883fc81f0959092c6dfc2440cf5313206f166a182058b8afc80bfeea338","sha512":"d08a1677ce206ff9060c6f21c100cf7a293eb42c460633826e2ed50cdba8041f20ca6c4c225ddb2c1c283be48cfde1b6cc98b4e9bd9fb3d7a9f8dfb9f016029e","ssdeep":"768:xm/tbQRTGonwAyeq3LPfIkl0Qw2t6LAr89M:xm/qTGmwiuIu0PWu2","tlshash":"a9f274216e242159f61bf166bef29f5aeb1fa006d20105fcb8d53404c2ce67b427e79e","first_seen":"2025-06-21T21:21:19.383644Z","last_seen":"2026-04-04T18:52:02.065209Z","times_seen":44,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/templates/popcornie-dark/css/fontawesome.css","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:58.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megakino.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:45:04 GMT","end":"Thu, 26 Feb 2026 22:43:37 GMT"},"fingerprint":{"sha1":"39:A6:86:EB:F5:46:7E:D2:2E:2A:00:ED:69:EA:6D:93:45:42:07:C9","sha256":"5E:5C:2F:8A:DB:3F:98:96:80:8E:DB:D8:6E:4A:E7:A6:B6:D2:53:4B:04:6A:33:0C:AF:7F:D3:2F:34:96:6F:F7"}}},"request":{"raw":"GET /templates/popcornie-dark/css/fontawesome.css HTTP/1.1\r\nHost: megakino.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/films/5892-five-nights-at-freddys-2.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yg_token=1765291678.7650d60511aa4d7ae12a98ff0aa9bc9dcc9416046f0ae7703c1c6f12963a6de1; PHPSESSID=tt3vqe33abnk6gekore9ipas5i\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 14:47:58 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Tue, 22 Jun 2021 12:40:03 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 02 Dec 2026 18:28:06 GMT\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nage: 591591\r\ncf-cache-status: HIT\r\netag: W/\"60d1da23-15c8f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ykUOgq2Ec%2FqxzbVZobsfxrqn5GOBMrmns4NGtd1IfD9yg4V92kFo7y%2BhhpmHQQFuJ%2B5Y4q8oO4I9tspKnUg1bmY12tZS8m9wBQ%3D%3D\"}]}\r\ncf-ray: 9ab54cfd8c27b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89231,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (62509), with CRLF line terminators","md5":"459d72e1304210d356c7c8715e9c578e","sha1":"bd273ab72346246b5b3e7e55e12a70a230538af3","sha256":"2bb81db96525634e4bcc2f525549f962fa3767c6a92c824ce1d3cd03c8758e6c","sha512":"71859fe8e34e43c9f1eb7ea80778ffc5b8a7b3bef5f01aee2dbd0e45cac4b4591302228c0a699ba66014bdef104e3c649a365c5a7714bd4d07fa2201eee42cca","ssdeep":"768:LOej31+1Gn9QucJIk+k7ls9f+26HYE0DzKUC/IMi3no87ILxVSTKtWEVAQWp:LL41aqIk+QY4H50DOUbt3I/vtXq","tlshash":"c793e9b8e54c01d9a732c04fbf42b3bc61baf73dd5911d95f00e591c2ad26a81189fba","first_seen":"2023-06-10T11:29:37Z","last_seen":"2026-04-04T18:52:02.087127Z","times_seen":136,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"watch.gxplayer.xyz/assets/player/jwplayer-8.26.5/jwplayer.core.controls.js","fqdn":"watch.gxplayer.xyz","domain":"gxplayer.xyz","tld":"xyz"},"ip":{"addr":"172.67.148.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://watch.gxplayer.xyz/watch?v=5Z4YVCRW","date":"2025-12-09T14:47:59.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxplayer.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 14:28:46 GMT","end":"Sun, 15 Feb 2026 15:26:02 GMT"},"fingerprint":{"sha1":"14:20:13:71:30:43:F8:E3:C9:A4:EA:55:8D:3C:C1:01:17:F4:FD:8D","sha256":"3D:D4:2A:57:98:06:76:F5:AE:D3:FB:4F:6E:38:2D:39:DC:72:96:9F:06:E7:3E:2D:4F:83:BB:2A:D8:C2:BA:1C"}}},"request":{"raw":"GET /assets/player/jwplayer-8.26.5/jwplayer.core.controls.js HTTP/1.1\r\nHost: watch.gxplayer.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://watch.gxplayer.xyz/watch?v=5Z4YVCRW\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 14:47:59 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 08 Jan 2023 16:33:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"63baf062-51b1f\"\r\nexpires: Tue, 09 Dec 2025 14:48:59 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FijH8H5i2KZH4pQ1vJW3BqKTVrZ8kqv6xOorM02VaMRwqgT9v2eujx20N3CWr5jnW1ns%2FMCYNjWG8eOgVIRdsXQUR0ZxcpcwrSO%2FJIkyExsFig%3D%3D\"}]}\r\ncf-ray: 9ab54d03ca115fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":334623,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"63a963853b34e6de450b5bfdd2e5c05d","sha1":"eba88cc5db9b599dfffcb3fe7a0777d5f0aa5b55","sha256":"207f02b7115a168fafab345cc7b02954256a44df1c597b1f060a062a97a03a53","sha512":"d33a0375f4188be0224c7e74eb185c1b8a62564e86cb74544a091fca0f78feab6bd0166a14a6f41456830daa26f5cbb431f8954c30e73575ba15a0a206a4562d","ssdeep":"6144:RII9XOT6xEXffnxpv+cQDdEMcXoQuwmjaji:20OT6xEXf/xpvSEMVae","tlshash":"2b641a39b142323556d7a2a9625b4609b33b9045b5068bacff29e9d84c7c48f30f7fb4","first_seen":"2023-03-12T14:32:06Z","last_seen":"2026-04-04T18:52:02.089245Z","times_seen":47,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/templates/popcornie-dark/images/kp.svg","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:59.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megakino.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:45:04 GMT","end":"Thu, 26 Feb 2026 22:43:37 GMT"},"fingerprint":{"sha1":"39:A6:86:EB:F5:46:7E:D2:2E:2A:00:ED:69:EA:6D:93:45:42:07:C9","sha256":"5E:5C:2F:8A:DB:3F:98:96:80:8E:DB:D8:6E:4A:E7:A6:B6:D2:53:4B:04:6A:33:0C:AF:7F:D3:2F:34:96:6F:F7"}}},"request":{"raw":"GET /templates/popcornie-dark/images/kp.svg HTTP/1.1\r\nHost: megakino.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/films/5892-five-nights-at-freddys-2.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yg_token=1765291678.7650d60511aa4d7ae12a98ff0aa9bc9dcc9416046f0ae7703c1c6f12963a6de1; PHPSESSID=tt3vqe33abnk6gekore9ipas5i; _ga_0Q50V6DX0B=GS2.1.s1765291678$o1$g0$t1765291678$j60$l0$h0; _ga=GA1.1.1734660940.1765291679\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 14:47:59 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Thu, 09 Jul 2020 15:38:13 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 02 Dec 2026 18:28:17 GMT\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nage: 591581\r\ncf-cache-status: HIT\r\netag: W/\"5f0739e5-84d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pJVzcZOhJRrwNCYx1BfqcEHSipZ5KGK1LHKyFpYMyOisSL8IpMnwYsFCMBrW%2FfS8CIfZIfQlMHmN%2BpCt3ohySIDqaznvheB4Ig%3D%3D\"}]}\r\ncf-ray: 9ab54d040ca7b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2125,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7865d11e7bbcd02a65ac5b9c71d99433","sha1":"0d18739206b56389ee0c7c6b55df35be871f2a19","sha256":"49af08ece189b895513cd87cd656facbfb13e0936e4314a82edc009e19ad8498","sha512":"62258f349c3950b0719690f7a300c4e831ed56b6590d1e088d80efbf75dc83fbaf26afbc9b506adf5b237a7762a39493271d08ec0089f6ab477fe55ecac300f3","ssdeep":"","tlshash":"2b4132e863278ebb6a50f9faf1382306233502662c36d58cf70b359f3d5675345e8a52","first_seen":"2023-07-16T13:19:50Z","last_seen":"2026-04-04T18:52:02.05605Z","times_seen":39,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"watch.gxplayer.xyz/assets/player/jwplayer-8.26.5/provider.hlsjs.js","fqdn":"watch.gxplayer.xyz","domain":"gxplayer.xyz","tld":"xyz"},"ip":{"addr":"172.67.148.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://watch.gxplayer.xyz/watch?v=5Z4YVCRW","date":"2025-12-09T14:47:59.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxplayer.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 14:28:46 GMT","end":"Sun, 15 Feb 2026 15:26:02 GMT"},"fingerprint":{"sha1":"14:20:13:71:30:43:F8:E3:C9:A4:EA:55:8D:3C:C1:01:17:F4:FD:8D","sha256":"3D:D4:2A:57:98:06:76:F5:AE:D3:FB:4F:6E:38:2D:39:DC:72:96:9F:06:E7:3E:2D:4F:83:BB:2A:D8:C2:BA:1C"}}},"request":{"raw":"GET /assets/player/jwplayer-8.26.5/provider.hlsjs.js HTTP/1.1\r\nHost: watch.gxplayer.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://watch.gxplayer.xyz/watch?v=5Z4YVCRW\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 14:47:59 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 08 Jan 2023 16:33:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"63baf056-5e61e\"\r\nexpires: Tue, 09 Dec 2025 14:48:59 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ip24opoVXwNgCTpDhUoAjmczyhJAsoEzTjT20uQw5FN9JBOwZZX2GSE2dcUndOyAkg60Ys6JdZRSv8JU3XOhhXNB4v7e9N3mShZol3UICZ1dbw%3D%3D\"}]}\r\ncf-ray: 9ab54d03da175fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":386590,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"6a93d76950d84ee91e0c47324a5df8a8","sha1":"a4a0a648bd3a3f3313f6f5a98340add255f114fd","sha256":"f8b34355d8fd06168b3ec1939c06d3310ddeb4550a02b29e3cd9555200639de9","sha512":"3c777483291c31ff6963d8ec9d12b071d3685cf737391cbbd557a91c65ae554a7b71822567a3939e42bdb815036db7cf253513f586e0a027458723b7db2ed69d","ssdeep":"6144:QiY41OZdKOOf+nSIY/4nN/Aq5YrOue7stE6KgT/:HY+/4BAq5Yr1eG","tlshash":"81842adeb695b0664283b1a4903f5607633b7d0a7409c1acfb27e5d61db8889b03bf74","first_seen":"2023-03-12T15:37:46Z","last_seen":"2026-04-04T18:52:02.093948Z","times_seen":46,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glxpl01.com/ts/MWoyMnNzcFBNTWwrTkZ4QlQ1em5WQTFJRUQ1Y29OSXJmWUZTaVhVRSsxZFF6Q25kb0RDbTlMNTdQZzZVbzF4bw%25253D%25253D.html%26id%3D24572","fqdn":"glxpl01.com","domain":"glxpl01.com","tld":"com"},"ip":{"addr":"104.21.9.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://watch.gxplayer.xyz/watch?v=5Z4YVCRW","date":"2025-12-09T14:47:59.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glxpl01.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Dec 2025 15:29:30 GMT","end":"Sat, 07 Mar 2026 16:24:35 GMT"},"fingerprint":{"sha1":"EE:8B:83:79:AC:70:EF:20:10:39:4D:8F:14:D4:97:E0:7E:9E:B5:CF","sha256":"07:9D:54:E3:C1:7F:D0:EF:BA:D3:71:7C:F8:FB:C6:46:31:50:0F:F8:44:A7:14:19:1A:A7:A7:5F:34:2B:E9:32"}}},"request":{"raw":"GET /ts/MWoyMnNzcFBNTWwrTkZ4QlQ1em5WQTFJRUQ1Y29OSXJmWUZTaVhVRSsxZFF6Q25kb0RDbTlMNTdQZzZVbzF4bw%25253D%25253D.html%26id%3D24572 HTTP/1.1\r\nHost: glxpl01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://watch.gxplayer.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://watch.gxplayer.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 14:47:59 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-disposition: inline;\r\nlast-modified: Sun, 27 Feb 2020 13:25:00 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Requested-With, AMP-Access-Control-Allow-Source-Origin, Content-Type, Range, Origin, Cache-Control, Pragma, Authorization, Accept, Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: Accept-Ranges, Content-Encoding, Content-Length, AMP-Access-Control-Allow-Source-Origin, Content-Range\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QvO1ct180yyZg0g9KLpuMt8W4W1l7SaqI45c6tW7Lm4KG1%2BZDxButmorxtQd6wkKGXzLWq67MFBN7jpc5e%2FcDdXnfns2AFdPXQ%3D%3D\"}]}\r\ncf-ray: 9ab54d071c4756c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":803512,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"98d617ef3e811784e62996b60119961e","sha1":"64289f71e1d5da6b667b89002873941ed16e7fa0","sha256":"b2ef528f2ca8bb75b7731d0b6ca689d993ac49d04a6f28a1c56732b972b01d50","sha512":"4237169c2f0ffddaa2efc49b8ccf37b2a29ba9f335a9be80b5d10ad5e1c907cb157404d6c6beb31167bad45645185a384c34996070f0e5c509e2f2b996939f30","ssdeep":"24576:s5F/0ddx43jvyNirzKknqPoWXGaHPfR2I:s4XxY6NeGknqPoIGavZx","tlshash":"fb45e1034341f370a2e953f66c1206e463055b90e6eabf90e974c2716e9b13d76de8eb","first_seen":"2025-12-09T14:48:33.818115Z","last_seen":"2025-12-09T14:48:33.818115Z","times_seen":1,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":33,"dns":12,"connect":1,"send":0,"wait":81,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/templates/popcornie-dark/webfonts/manrope-400.woff2","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:58.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megakino.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:45:04 GMT","end":"Thu, 26 Feb 2026 22:43:37 GMT"},"fingerprint":{"sha1":"39:A6:86:EB:F5:46:7E:D2:2E:2A:00:ED:69:EA:6D:93:45:42:07:C9","sha256":"5E:5C:2F:8A:DB:3F:98:96:80:8E:DB:D8:6E:4A:E7:A6:B6:D2:53:4B:04:6A:33:0C:AF:7F:D3:2F:34:96:6F:F7"}}},"request":{"raw":"GET /templates/popcornie-dark/webfonts/manrope-400.woff2 HTTP/1.1\r\nHost: megakino.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/films/5892-five-nights-at-freddys-2.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yg_token=1765291678.7650d60511aa4d7ae12a98ff0aa9bc9dcc9416046f0ae7703c1c6f12963a6de1; PHPSESSID=tt3vqe33abnk6gekore9ipas5i\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 14:47:58 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 16912\r\nlast-modified: Sat, 20 Mar 2021 10:04:36 GMT\r\npriority: u=3,i=?0\r\netag: \"6055c8b4-4210\"\r\nexpires: Wed, 02 Dec 2026 18:30:50 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 591427\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tFVI%2F65o0Hk3AU49v9wcBKBGJtwIDwWCRzHw3cx5NEV3%2BQvwUMXkMw4%2BAEG%2FoEWQknLXjUETPy5F3x0MEOvczBNARIKztibJdg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ab54cfd8c28b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16912,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16912, version 1.0","md5":"6f0c39284c416f2d83eb121cdc539ac1","sha1":"a8838088fb55142021b3b5bb8a9e12cf2e7ee06d","sha256":"1c9c332ec701b5293c54867d3c992bccfe9bea9c0816f4c6b28bbb639e536dca","sha512":"1051e20938eb8cd8b363d56261cc858913bcd9805363c73e90dd3e55f176d51edfb19bfcca85025d9c688a2911a225174205cd3c9ec690031830686ac3926a7d","ssdeep":"384:c6C3WHIeV4f4Lcqs/1M1DcSDTGS2f2X4zzuFjd/JrRTUP9:c6PIe2ggoxXT8zuFjZZRT+9","tlshash":"d972c098d0280bbf8879195c83547c5d6dd963892dacf434139215fca9ca6fc0eabb09","first_seen":"2023-04-30T22:26:17Z","last_seen":"2026-04-04T18:52:02.117601Z","times_seen":1085,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/templates/popcornie-dark/images/bg.webp","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:58.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megakino.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:45:04 GMT","end":"Thu, 26 Feb 2026 22:43:37 GMT"},"fingerprint":{"sha1":"39:A6:86:EB:F5:46:7E:D2:2E:2A:00:ED:69:EA:6D:93:45:42:07:C9","sha256":"5E:5C:2F:8A:DB:3F:98:96:80:8E:DB:D8:6E:4A:E7:A6:B6:D2:53:4B:04:6A:33:0C:AF:7F:D3:2F:34:96:6F:F7"}}},"request":{"raw":"GET /templates/popcornie-dark/images/bg.webp HTTP/1.1\r\nHost: megakino.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megakino.cx/templates/popcornie-dark/css/styles.css?v=14\r\nCookie: yg_token=1765291678.7650d60511aa4d7ae12a98ff0aa9bc9dcc9416046f0ae7703c1c6f12963a6de1; PHPSESSID=tt3vqe33abnk6gekore9ipas5i\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 14:47:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 204384\r\nlast-modified: Sat, 19 Apr 2025 17:31:48 GMT\r\npriority: u=4,i=?0\r\netag: \"6803de04-31e60\"\r\nexpires: Wed, 02 Dec 2026 18:28:09 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 591589\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hVyztofJOyN6YfUeIwobFGcVk%2B%2FspSyXemz4X6i6BIXkit8BLYP0s8o2i11vk457hvmiKYQmje58b411DzMwH7P8ZS2geYKQcQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ab54cfe7c3eb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":204384,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1080, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f4df62e5e5d51f64a9c53ed75e63766c","sha1":"0544f9295d78501e97fab81918455370e491ae81","sha256":"6f36c9292c970ce7de1c8eb6734707b42ee16d389dace5d1769fb2818b8e17a0","sha512":"28ee0f1de7475a74801868979fa3f85e7cad81368f4f71093a9d353021e2b66c319db5f17061495090b78c90ffa0d1afb867c040e58d0dd473cb39fdceabaee3","ssdeep":"6144:mYe0noW08hmDh2K+KmNJGkHtf9Ns45Gu3u:i0J08hmDhsKmNJ9B9NNr3u","tlshash":"841423f07ffe0aa6cd17748e1626a6409f90dd572123aa7125f65196fccee20e2e4c18","first_seen":"2025-06-21T21:21:19.390976Z","last_seen":"2026-04-04T18:52:02.097059Z","times_seen":44,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/2.0.3/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://watch.gxplayer.xyz/watch?v=5Z4YVCRW","date":"2025-12-09T14:47:58.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/jquery/2.0.3/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://watch.gxplayer.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 14:47:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 26454\r\ncf-ray: 9ab54d00bcf635a6-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec4-14696\"\r\nlast-modified: Mon, 04 May 2020 16:11:48 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 398163\r\nexpires: Sun, 29 Nov 2026 14:47:58 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4f6IHuLMofKymRJUSoj%2Bl7meItn5P0ceiA33G0KHe2PfBPm475mrx1%2FAoxjLcPCaZ7AKs3IZ3YG0Xc6vZsIqGik%2BcEoXN8KHqpAJqYOXzdpPi3gkLeRiFRs1VlGZlyTAuKk2x5qR\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83606,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32023)","md5":"ccd0edd113b78697e04fb5c1b519a5cd","sha1":"a6eedf84389e1bc9f757bc2d19538f8c8d1cae9d","sha256":"a57b5242b9a9adc4c1ef846c365147b89c472b9cd770face331efcb965346b25","sha512":"7a9cc9f66b3ed0fabecc532b1b595754dbe311782d7cac7d8ae116ab3de199b694da6fc3a75a5c9a9633b927432ea5fa3cc223ccc3b2185c0c73e4a480584c16","ssdeep":"1536:mnWi6p4BmVLFijGb2gXke71t5tgPBHlxNLIJBanUEwf7rmvsMn3lhMr:GUL5uxNL/4Cr3lOr","tlshash":"8083f9dd73c2b06257bb20b9006f640ff2364d6a280d8564f125d8e9bcb5a4d827bf6d","first_seen":"2023-03-07T01:16:40Z","last_seen":"2026-04-05T14:09:38.038402Z","times_seen":5645,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":38,"dns":0,"connect":1,"send":0,"wait":16,"receive":1,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"watch.gxplayer.xyz/images/capibara_2.png","fqdn":"watch.gxplayer.xyz","domain":"gxplayer.xyz","tld":"xyz"},"ip":{"addr":"172.67.148.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://watch.gxplayer.xyz/watch?v=5Z4YVCRW","date":"2025-12-09T14:47:58.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gxplayer.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 14:28:46 GMT","end":"Sun, 15 Feb 2026 15:26:02 GMT"},"fingerprint":{"sha1":"14:20:13:71:30:43:F8:E3:C9:A4:EA:55:8D:3C:C1:01:17:F4:FD:8D","sha256":"3D:D4:2A:57:98:06:76:F5:AE:D3:FB:4F:6E:38:2D:39:DC:72:96:9F:06:E7:3E:2D:4F:83:BB:2A:D8:C2:BA:1C"}}},"request":{"raw":"GET /images/capibara_2.png HTTP/1.1\r\nHost: watch.gxplayer.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://watch.gxplayer.xyz/watch?v=5Z4YVCRW\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 14:47:58 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 04 Jun 2025 17:52:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"684087cd-26448\"\r\nexpires: Tue, 09 Dec 2025 14:48:58 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vMURkXxcP4qAu0q1V%2BLKkHbPFwrVrSB%2BPnLmOEtYktaKq2mX98%2BdrkdrexfdjJPulncT2EQ%2FhaKEoPi2BuhxNDFqzVbq15IROzOOaEr6YJDJXQ%3D%3D\"}]}\r\ncf-ray: 9ab54d007f7f5fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156744,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 795, 8-bit/color RGBA, non-interlaced","md5":"a7ae2e1f510f264143e34afe45507c33","sha1":"26a9b9b43145c51ec9c09297c078972f2c58f918","sha256":"aea193c0135933e802d77fa2c60c84b698a31c21bbb1dc78f10b54abc6ea6a59","sha512":"2f96882bd3add574263717bb12bf4d82e124c45503acc4414a97045e9e4aef9fca9a90de08342d02c69b17dc2e0013467b14df7a541bbedcdb98166744be873e","ssdeep":"3072:J1KafxeOq2UiP4qXaYUjrxOFcPKy7hbaNwv06tiPnly1IdHpS:J1gz2Uo5KYUxE0b1hiPpa","tlshash":"4be31295b6ca131bc16c70b1dcac0e4246784766bfc354ade3d8b54d9e03e3a3d5e2a1","first_seen":"2025-10-30T10:37:45.897612Z","last_seen":"2026-04-04T18:52:02.101627Z","times_seen":11,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/engine/lazydev/dle_filter/lib/dle_filter.js.php","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:58.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megakino.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:45:04 GMT","end":"Thu, 26 Feb 2026 22:43:37 GMT"},"fingerprint":{"sha1":"39:A6:86:EB:F5:46:7E:D2:2E:2A:00:ED:69:EA:6D:93:45:42:07:C9","sha256":"5E:5C:2F:8A:DB:3F:98:96:80:8E:DB:D8:6E:4A:E7:A6:B6:D2:53:4B:04:6A:33:0C:AF:7F:D3:2F:34:96:6F:F7"}}},"request":{"raw":"GET /engine/lazydev/dle_filter/lib/dle_filter.js.php HTTP/1.1\r\nHost: megakino.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/films/5892-five-nights-at-freddys-2.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yg_token=1765291678.7650d60511aa4d7ae12a98ff0aa9bc9dcc9416046f0ae7703c1c6f12963a6de1; PHPSESSID=tt3vqe33abnk6gekore9ipas5i\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 14:47:59 GMT\r\ncontent-type: application/x-javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GLLDJdf8IfoaZkGmnTgC04Fi0d%2Bm91msnvXpfVznu8kRlASZqtgiSAAFYTnfj5UXPIBHJDuLpElH0rM5Hf2lfXdYap6dpYtqjQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ab54cfdcc35b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":349,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text","md5":"e64fc3914e46bff9cbb777abc3868872","sha1":"5c62a4c0550b0b44adfdf72b2c1ce760205f9d92","sha256":"1c7f42954d984bc42a3faa10e6d44381134ae22f34d176a177b058788247fb27","sha512":"ab5b73d0412e1f322921b37bfbe6c098d6a84af30b049efe1994d8cbcd97b99b03c767a126118ff67e3164954e8b38c04313bb57b7d802fcec0c79693398c226","ssdeep":"","tlshash":"53e026d920a0046f6b2ddcedbd7dcf03636827b4681dd460840c045ae38b637c0e78e8","first_seen":"2023-05-05T01:31:46Z","last_seen":"2026-04-04T18:52:02.090489Z","times_seen":48,"resource_available":true,"data":null}},"time_used":876,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":876,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cvt-s2.agl006.host/o?vst=_jMvNDY1NT_jNmUtNTVjYiWWZTZiL-I2ODEtM-NkZDJiMzBkZGRk%2C_jMvYjM1ZDZhM2MtNzRjNSWWZTIyL-ExM-QtOGUWNzYxN-NmOTJj\u0026lang=en\u0026container=.pmovie__player.tabs-block\u0026cp=%7B%22domain%22%3A%22megakino.dad%22%2C%22host%22%3A%22757f0897b6694b79aad7cbf152c4d567%7Cmegakino.dad%22%7D","fqdn":"cvt-s2.agl006.host","domain":"agl006.host","tld":"host"},"ip":{"addr":"172.67.212.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:58.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agl006.host","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 07:14:06 GMT","end":"Fri, 30 Jan 2026 08:12:47 GMT"},"fingerprint":{"sha1":"80:21:9A:DF:14:FB:18:25:CD:66:CA:86:34:3A:13:34:30:AB:16:1C","sha256":"1F:E6:52:6E:85:38:1B:B9:05:CB:48:AD:F6:98:68:CC:A9:7C:AB:C1:47:F0:62:85:4D:53:25:EA:40:64:94:DA"}}},"request":{"raw":"GET /o?vst=_jMvNDY1NT_jNmUtNTVjYiWWZTZiL-I2ODEtM-NkZDJiMzBkZGRk%2C_jMvYjM1ZDZhM2MtNzRjNSWWZTIyL-ExM-QtOGUWNzYxN-NmOTJj\u0026lang=en\u0026container=.pmovie__player.tabs-block\u0026cp=%7B%22domain%22%3A%22megakino.dad%22%2C%22host%22%3A%22757f0897b6694b79aad7cbf152c4d567%7Cmegakino.dad%22%7D HTTP/1.1\r\nHost: cvt-s2.agl006.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 14:47:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nuwebsockets: 20\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FF3jSMdAnxWUm6%2BdgTIam7lO41rWh4njfQl%2F8U4HYBMI3PcTo8NtVrf1L8z%2B6%2FZWI5h93mdUj%2FNqDeAv0psdapk7RgYQs2ZPZ0c6CSCFGfPO7w%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ab54cfe7af02efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2779,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2779), with no line terminators","md5":"7f3e9025af8ec5682e773822ebd6a5f2","sha1":"abfe19dab5c71cc8a4827d83ddaf83575da24f97","sha256":"99ac2577b65c4eff59b1b5e017892a6276c22c482e13011964fde55bf08ff68f","sha512":"cb4da0629b2e146b44244c1f87fc8bb330b6586c19d7b3843c64d387ac40126132af6dd06490dee59c6844d64dcbfd9d19384c8680abca127d087cb46339cf1e","ssdeep":"","tlshash":"4751c8af1dac84350de5008bf9cc7e49875940af761058c4c64ddc3b8a9cde771a9ad6","first_seen":"2025-12-09T14:48:33.824694Z","last_seen":"2025-12-09T14:48:33.824694Z","times_seen":1,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool@latest","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://watch.gxplayer.xyz/watch?v=5Z4YVCRW","date":"2025-12-09T14:47:59.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/disable-devtool@latest HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://watch.gxplayer.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 6646\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 0.3.9\r\nx-jsd-version-type: version\r\netag: W/\"4514-YJEJ2C3rDH3T2dISgI3LoFSM49E\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 09 Dec 2025 14:47:59 GMT\r\nage: 43104\r\nx-served-by: cache-fra-eddf8230123-FRA, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17684,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17663)","md5":"7fa174926682313cc5a067077b0bb22d","sha1":"609109d82deb0c7dd3d9d212808dcba0548ce3d1","sha256":"5a7b9b2c807f85575c9ebc1f508e849b53430870b2d0fb6c02b2de3df661cb63","sha512":"83a593d4b8648b78031259becd96b4c33226e9462c2e26013ee0746ff58a7b710159d0d380d001d7740e9485ee346491c16e3fdb0d334f5b6cfabe6f90cda9b6","ssdeep":"192:m+5ekRvDLCpBK+BpP78nPk6O9ShgzsqcSYV0GtI+uwicvsbIUiJE2KmnyKU:mLiPCvRvT8nPk6cSCzsqGVJeZcsb8S9","tlshash":"0582c4ccb48270715b77a9e9507f454ab23aae96888c8040f13ed8e42c7c56ec267f7d","first_seen":"2025-08-02T03:49:54.562881Z","last_seen":"2026-04-05T12:41:13.861184Z","times_seen":3601,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/font-awesome/latest/css/font-awesome.min.css","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://watch.gxplayer.xyz/watch?v=5Z4YVCRW","date":"2025-12-09T14:47:58.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 04:05:50 GMT","end":"Thu, 05 Feb 2026 05:05:47 GMT"},"fingerprint":{"sha1":"CE:AE:8E:FE:2A:86:03:2B:16:43:FF:98:36:53:B2:ED:10:BF:FD:23","sha256":"95:CB:A8:7B:9C:88:98:F1:EF:D6:C9:79:E1:98:63:76:71:B7:BD:E2:89:6D:CD:55:61:DB:C0:4E:B1:1E:67:F7"}}},"request":{"raw":"GET /font-awesome/latest/css/font-awesome.min.css HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://watch.gxplayer.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 14:47:58 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: 9ab54d00da8456c6-OSL\r\ncdn-pullzone: 252412\r\ncdn-uid: b1941f61-b576-4f40-80de-5677acb38f74\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"269550530cc127b6aa5a35925a7de6ce\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:56 GMT\r\ncdn-cachedat: 05/31/2025 19:01:08\r\ncdn-proxyver: 1.28\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 874\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: a58656aaff8938ddb01777a9fa16755e\r\ncdn-cache: HIT\r\nage: 1762553\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-04-05T13:45:19.735814Z","times_seen":237223,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":55,"dns":1,"connect":1,"send":0,"wait":12,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/waypoints/4.0.1/jquery.waypoints.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://watch.gxplayer.xyz/watch?v=5Z4YVCRW","date":"2025-12-09T14:47:58.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/waypoints/4.0.1/jquery.waypoints.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://watch.gxplayer.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 14:47:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3171\r\ncf-ray: 9ab54d00dd4235a6-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb0402f-448c\"\r\nlast-modified: Mon, 04 May 2020 16:17:51 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1498112\r\nexpires: Sun, 29 Nov 2026 14:47:58 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Et7sza0e1n2oH6t3VO0nfmspOAM%2BEuKK%2B%2BaZUkHP%2FVP5UREo1BL2V7HMHI1VXftHbQ%2BjgUPm86TWhPWh9alhs9pd9XJbAJS%2FOJA8iI7siUhIoiJo4%2FM37Ius4YIVtjaSTcAtD95R\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17548,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"4aa246e37085616c037be899ebd51e52","sha1":"afdb3efef99d69531ead73d514a58ed04188b585","sha256":"5c06e8d032a023b4323d4b07cbf9c006652560faba58fb27b572af4f477a7ac2","sha512":"086df548e3643f6b782956fb0773fd4f7a3e3bed145ecb440c3aba3b672108963b6f5701a7e29ae448305f22f9d132a9e8201e67e796f7bc34ba9c1e04cea580","ssdeep":"384:5BtFLqx76l7FdKcjJ0MKMW9hAPx4oLm8W92yShKqfvTFOUiVonen:5Fqxgn4E7vfrF/+onen","tlshash":"ef72cc482eeb20136f4b60b9fc5b51467276812b54c95c6778dc92d80fe21391ebaff8","first_seen":"2023-04-09T10:24:53Z","last_seen":"2026-04-05T11:07:27.777228Z","times_seen":563,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":48,"dns":3,"connect":6,"send":0,"wait":10,"receive":1,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megakino.cx/uploads/posts/2022-02/batman.webp","fqdn":"megakino.cx","domain":"megakino.cx","tld":"cx"},"ip":{"addr":"172.67.146.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megakino.cx/films/5892-five-nights-at-freddys-2.html","date":"2025-12-09T14:47:59.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megakino.cx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:45:04 GMT","end":"Thu, 26 Feb 2026 22:43:37 GMT"},"fingerprint":{"sha1":"39:A6:86:EB:F5:46:7E:D2:2E:2A:00:ED:69:EA:6D:93:45:42:07:C9","sha256":"5E:5C:2F:8A:DB:3F:98:96:80:8E:DB:D8:6E:4A:E7:A6:B6:D2:53:4B:04:6A:33:0C:AF:7F:D3:2F:34:96:6F:F7"}}},"request":{"raw":"GET /uploads/posts/2022-02/batman.webp HTTP/1.1\r\nHost: megakino.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megakino.cx/films/5892-five-nights-at-freddys-2.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yg_token=1765291678.7650d60511aa4d7ae12a98ff0aa9bc9dcc9416046f0ae7703c1c6f12963a6de1; PHPSESSID=tt3vqe33abnk6gekore9ipas5i; _ga_0Q50V6DX0B=GS2.1.s1765291678$o1$g0$t1765291678$j60$l0$h0; _ga=GA1.1.1734660940.1765291679\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 14:47:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 57000\r\nlast-modified: Sat, 19 Apr 2025 13:50:25 GMT\r\npriority: u=4,i=?0\r\netag: \"6803aa21-dea8\"\r\nexpires: Wed, 02 Dec 2026 18:28:17 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 591581\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h7oEBxPTePH%2BTchpN9ltralz%2BBHNvkaIFubBAz0fsfarV6bFbeOQnVyfxsrqk9nKCkdjv%2F98XUPYhyBLJOgjwg7O%2FLVEiYE8TA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ab54d040ca3b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57000,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 840x396, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3fc7b9c7db7d07f07bac1748fd1c888f","sha1":"ddff52a5ea073f47a0ee8874774f5397b5a0bc2d","sha256":"df2da638d0cab84a3ad81cd2342239749837c187506faf3a4074ea2b2a7f4d53","sha512":"7bbc936ff6e20cc19bea4eaa4ddc878babcde97076ffb77abcf0d806a764bc3797192d02a5729a5b7cd8f3f3a858c770bf8ea0439c2f90cb0bcb819a512d7295","ssdeep":"1536:akkGICqMC4zl3zaUl80fjPjobRUx8OjIhllE80zbsGL2:hcCqMC8zFl7fjSG8OMhll0C","tlshash":"f843f2f4ea46e1f197f62538742d02e190afd0762dd740c950efdb6683388b244666fe","first_seen":"2025-06-21T21:21:19.409718Z","last_seen":"2026-04-04T18:52:02.081806Z","times_seen":33,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"megakino.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}