{"report_id":"555287c9-bfc2-4180-974a-fcfabfb2c7c6","version":6,"status":"done","tags":[],"date":"2025-09-19T20:35:31Z","url":{"schema":"http","addr":"dsvplay.com/e/vqi8d81ul4je","fqdn":"dsvplay.com","domain":"dsvplay.com","tld":"com"},"ip":{"addr":"172.67.68.48","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dsvplay.com/e/vqi8d81ul4je","fqdn":"dsvplay.com","domain":"dsvplay.com","tld":"com"},"title":"Katies Mom 2023 VOSTFR 720p WEB H264-PiCKLES - DoodStream"},"submit":{"url":{"schema":"http","addr":"dsvplay.com/e/vqi8d81ul4je","fqdn":"dsvplay.com","domain":"dsvplay.com","tld":"com"},"ip":{"addr":"172.67.68.48","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-24T20:35:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":10}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"bunkersparring.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"bunkersparring.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"dsvplay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"dsimgcdn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"dsimgcdn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"undefined","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"undefined","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"wrathypenitis.help","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"wrathypenitis.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"wr.amigojimbang.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"i.doodcdn.io","ip":{"addr":"104.26.14.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":200454,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":7,"received_data":118478,"sent_data":3124,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bunkersparring.shop","ip":{"addr":"212.117.186.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"unknown","domain_rank":187180,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":2,"received_data":2765,"sent_data":2879,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"d3eub2e21dc6h0.cloudfront.net","ip":{"addr":"54.230.245.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":232955,"sent_data":428,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":1222,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":688704,"sent_data":1799,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ukankingwithea.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":32650,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":831,"sent_data":428,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"undefined","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":1,"received_data":0,"sent_data":981,"comment":"","tags":null,"fingerprints":null},{"fqdn":"tionsandindeedther.org","ip":{"addr":"3.174.113.76","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":4102,"sent_data":1016,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]}]},{"fqdn":"dsimgcdn.com","ip":{"addr":"104.26.3.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":2,"received_data":131884,"sent_data":894,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"wr.amigojimbang.com","ip":{"addr":"23.109.170.29","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":88552,"sent_data":427,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"accounts.google.com","ip":{"addr":"64.233.164.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":103,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":6,"received_data":13635,"sent_data":3693,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]},{"fqdn":"parashparyro.com","ip":{"addr":"172.67.147.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":1026,"sent_data":1142,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"so1104cor.cloudatacdn.com","ip":{"addr":"141.94.135.34","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"unknown","domain_rank":4381921,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":15692,"sent_data":413,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"dsvplay.com","ip":{"addr":"104.26.6.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":3,"request_count":3,"received_data":48064,"sent_data":1503,"comment":"","tags":null,"fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"VideoJS:7.21.5","description":"Video.js is a JavaScript and CSS library that makes it easier to work with and build on HTML5 video.","website":"https://videojs.com","common_platform_enumeration":"","icon":"VideoJS.svg","categories":["Video players"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.doodcdn.io","ip":{"addr":"104.26.14.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":224488,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":113769,"sent_data":414,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"wrathypenitis.help","ip":{"addr":"23.109.170.229","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":2,"received_data":1071,"sent_data":1075,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/videojs-hotkeys/0.2.28/videojs.hotkeys.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2ecb2bd8a424c8e8cf507ce8bd933c2","sha1":"3cbc08ca052ea25c3b0834b9291a3ca1e9122e26","sha256":"4c0745052abbb26087a707bb0a043b43c393674055ba2d4452ac89e6923eb099","sha512":"5c5cb01b30e7dad3dcfad17845b399768970d755c1743dce82602f9c2fb2a220f5a8148656c8593d912ae9dd576330ab66936b557a4f72e60f771de4d1066473","ssdeep":"96:GGArczM0HsUJKjS0kCofLMdAb71JUbhCYRE6eVK5HtkX5ugRrqaTd:rAIzM0MWKjJkvId4YbbRLp5SX57nd","tlshash":"c291a6d87043b47241f99ae564bb948b13722da76c0c007a251debfc3dbd79b43038aa","size":4580,"data":"","first_seen":"2023-03-09T00:26:57Z","last_seen":"2026-04-05T09:06:05.575744Z","times_seen":2027,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsvplay.com/e/vqi8d81ul4je","fqdn":"dsvplay.com","domain":"dsvplay.com","tld":"com"},"ip":{"addr":"104.26.6.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"37b060fb7edb6f4199593206008ec3fd","sha1":"ba26583cdc9cce330cb889d1c7f4a94b34c415ff","sha256":"62fd206e92bb27dfc30373ea91ed92ac6d20791148cdc062f809be6c68b2e7a9","sha512":"42828e7996508894a04f2618e7355ca01b9a562a474c0563c3499a99cd6ebafa3138346ea15a049342beee70cf184eda8942e37fb3b0534d5c5b844aa1c7fd9d","ssdeep":"192:TsUXsVvKoSUrTpr4uT9o2gJtGcQGh/9uzmZSkennyN4AiA3Vo:TsmsVvN3T5ZpotGHGh/9uzmZrennD2i","tlshash":"e40263a13ee08768c3e2165bb73fd764f6a28dec29d6cc08e14a6904f741d87d6716b0","size":8884,"data":"","first_seen":"2025-09-19T20:35:59.524433Z","last_seen":"2025-09-19T20:35:59.524433Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsvplay.com/e/vqi8d81ul4je","fqdn":"dsvplay.com","domain":"dsvplay.com","tld":"com"},"ip":{"addr":"104.26.6.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7f2652bf5c42d0a449cc22f8a6ceaa2b","sha1":"23d7adf2ce9f8068afcacedaed357493f836f3a0","sha256":"1a92e4082502ee866e1e15d79fffc8b2bbd4ccf059464898eb626fbc7fbef8a7","sha512":"5df72b215790feca4bbdc975133818b2f1258c1439716257e6bcbea61165f009a0af18a414d683def22776deca625560b8528f8ea35fb172b882131882f5bc5a","ssdeep":"","tlshash":"cbb0243430054011cc57c4df7410d4003c15100c7035f307f51f40530c30d40104305c","size":89,"data":"","first_seen":"2025-09-19T20:35:59.526546Z","last_seen":"2025-11-10T11:50:08.867347Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wr.amigojimbang.com/r0xouqn9Q2C5n0esZ/MQmjG","fqdn":"wr.amigojimbang.com","domain":"amigojimbang.com","tld":"com"},"ip":{"addr":"23.109.170.29","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2b7c680ee2fce541c9b9e2926d2f990","sha1":"f1d7eaae39581f8b19a11fb6a6091c7d978651ce","sha256":"04544a467a262e60a8ef0f83a143e6e38011b2aa90817a25adb4ebd7f83638e6","sha512":"2b45388164dc7d53d8cf4569c5f719f73d55d3911ad1a76e9a775b804dbcd083c6be33807a6cdbbd2a46ff361997724753374c581fa1b71404a3dec0b2a5e46b","ssdeep":"1536:HB4ny9/b1NzHizwPq0hHwWq0cHYLQsbsJXh0DJvpCESXYrT+I:Hqna4zwPpLPEin/","tlshash":"8b831ad0f352f1b9cb9640e6a6255231e2290df1308c98a0f17e5d547f91e8ae1fe2f8","size":87169,"data":"","first_seen":"2025-09-19T20:35:59.519076Z","last_seen":"2025-09-19T20:35:59.519076Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsvplay.com/e/vqi8d81ul4je","fqdn":"dsvplay.com","domain":"dsvplay.com","tld":"com"},"ip":{"addr":"104.26.6.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"935892747948374e00ccd537112f5317","sha1":"fa754aafdb299bff46be83b277dc025f85939ec5","sha256":"3dbbf3e406a0a01804c647ee68d89e70317535e81cd6141a2f85753c24ee2bf0","sha512":"8a71024704ee4e7ad9433f0f554a247c109f604b195f053da8501f7aadc01d4b58feeac824531663643d59e673d148bc052601d9133690fff8ac43e2cc35a06a","ssdeep":"","tlshash":"7a71b713d481aa7b52a270f8bd8ec106257c9211c7029a90fb19a75c2ffed5e346a5ac","size":3568,"data":"","first_seen":"2025-09-19T20:35:59.528305Z","last_seen":"2025-09-19T20:35:59.528305Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsvplay.com/e/vqi8d81ul4je","fqdn":"dsvplay.com","domain":"dsvplay.com","tld":"com"},"ip":{"addr":"104.26.6.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"61fa153f2827c887a48a351ae3c6cfd3","sha1":"5fbd02245cf700ea94d638c8d76924ecca52d330","sha256":"4c44d7c28ec0f6ca3e2624c6af1d3be324576d01ef6f6c2dc0af7e61664b8c2c","sha512":"cbe467dc51f0eec90d8b40bc35a1a0eb2c320ac67cc022c518b431987fa05a3d565f793c377d5f33a612555ad4d7ad66acfb4b47ba6323da26db293f095257d8","ssdeep":"","tlshash":"c650000003000000030c0000c000000000000003000030c000c0000000000000000000","size":8,"data":"","first_seen":"2023-03-07T01:03:50Z","last_seen":"2026-04-05T17:11:08.834524Z","times_seen":18607,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsvplay.com/e/vqi8d81ul4je","fqdn":"dsvplay.com","domain":"dsvplay.com","tld":"com"},"ip":{"addr":"104.26.6.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9fda1724412fd3c8db9942aa6e8e3deb","sha1":"539eed6112906a989e297d5d51c98af3dff08f2f","sha256":"3ddb9787e2d99f63e1c8169da967fa7b50e0baebb523aae738ff38899d2eaf7c","sha512":"1b6fe4694f5e61f4c298e0bf7d632c31df118d987b1643004ec2149ddf468e65c858fab779d5af8c0a9cb8941216cd977497c32351aef1cc3878796054f18158","ssdeep":"","tlshash":"c1e02e59a47301e042bba05ec30b232310a3f2833940d4d8ba8cef000f2ab228e9a1c8","size":294,"data":"","first_seen":"2024-01-26T23:16:31Z","last_seen":"2026-04-05T22:35:44.930255Z","times_seen":1766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4412bf8023109ee9eb1f1f226d391329","sha1":"c273960aa874a87dd022b5e597887142f1b8e34f","sha256":"d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6","sha512":"de3dd553a582e6b3d00782ddd639cb57b29de71afe72af5abef870ab36c7fed68244d511a1e129a0f04af690f27ae9304b1c113c9f1f0e0bd85dde9291a6764c","ssdeep":"","tlshash":"212120987089b815521b9a35677f109bb078ab55d09c40a9c391e4e03f708820d72ef9","size":1300,"data":"","first_seen":"2023-03-07T01:14:34Z","last_seen":"2026-04-06T08:05:09.131767Z","times_seen":17828,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.io/ads/ad.js","fqdn":"i.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"104.26.14.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"69a305bcdc8e061bbd43294a477a3678","sha1":"506582a1d912d546f5942d95ffae95ec7f4c37ce","sha256":"8964d85afd6d5d84b97872464646809c952ab900cdf5c5d7c3b7b4bdb74202fa","sha512":"feb32ed92acbef86c4ce3cb32637ccdf02519d1725db5af667cfe29b842efe4a195ad0deef44fb6c592a50d7e4759bd4c819c2dc439a4d373ef186cb7d2dc553","ssdeep":"","tlshash":"9d70000222808032c03c8000808800088020000ac08320222a000000000030200002c3","size":20,"data":"","first_seen":"2023-03-07T01:24:29Z","last_seen":"2026-04-05T09:06:05.540377Z","times_seen":2250,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/video.js/7.21.5/video.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7fdaaab43bc993b85290c713fd2d289","sha1":"46bf3d27b2cf38b0e999d3b0a7613011181c87f9","sha256":"c9535ea3a4e0af22e960ac1e32d363a71029f31aa96b29fc894e111fee49329e","sha512":"e1cc8a4de54d2d1454b9b58718c7446aba03c7901e09b72a480bfa1d916c96492df25acfe1a95e8fcb15ea9ef12a48ccf799a0eedcf36640524ec089e38f2077","ssdeep":"6144:t4iiw3vnwan/i4WfvISkj4dsJDMXEuxFY9zpDkmqPgr4dAXFeUffWuRgn:t4iiw3vnhn/iyDMXEu0sTdExRgn","tlshash":"b9c42bc87285717247d370b6543f120a723a9e6d5808c16cf529e9da2df8e4da23bf78","size":589278,"data":"","first_seen":"2023-10-15T07:44:37Z","last_seen":"2026-04-05T09:06:05.616318Z","times_seen":2028,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsvplay.com/e/vqi8d81ul4je","fqdn":"dsvplay.com","domain":"dsvplay.com","tld":"com"},"ip":{"addr":"104.26.6.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b18ec2605ebf0b4c017981cf49398a0","sha1":"6e8f0da46f69d6d036c795b52d64fbe0fdbb08b9","sha256":"c8322261ad640e752ab1eaed851691b397ecdbe02afe509691ad00dbfb1370e8","sha512":"1555aac51786e348aa5bfe24e1629c786bfdef7f85f67aa151ba4311d2b14b9849475b53119f50d4fb32bd6b9b59ae50f6ba2ca2c08bc326b337d23e3f1d4294","ssdeep":"192:AkjFHmgTbwlD7h2BMVhaEsVR1sVpJF6KET6/jfyJ+gT8b:AkjAgTbwlD7h9V0EeR1eX8KETUyQyY","tlshash":"6be118c1746625ba42f230e55d2fa6273137569cdb0d4a40b209f29c3efce8631bb9d9","size":7359,"data":"","first_seen":"2025-09-19T20:35:59.532185Z","last_seen":"2025-09-19T20:35:59.532185Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"i.doodcdn.io/fonts/avertastd-regular-webfont.woff2","fqdn":"i.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"104.26.14.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dsvplay.com/e/vqi8d81ul4je","date":"2025-09-19T20:35:09.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 08:23:08 GMT","end":"Fri, 28 Nov 2025 09:22:48 GMT"},"fingerprint":{"sha1":"41:A0:19:94:CC:EF:97:7B:BF:7D:F2:CD:0C:F4:BC:70:B7:10:69:B3","sha256":"7A:BC:65:69:BD:92:44:70:8B:39:07:C2:CB:6A:FC:86:3D:6C:53:7F:45:1D:B9:98:D8:F3:22:77:EA:BA:2F:7E"}}},"request":{"raw":"GET /fonts/avertastd-regular-webfont.woff2 HTTP/1.1\r\nHost: i.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dsvplay.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i.doodcdn.io/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 20:35:09 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 23812\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 03 Jan 2022 15:38:36 GMT\r\ncache-control: max-age=2592000\r\nexpires: Sun, 19 Oct 2025 15:09:30 GMT\r\nvary: User-Agent,Accept-Encoding\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uCf4l3hB5%2B9XakUlK%2B9zQuwNNaXomP%2FQgypb3D4QXtijlioNApp%2BnpQidn0nnAWvrZceMTp6PpwvpjUvc%2BS2%2FGTPUVo4D1Zc8g%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nage: 19504\r\naccept-ranges: bytes\r\ncf-ray: 981bde2e7dad568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23812,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23812, version 1.524","md5":"eb586e5a1b86dbf1c866e3ed80f9d18e","sha1":"280ee78d19c017ab9335f769595e5157d3c4a343","sha256":"714e70103deac0d67f52a6285c5fabee6088ce4d710ce7e74353503837038baf","sha512":"18b5a9996a6d0fd263f778b1ce4b7a84c42febf2dfcd5187bdc74192c156571823e973d6720f45536ef1048a355313169a4f1de1ebc30bdb0989065a1ff9ffea","ssdeep":"384:bdPI9PvaAAoKG+zf3bAVYGlg96u6Z+tUF7ZrzSkorNYlVFLhfkZv9wPXcqEbJtuE:bdPIdCA7+jVhvUFtrzSkMNOp9k99h7dr","tlshash":"c2b2e17ad02cde72f5b6f3a59b2486e2d136d235232333e2151b89ba826170e1d16bd0","first_seen":"2023-04-05T18:53:41Z","last_seen":"2026-04-05T23:38:46.439442Z","times_seen":4014,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":13,"dns":1,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.io/get_slides/6757/ild5ed9cvcb7f1xn.jpg","fqdn":"i.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"104.26.14.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dsvplay.com/e/vqi8d81ul4je","date":"2025-09-19T20:35:09.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 08:23:08 GMT","end":"Fri, 28 Nov 2025 09:22:48 GMT"},"fingerprint":{"sha1":"41:A0:19:94:CC:EF:97:7B:BF:7D:F2:CD:0C:F4:BC:70:B7:10:69:B3","sha256":"7A:BC:65:69:BD:92:44:70:8B:39:07:C2:CB:6A:FC:86:3D:6C:53:7F:45:1D:B9:98:D8:F3:22:77:EA:BA:2F:7E"}}},"request":{"raw":"GET /get_slides/6757/ild5ed9cvcb7f1xn.jpg HTTP/1.1\r\nHost: i.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dsvplay.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dsvplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 20:35:09 GMT\r\ncontent-type: text/vtt\r\nvary: accept-encoding\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 19 Sep 2025 15:23:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xOlfPEt%2FDmpvMlC10YUGAUsRkM9x7PNK3qGNe93%2F2cikgFLOeqOmylByLP8a4j1hcg0dKgHm9HvdjgSaT1%2BM%2BYAec6VGRHIDcQ%3D%3D\"}]}\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 981bde302dc5568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3158,"size_decoded":0,"mime_type":"text/vtt","magic":"ASCII text","md5":"90a353861c12283cc75d043d16d27f25","sha1":"08ed35a33c950ff0f8cfae3733a014d546c4eb52","sha256":"b3f57663d18580ddf3e882ba1889fa91be61d08b0afc112a5f5961f112ef23aa","sha512":"763614ff5216f9264386c68dfdb4cf2f85ba9f0ea2164ffcb36e0d43523293602dd9d844f2818a9885761c83b6bd0859ed3e8690f38a38748cc75e4b11e4a37e","ssdeep":"","tlshash":"2151c6dcd3946941eef18680f3b87f65c46a22defdd08486acf438942dfe34666a11e4","first_seen":"2025-09-19T20:35:59.483297Z","last_seen":"2025-09-19T20:35:59.483297Z","times_seen":1,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":127,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=AfYwgwUrlPEezwT-5FfsC5z2j1RyPBZ3Zog4F1wNR7hF-xyCZv64CJ0pYdtI-62VegvfzNJwM9bV0w\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S-2111940509%3A1758314109900597","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"64.233.164.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dsvplay.com/e/vqi8d81ul4je","date":"2025-09-19T20:35:09.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:38:01 GMT","end":"Mon, 01 Dec 2025 08:38:00 GMT"},"fingerprint":{"sha1":"50:D2:49:3C:F8:95:11:7F:74:11:C6:30:B6:82:0C:F4:34:21:2E:47","sha256":"EA:D4:6B:60:2A:3C:4B:39:32:39:92:5B:56:98:4B:5B:00:E5:93:5E:BA:66:43:BD:89:DE:10:FF:76:70:E1:53"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=AfYwgwUrlPEezwT-5FfsC5z2j1RyPBZ3Zog4F1wNR7hF-xyCZv64CJ0pYdtI-62VegvfzNJwM9bV0w\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S-2111940509%3A1758314109900597 HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dsvplay.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 19 Sep 2025 20:35:09 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\ncontent-security-policy: script-src 'nonce-xnmWST-j_om0oAWM3OYIcg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.HqCQykJQDUM.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parashparyro.com/M0M3ZTIcfFQWD2AtdSBTWHpNNAFLIVMLB3AnWxUBVRZxVmddMBERW1d+BlUCB3MAUBRDKlNYAxUwQwRGRjAKVBRaLVEKDxU1ClQcAHcZVgQddREQDwJlQxVTVH4GQ0JHN1tYAwR2D1YDB3IHXAAHcg","fqdn":"parashparyro.com","domain":"parashparyro.com","tld":"com"},"ip":{"addr":"172.67.147.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dsvplay.com/e/vqi8d81ul4je","date":"2025-09-19T20:35:09.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parashparyro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 09:26:17 GMT","end":"Fri, 07 Nov 2025 10:24:46 GMT"},"fingerprint":{"sha1":"32:C6:41:72:32:7B:A7:C6:2C:35:1E:3A:D5:70:8F:39:E4:A3:1D:09","sha256":"D2:C7:33:5D:A8:F9:66:BE:B5:67:9E:B3:44:BC:B2:8B:43:94:6A:85:E6:1E:44:C6:1A:C9:13:30:F1:EA:CA:7E"}}},"request":{"raw":"GET /M0M3ZTIcfFQWD2AtdSBTWHpNNAFLIVMLB3AnWxUBVRZxVmddMBERW1d+BlUCB3MAUBRDKlNYAxUwQwRGRjAKVBRaLVEKDxU1ClQcAHcZVgQddREQDwJlQxVTVH4GQ0JHN1tYAwR2D1YDB3IHXAAHcg HTTP/1.1\r\nHost: parashparyro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dsvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 19 Sep 2025 20:35:09 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zjp73Cd5Lx0VFdfG4b%2Fr09cffFes%2Busq2w40cJAw%2FiQsB5GMLnOr4IXB%2BkyFyjUlQHTE0enrBFamd4kQj%2FzRA4OmN742rDtv8CfwLqFd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 981bde2f0809b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":122,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bunkersparring.shop/gd/70849?md=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\u0026fc=h7q5T8idLKWMMrmW6iTG0g\u0026pr=1YB8DBYXc1mTRxnxJxgO3A","fqdn":"bunkersparring.shop","domain":"bunkersparring.shop","tld":"shop"},"ip":{"addr":"212.117.186.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dsvplay.com/e/vqi8d81ul4je","date":"2025-09-19T20:35:09.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bunkersparring.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 00:36:37 GMT","end":"Sat, 18 Oct 2025 00:36:36 GMT"},"fingerprint":{"sha1":"A0:A8:A1:59:BB:4D:3B:D9:F2:A5:2C:9B:49:CC:C8:58:CD:A2:B6:95","sha256":"2C:77:30:EB:06:22:B8:8E:43:8B:D9:36:7E:45:B4:2A:A6:8C:CA:03:1C:25:42:8B:99:E9:B0:9E:63:56:68:E0"}}},"request":{"raw":"POST /gd/70849?md=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\u0026fc=h7q5T8idLKWMMrmW6iTG0g\u0026pr=1YB8DBYXc1mTRxnxJxgO3A HTTP/1.1\r\nHost: bunkersparring.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dsvplay.com/\r\nContent-Type: application/json\r\nContent-Length: 82\r\nOrigin: https://dsvplay.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 19 Sep 2025 20:35:09 GMT\r\ncontent-type: application/json\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://dsvplay.com\r\naccess-control-allow-headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nset-cookie: GL_UI4=eJw9zV1OhDAcBHC%2BWdcFnYQDeASKQHj1xSv4SAr9g3Wh3ZQKensbE32bTH6T8TwvKB7g78kZ4Sdv8MRY13Z1U3VlPXa8GoaubZtyaLqSVc00NbiTW2%2F5sJCNcNpWbmxv9wiXmRQZOfajFpTh0am%2F5qr0oSLEg%2BFKZIhXJ5YM6WD0sZEpQkSKr4T0VRqa9JcT%2FEMbhOy5dlkql%2F0Sgd6KMD8jfZNKuGV%2BQcDKPE883N8Wbidt1l6KxEc8Gy4I%2FgtOI7c0a%2FONVNB2tfoG6EX0%2F%2F73ODxYiUTQLkdCrO07mR%2B4dk3m; expires=Sat, 20-Sep-2025 20:35:09 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJwVyM0KgkAUhuE5hxiIJPjA9l6BadnCbbYMXXgFZhEDwxyZGfu5%2B2zxLp5XKcVpAjYTkrrM6yKvDnl5qkBPcNuBRwfdin8PX5AHF0ewd9h0wUrWyOzi8kes%2FgYZbM%2FWfLJe7ByNuABeWjfDzT72l%2F4KmjSBo2gGh3uqQC%2B9%2BwFe7x3U; expires=Sat, 20-Sep-2025 20:35:09 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":744,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ee1553c80db8cf615ca373cafd31e697","sha1":"1dbd33dafb5e1a846168d2a70d190cf05cad4dc6","sha256":"95bf80392e7dd51f2f903d99721354d85e49f7633fe2b86dbbece3902e50eaec","sha512":"5c7d28f48cf4afee3165872c7567ec141e49cff34f35bc1490a5cc09a6234f1ad37cfa5b30a5b091758f0ff494da561edde8802e01d173da3d4b3856546c4acb","ssdeep":"","tlshash":"bb0165d9616a44aa5f6818c0630460755e473e9b6ab44e4db31ef21527407d58b0de64","first_seen":"2025-09-19T20:35:59.488229Z","last_seen":"2025-09-19T20:35:59.488229Z","times_seen":1,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":13,"connect":18,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"bunkersparring.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"bunkersparring.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"so1104cor.cloudatacdn.com/favicon.ico?i","fqdn":"so1104cor.cloudatacdn.com","domain":"cloudatacdn.com","tld":"com"},"ip":{"addr":"141.94.135.34","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"moz-nullprincipal:{143dc296-0813-4059-bd0f-5f282097f4fa}?https://dsvplay.com","date":"2025-09-19T20:35:09.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudatacdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 01 Aug 2025 00:00:00 GMT","end":"Sat, 01 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3D:AE:FF:F1:E0:44:E1:40:62:32:5B:A3:5F:92:CC:F4:85:2C:C2:35","sha256":"0D:4C:BD:B4:13:D4:4A:13:9B:B0:2E:DA:E4:AC:66:D5:E8:53:91:FD:49:51:9A:E1:20:15:11:9B:45:CE:0E:C8"}}},"request":{"raw":"GET /favicon.ico?i HTTP/1.1\r\nHost: so1104cor.cloudatacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 19 Sep 2025 20:35:09 GMT\r\nContent-Type: image/vnd.microsoft.icon\r\nContent-Length: 15406\r\nConnection: keep-alive\r\nLast-Modified: Sat, 29 Feb 2020 09:26:04 GMT\r\nETag: \"3c2e-59fb38b06e300\"\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"30d3656f43c817e38c3e7d70b2bfbdad","sha1":"1aa43b43755e7cba5e145d0978517f7bedad7da6","sha256":"a558a4796f60f07743027eec96b538b2e7758cca8c544ed796ff745837478555","sha512":"75b17478d6d98ab14fd4d37d58c9484df68bc3ccc6d26897527eb565d4071c4b7128feb0f65449ce369c99bf12da97959426c5b03256e9782ee472cea81bbef5","ssdeep":"24:nG2q35msJnnnnnnnnnnslLD4zgxgJ0Oqr5646dUlZIJ/KuJmy81DwlJ8SAFf9tam:NBOzgxgJ0Z44Pi1Yy8+fVGfyfqxtb/","tlshash":"14623db4790b1355da125df9dca9ce66834cbe9b1a38029fb154febc306b4c74e18831","first_seen":"2023-04-05T18:53:41Z","last_seen":"2026-04-05T23:38:46.469749Z","times_seen":3479,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":123,"dns":27,"connect":24,"send":0,"wait":36,"receive":1,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsvplay.com/e/vqi8d81ul4je","fqdn":"dsvplay.com","domain":"dsvplay.com","tld":"com"},"ip":{"addr":"104.26.6.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-19T20:35:08.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsvplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Sep 2025 14:02:53 GMT","end":"Thu, 18 Dec 2025 15:02:50 GMT"},"fingerprint":{"sha1":"49:70:4C:09:E1:E4:D6:68:0A:21:7A:96:53:6F:56:21:5F:88:7C:DC","sha256":"17:46:2B:0D:1B:6B:B9:79:84:3A:4D:09:82:FE:1F:FB:96:EC:CA:E2:54:B8:4A:66:04:5C:A9:02:51:A3:E5:D1"}}},"request":{"raw":"GET /e/vqi8d81ul4je HTTP/1.1\r\nHost: dsvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Sep 2025 20:35:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nexpires: Thu, 18 Sep 2025 20:35:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZIvZENjySFMWLGkIHzqbDX7j94o4L3hfZlXEYfsInnEfjZweDnuscSolpmJZiO0Msqi4rQPY86f6d%2BJXApKfny05i%2FDpTA3A\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: lang=1; HttpOnly; Path=/; Domain=dsvplay.com\r\ncf-ray: 981bde292ea25699-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"VideoJS:7.21.5","description":"Video.js is a JavaScript and CSS library that makes it easier to work with and build on HTML5 video.","website":"https://videojs.com","common_platform_enumeration":"","icon":"VideoJS.svg","categories":["Video players"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30656,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (30656), with no line terminators","md5":"0bc1dc2d52e1fa43bef31baf5e60e9c2","sha1":"1a784cfa6fc9f94ca84de2c7b36f485aff823eda","sha256":"ddc355816734a9a06ec076c9fd0e1612aada2c2d79436cc571db983048222a96","sha512":"447dd098d02d2da3766fb2b622ecae8f3358ce38cea431510f4e1b8f6055c5bddc5873ac418e4f2ebda2f1910bcb44afb3c6f2948e38639687a7efa24b45a8d7","ssdeep":"768:fsjVJT5ZGtGHW/9uzmZrennD2qGFx8fZTq8KzsbU3+tIKbTw5ZzgAgTK3ObVUc:fuVJTOrqGLv3YV/","tlshash":"e8d228917ca083fe82f2209bba6fe355f135d548d7468984f2467958bed8d87903b2f0","first_seen":"2025-09-19T20:35:59.491769Z","last_seen":"2025-09-19T20:35:59.491769Z","times_seen":1,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":25,"dns":6,"connect":1,"send":0,"wait":86,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"dsvplay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.io/img/no_video_3.svg","fqdn":"i.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"104.26.14.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dsvplay.com/e/vqi8d81ul4je","date":"2025-09-19T20:35:08.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 08:23:08 GMT","end":"Fri, 28 Nov 2025 09:22:48 GMT"},"fingerprint":{"sha1":"41:A0:19:94:CC:EF:97:7B:BF:7D:F2:CD:0C:F4:BC:70:B7:10:69:B3","sha256":"7A:BC:65:69:BD:92:44:70:8B:39:07:C2:CB:6A:FC:86:3D:6C:53:7F:45:1D:B9:98:D8:F3:22:77:EA:BA:2F:7E"}}},"request":{"raw":"GET /img/no_video_3.svg HTTP/1.1\r\nHost: i.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dsvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Sep 2025 20:35:08 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2812\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 03 Jan 2022 15:38:36 GMT\r\netag: \"61d3187c-afc\"\r\nexpires: Sun, 19 Oct 2025 04:10:53 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 38860\r\naccept-ranges: bytes\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pTzLn0yGND0RP1zG3GqcEJIQZdxkACzSfzE%2FCOvQVB6STnz4pwG0lXBuQeTrd8Rq5%2BLhhrqd7iaRCOTchV3BFsu9c%2B%2FllJC2VA%3D%3D\"}]}\r\ncf-ray: 981bde2c087356a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2812,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"077bfdaa49ae4877a42611b739ec4752","sha1":"a2f9e1222b7af9abc05122411ab8902efcc08ead","sha256":"70d6a17097a8c27edfaad6740e11359d9363f3f04bff1b93483e29c25609fa6c","sha512":"9eac1eaf362f200f037ae6c0c9d5c257bb57708de9955816c69d67689293430bdf39cdcd91522a993c48b823971cb984956e1ebe44516a323da03ebcd2cbefe3","ssdeep":"","tlshash":"c95164dcb81c45bd890aa7f85a687e61366f91cd40734c8d78bd0ee223d0eadb114a9c","first_seen":"2023-04-05T18:52:02Z","last_seen":"2026-04-05T22:35:44.91594Z","times_seen":2679,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":112,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsimgcdn.com/splash/ild5ed9cvcb7f1xn.jpg","fqdn":"dsimgcdn.com","domain":"dsimgcdn.com","tld":"com"},"ip":{"addr":"104.26.3.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dsvplay.com/e/vqi8d81ul4je","date":"2025-09-19T20:35:08.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsimgcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 18:01:54 GMT","end":"Wed, 19 Nov 2025 19:01:49 GMT"},"fingerprint":{"sha1":"02:7F:9D:0E:1E:8A:EC:DF:11:88:7E:36:DB:EE:41:3D:BA:30:7B:05","sha256":"85:F5:1C:74:F9:04:91:A4:78:F3:43:49:AD:C5:1D:51:F6:21:95:1E:2E:55:3E:FC:A2:3B:89:49:EF:AA:BA:F5"}}},"request":{"raw":"GET /splash/ild5ed9cvcb7f1xn.jpg HTTP/1.1\r\nHost: dsimgcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dsvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Sep 2025 20:35:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 64822\r\nserver: cloudflare\r\ncf-ray: 981bde2c18965696-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800\r\netag: \"68cb03fa-fd36\"\r\nexpires: Fri, 03 Oct 2025 20:35:09 GMT\r\nlast-modified: Wed, 17 Sep 2025 18:54:50 GMT\r\naccess-control-allow-methods: GET, OPTIONS\r\nx-cache: MISS\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=AWlKBYFS1qczDe1UXPN2lAcKCxJJW9M2AZNrcgChERsdVtjFrMvpIMQJnGisqemf8I9Cr7PhCq%2FGpfqOzT5gk6FtkUgTFHnV8dUFWftYMpzf3GTLrp9noXqf5jAR8A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=697\u0026min_rtt=417\u0026rtt_var=497\u0026sent=7\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3262\u0026recv_bytes=1215\u0026delivery_rate=7757142\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=108865f942dbdcee\u0026ts=369\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64822,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1275x527, components 3","md5":"c4b1c745a5ceff9b0790c19f31df2bef","sha1":"3f3bdc1577b7b9f84fb9084f36791c9541f01159","sha256":"724990bafbe8d54ad71cc7d01948b43386e631b381acbc426f946fe2ba26011c","sha512":"6e99a66b6d33a04f4e51767c1461527ae271925bd92de26dad73ea863f836f31c246b628a838e304bc33ebae4e03a438d2e67db17400a7036092c981e1f6899a","ssdeep":"1536:XkpaM8EVmDM8uCdaClmlbUin5cCdmTYpLP+CQQH:6/QDM8uCdJclbbn5bmmLHQQH","tlshash":"d95302c92fdb48b3205153e98b8207d5ce31d4193a4feb1c9de90a163f7da6a260dbd0","first_seen":"2025-09-19T20:35:59.495322Z","last_seen":"2025-09-19T20:35:59.495322Z","times_seen":1,"resource_available":false,"data":null}},"time_used":565,"timings":{"blocked":118,"dns":21,"connect":13,"send":0,"wait":316,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"dsimgcdn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"dsimgcdn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d3eub2e21dc6h0.cloudfront.net/?ebued=1004075","fqdn":"d3eub2e21dc6h0.cloudfront.net","domain":"d3eub2e21dc6h0.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dsvplay.com/e/vqi8d81ul4je","date":"2025-09-19T20:35:08.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /?ebued=1004075 HTTP/1.1\r\nHost: d3eub2e21dc6h0.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dsvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 79239\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform\r\ncontent-encoding: gzip\r\npragma: no-cache\r\ndate: Fri, 19 Sep 2025 20:35:08 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: QTsG_-rH55p9k06N1D6KMlqfmcodGHT9XlKKy7YrJ66XOqvvJj0VjA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":232494,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38488)","md5":"5734b7f89ee7f763342615a33e5649c8","sha1":"9db0ef28d647fb9e1cb43f8ee76a940b3eb131cf","sha256":"78bc5fc038121d3c58e0d44fe3559ada1e7cb33f190bf700e24308acdf67b713","sha512":"b82ac7c67decd2f03ea48ffba4fa06f956c621ac003e9c3a75d0c0165cc469f7add6a3f45fc93b80b57c1a8b2177a2c75747794ca1e28c601fe354ffa5464d9e","ssdeep":"3072:XBUNPgDYzi07L02raYDbe+Y5UKS+7L0x2iSw+Zc53+Zc0M8El:XuN4DUi07w2rnXEdZU3+iAU","tlshash":"1b344cc9ba923469836374b540bf124ab23f5a69bc084dd4f496d4d07db8d0a437bfac","first_seen":"2025-09-19T20:35:59.497962Z","last_seen":"2025-09-19T20:35:59.497962Z","times_seen":1,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":50,"connect":8,"send":0,"wait":179,"receive":21,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsimgcdn.com/splash/ild5ed9cvcb7f1xn.jpg","fqdn":"dsimgcdn.com","domain":"dsimgcdn.com","tld":"com"},"ip":{"addr":"104.26.3.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dsvplay.com/e/vqi8d81ul4je","date":"2025-09-19T20:35:09.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsimgcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 18:01:54 GMT","end":"Wed, 19 Nov 2025 19:01:49 GMT"},"fingerprint":{"sha1":"02:7F:9D:0E:1E:8A:EC:DF:11:88:7E:36:DB:EE:41:3D:BA:30:7B:05","sha256":"85:F5:1C:74:F9:04:91:A4:78:F3:43:49:AD:C5:1D:51:F6:21:95:1E:2E:55:3E:FC:A2:3B:89:49:EF:AA:BA:F5"}}},"request":{"raw":"GET /splash/ild5ed9cvcb7f1xn.jpg HTTP/1.1\r\nHost: dsimgcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dsvplay.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dsvplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Sep 2025 20:35:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 64822\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=53fEzQUkIx5JIgo60FWJJjtPOzL%2B2KT2GLxk%2BcuQXpFYSrJknu3VD0FzdAka1D91k0cY%2FeXlBm3IkNcO7TVMCDwRxcDyJwa36sy8aX0mvXnZh5WbpuK8ybp5nt2mjw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 981bde2efd88569c-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=604800\r\nlast-modified: Fri, 19 Sep 2025 20:35:09 GMT\r\naccess-control-allow-methods: GET, OPTIONS\r\nx-cache: HIT\r\nx-cache-age: 0\r\nx-cached-at: 2025-09-19T20:35:09.105Z\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5237\u0026min_rtt=1769\u0026rtt_var=3345\u0026sent=11\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=4000\u0026recv_bytes=1277\u0026delivery_rate=494134\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=15770\u0026unsent_bytes=0\u0026cid=7dc5bed2e31642b3\u0026ts=106\u0026inflight_dur=28\u0026x=51\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64822,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1275x527, components 3","md5":"c4b1c745a5ceff9b0790c19f31df2bef","sha1":"3f3bdc1577b7b9f84fb9084f36791c9541f01159","sha256":"724990bafbe8d54ad71cc7d01948b43386e631b381acbc426f946fe2ba26011c","sha512":"6e99a66b6d33a04f4e51767c1461527ae271925bd92de26dad73ea863f836f31c246b628a838e304bc33ebae4e03a438d2e67db17400a7036092c981e1f6899a","ssdeep":"1536:XkpaM8EVmDM8uCdaClmlbUin5cCdmTYpLP+CQQH:6/QDM8uCdJclbbn5bmmLHQQH","tlshash":"d95302c92fdb48b3205153e98b8207d5ce31d4193a4feb1c9de90a163f7da6a260dbd0","first_seen":"2025-09-19T20:35:59.495322Z","last_seen":"2025-09-19T20:35:59.495322Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":85,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"dsimgcdn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"dsimgcdn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.io/img/logo-s.png","fqdn":"i.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"104.26.14.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dsvplay.com/e/vqi8d81ul4je","date":"2025-09-19T20:35:09.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 08:23:08 GMT","end":"Fri, 28 Nov 2025 09:22:48 GMT"},"fingerprint":{"sha1":"41:A0:19:94:CC:EF:97:7B:BF:7D:F2:CD:0C:F4:BC:70:B7:10:69:B3","sha256":"7A:BC:65:69:BD:92:44:70:8B:39:07:C2:CB:6A:FC:86:3D:6C:53:7F:45:1D:B9:98:D8:F3:22:77:EA:BA:2F:7E"}}},"request":{"raw":"GET /img/logo-s.png HTTP/1.1\r\nHost: i.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dsvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 20:35:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 2611\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, no-transform\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: origSize=6212\r\netag: \"61d3187c-1844\"\r\nexpires: Sat, 18 Oct 2025 17:40:47 GMT\r\nlast-modified: Mon, 03 Jan 2022 15:38:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QIH9W51SM%2FdoPddL%2FGrvwXTQNy%2BsEtzCZp1S1%2Fktrz%2B%2Fd6ljWrn0KMkjy42h52zbPKmgAihDxEe3it8pErU0wWCpixu82u3A0GbA\"}]}\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nage: 70671\r\naccept-ranges: bytes\r\ncf-ray: 981bde302c3b0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2611,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 64, 8-bit/color RGBA, non-interlaced","md5":"9896254cb617ab536613c1173f8970d2","sha1":"058722b3ee5d1dd9a039a5718346373c02596070","sha256":"1511864c796fade0b4af04ac8e087ec47b14e97ca785d889775e1b81d63da220","sha512":"ed7c8b1b2c40a663185e3b7e3f47d7b67b7f37107b661ab7a6dbc5163780fac193ff658b1e69efe7e20413a0b4f043fb5c7170e49a90f11cd9be7e97a9f32ab9","ssdeep":"","tlshash":"87514d53e7bf061cdb2e116c60b7ec11167d11150b875680bb8260b80570bcda5be569","first_seen":"2025-07-01T21:16:56.952437Z","last_seen":"2025-11-21T14:44:02.924129Z","times_seen":547,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.io/ads/ad.js","fqdn":"i.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"104.26.14.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dsvplay.com/e/vqi8d81ul4je","date":"2025-09-19T20:35:08.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 08:23:08 GMT","end":"Fri, 28 Nov 2025 09:22:48 GMT"},"fingerprint":{"sha1":"41:A0:19:94:CC:EF:97:7B:BF:7D:F2:CD:0C:F4:BC:70:B7:10:69:B3","sha256":"7A:BC:65:69:BD:92:44:70:8B:39:07:C2:CB:6A:FC:86:3D:6C:53:7F:45:1D:B9:98:D8:F3:22:77:EA:BA:2F:7E"}}},"request":{"raw":"GET /ads/ad.js HTTP/1.1\r\nHost: i.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dsvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Sep 2025 20:35:08 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 03 Jan 2022 15:38:36 GMT\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 18 Sep 2026 02:50:40 GMT\r\nvary: User-Agent,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 68642\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Szaiv3qR30eRpx9TvAjqd37YbXYIm8F8P0OhDgVh%2F1k2qJQiqUvwTS302xRodKCWwAMujTJBdd%2BRTRoY7HtRoG8lhWhwMuoCA%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-ray: 981bde2c086c56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"69a305bcdc8e061bbd43294a477a3678","sha1":"506582a1d912d546f5942d95ffae95ec7f4c37ce","sha256":"8964d85afd6d5d84b97872464646809c952ab900cdf5c5d7c3b7b4bdb74202fa","sha512":"feb32ed92acbef86c4ce3cb32637ccdf02519d1725db5af667cfe29b842efe4a195ad0deef44fb6c592a50d7e4759bd4c819c2dc439a4d373ef186cb7d2dc553","ssdeep":"","tlshash":"9d70000222808032c03c8000808800088020000ac08320222a000000000030200002c3","first_seen":"2023-03-07T01:24:29Z","last_seen":"2026-04-05T09:06:05.540377Z","times_seen":2250,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":111,"dns":17,"connect":3,"send":0,"wait":9,"receive":0,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.io/css/embed.css","fqdn":"i.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"104.26.14.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dsvplay.com/e/vqi8d81ul4je","date":"2025-09-19T20:35:08.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 08:23:08 GMT","end":"Fri, 28 Nov 2025 09:22:48 GMT"},"fingerprint":{"sha1":"41:A0:19:94:CC:EF:97:7B:BF:7D:F2:CD:0C:F4:BC:70:B7:10:69:B3","sha256":"7A:BC:65:69:BD:92:44:70:8B:39:07:C2:CB:6A:FC:86:3D:6C:53:7F:45:1D:B9:98:D8:F3:22:77:EA:BA:2F:7E"}}},"request":{"raw":"GET /css/embed.css HTTP/1.1\r\nHost: i.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dsvplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Sep 2025 20:35:08 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 05 Mar 2025 20:32:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67c8b4d0-13811\"\r\nexpires: Sun, 19 Oct 2025 03:02:44 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 56221\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=97zgOqJ77mN7CLCYN4hWkiifP6tLns3PBBuWEcV7VkL2bGkL3bW%2FyDlj%2BL4iuK%2F01bDHo84HVPvRnpxxJS1%2B9jSDA4q4KeZhtw%3D%3D\"}]}\r\ncf-ray: 981bde2c088256a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79889,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (40048)","md5":"c4907b4a84bd80e4ccec940bf9d7f1ec","sha1":"d36c11083cb2f86b99e2380d8c22cf13e74dbb29","sha256":"f9535c07a6c50f5094b5a0caf5475823b3b32e9998a72cf6ad6d811dc7985d3d","sha512":"1c4f394681b1d51f65c9453fb28a8dbbc79306205b19d7374b4f1667d5a54c4c2cd698d04c221aae5406b3b5e9eb2234272470daff8804ebb1ffb030a45e1ea2","ssdeep":"1536:fVjjsZkKbfYr0AzRbb5cVqo1Q8V5VezTxCyF:BjsZtYr0AzRbb5cVqom6ZE","tlshash":"4573d8c1f059cbfd027e8686eec0e726932cf561d8a258d9f2273e7c8dda146216f194","first_seen":"2025-04-07T00:12:33.700856Z","last_seen":"2026-04-05T09:06:05.468883Z","times_seen":1105,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":115,"dns":17,"connect":3,"send":0,"wait":12,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/videojs-hotkeys/0.2.28/videojs.hotkeys.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dsvplay.com/e/vqi8d81ul4je","date":"2025-09-19T20:35:08.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/videojs-hotkeys/0.2.28/videojs.hotkeys.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dsvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Sep 2025 20:35:08 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1571\r\ncf-ray: 981bde2be968c272-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"630ad3e5-623\"\r\nlast-modified: Sun, 28 Aug 2022 02:33:09 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 704017\r\nexpires: Wed, 09 Sep 2026 20:35:08 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=X8cJH11VDKfkS9cMSNn9oYpqhcR8aK0UHKoErqteLmMJWxwLbqayY%2BAG7oDDGBnVI4BKvmkkCgHLZcq2ICTStTTc%2FYgkSu6iUXKLS4C2gB0B6CfNqav9mFWk6mz4RMsWiM%2BHvXe4\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4580,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4505)","md5":"f2ecb2bd8a424c8e8cf507ce8bd933c2","sha1":"3cbc08ca052ea25c3b0834b9291a3ca1e9122e26","sha256":"4c0745052abbb26087a707bb0a043b43c393674055ba2d4452ac89e6923eb099","sha512":"5c5cb01b30e7dad3dcfad17845b399768970d755c1743dce82602f9c2fb2a220f5a8148656c8593d912ae9dd576330ab66936b557a4f72e60f771de4d1066473","ssdeep":"96:GGArczM0HsUJKjS0kCofLMdAb71JUbhCYRE6eVK5HtkX5ugRrqaTd:rAIzM0MWKjJkvId4YbbRLp5SX57nd","tlshash":"c291a6d87043b47241f99ae564bb948b13722da76c0c007a251debfc3dbd79b43038aa","first_seen":"2023-03-09T00:26:57Z","last_seen":"2026-04-05T09:06:05.575744Z","times_seen":2027,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":6,"connect":-1,"send":0,"wait":16,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dsvplay.com/e/vqi8d81ul4je","date":"2025-09-19T20:35:08.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dsvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Sep 2025 20:35:08 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27958\r\ncf-ray: 981bde2b6863c272-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb09ed3-15d84\"\r\nlast-modified: Mon, 04 May 2020 23:01:39 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 913540\r\nexpires: Wed, 09 Sep 2026 20:35:08 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2hn5UmXiBgVXxy3TDArPDJMAtmNzLOVYhjCtYQy3RKGrOg1MEcRqmy%2Fru5Suy1Y7mkNlkY4%2BFeVBJGMb%2BGI6947P5zop7s%2BldT8In8NuvSPsqk1lVnA%2BnPA7enD7p07ipZpOKyWd\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89476,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-06T07:56:20.548089Z","times_seen":218335,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":26,"dns":1,"connect":1,"send":0,"wait":18,"receive":2,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=AfYwgwX05ADcndXGcI5QOzaPUh4_vTdIHia5S7yrHYrvnLJyoN0YL0xZa4lVtM_vPg1J0gqPnSjP0A\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S1882855656%3A1758314109887612","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"64.233.164.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dsvplay.com/e/vqi8d81ul4je","date":"2025-09-19T20:35:09.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:38:01 GMT","end":"Mon, 01 Dec 2025 08:38:00 GMT"},"fingerprint":{"sha1":"50:D2:49:3C:F8:95:11:7F:74:11:C6:30:B6:82:0C:F4:34:21:2E:47","sha256":"EA:D4:6B:60:2A:3C:4B:39:32:39:92:5B:56:98:4B:5B:00:E5:93:5E:BA:66:43:BD:89:DE:10:FF:76:70:E1:53"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=AfYwgwX05ADcndXGcI5QOzaPUh4_vTdIHia5S7yrHYrvnLJyoN0YL0xZa4lVtM_vPg1J0gqPnSjP0A\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S1882855656%3A1758314109887612 HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dsvplay.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 19 Sep 2025 20:35:09 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-IDq7scP8DoV9ajfDnkyXMg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.HqCQykJQDUM.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parashparyro.com/YWVGMnVOWiVBSAQIKkgjUAEWZyAjDx9nAQI3dAsYMjMyeRcMMGBGHAVYdwJFVVVxBVMRDCIPRFlDNUYUFRA1D0RHDChUGlxDMA9ET1VoAFtUQzMPREcRNlMSXFRgQgEVCXsDQlRddQNBUFV/AEBX","fqdn":"parashparyro.com","domain":"parashparyro.com","tld":"com"},"ip":{"addr":"172.67.147.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dsvplay.com/e/vqi8d81ul4je","date":"2025-09-19T20:35:09.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parashparyro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 09:26:17 GMT","end":"Fri, 07 Nov 2025 10:24:46 GMT"},"fingerprint":{"sha1":"32:C6:41:72:32:7B:A7:C6:2C:35:1E:3A:D5:70:8F:39:E4:A3:1D:09","sha256":"D2:C7:33:5D:A8:F9:66:BE:B5:67:9E:B3:44:BC:B2:8B:43:94:6A:85:E6:1E:44:C6:1A:C9:13:30:F1:EA:CA:7E"}}},"request":{"raw":"GET /YWVGMnVOWiVBSAQIKkgjUAEWZyAjDx9nAQI3dAsYMjMyeRcMMGBGHAVYdwJFVVVxBVMRDCIPRFlDNUYUFRA1D0RHDChUGlxDMA9ET1VoAFtUQzMPREcRNlMSXFRgQgEVCXsDQlRddQNBUFV/AEBX HTTP/1.1\r\nHost: parashparyro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dsvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 19 Sep 2025 20:35:09 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GluB4G24udK2iAh0XdR92TI7Qa79P93bQqegSNTkU63WDpVWUC5LtyCH8rQN%2BR5R6TVvsiXV2qjXJqbu4qmLHYJylr1EWZkR7OVJlkQ8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 981bde2f583bb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bunkersparring.shop/gd/70849?md=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\u0026fc=h7q5T8idLKWMMrmW6iTG0g\u0026pr=1YB8DBYXc1mTRxnxJxgO3A","fqdn":"bunkersparring.shop","domain":"bunkersparring.shop","tld":"shop"},"ip":{"addr":"212.117.186.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dsvplay.com/e/vqi8d81ul4je","date":"2025-09-19T20:35:09.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bunkersparring.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 00:36:37 GMT","end":"Sat, 18 Oct 2025 00:36:36 GMT"},"fingerprint":{"sha1":"A0:A8:A1:59:BB:4D:3B:D9:F2:A5:2C:9B:49:CC:C8:58:CD:A2:B6:95","sha256":"2C:77:30:EB:06:22:B8:8E:43:8B:D9:36:7E:45:B4:2A:A6:8C:CA:03:1C:25:42:8B:99:E9:B0:9E:63:56:68:E0"}}},"request":{"raw":"OPTIONS /gd/70849?md=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\u0026fc=h7q5T8idLKWMMrmW6iTG0g\u0026pr=1YB8DBYXc1mTRxnxJxgO3A HTTP/1.1\r\nHost: bunkersparring.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://dsvplay.com/\r\nOrigin: https://dsvplay.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 19 Sep 2025 20:35:09 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://dsvplay.com\r\naccess-control-allow-headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"0d7a61a5ae2424f444691dfa38e694ae","sha1":"dfb2f770cb7740844d94d2a2517af244b34c56ae","sha256":"e3c083d0e62029a9fc90700e7effced43eb213718ad4e7517e5b05a5a0ad9e49","sha512":"dc4531ceee0347383f28990bd01470ce323b0338a83b5b51e2640e3a9d1509346e23fe490ebfaeb4d7a86fd8ef22d2d6465990e6cb6583468d47174b97d25d03","ssdeep":"","tlshash":"8a30000000000000000000c0000000000000000000000000000300000c0c000c000000","first_seen":"2025-06-10T16:02:54.181066Z","last_seen":"2026-04-05T22:35:44.908258Z","times_seen":1525,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":25,"dns":1,"connect":20,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"bunkersparring.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"bunkersparring.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dsvplay.com/e/vqi8d81ul4je","date":"2025-09-19T20:35:08.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dsvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Sep 2025 20:35:08 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 591\r\ncf-ray: 981bde2bc925c272-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec1-514\"\r\nlast-modified: Mon, 04 May 2020 16:11:45 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 880208\r\nexpires: Wed, 09 Sep 2026 20:35:08 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=HjcTRo3DYrqwT8GSl3FJcDpVTRqAZ1uRGzM%2FOxkGcMZyvAs2l0yfrGYcy%2BvKrcmPxg92gQtu7B2FaeX%2BNOXUvl8U7EzLxGHntkd3QQqoYf5ldq764Wl2y3LTCSuAcSEQZwUvpA3u\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1300,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1266)","md5":"4412bf8023109ee9eb1f1f226d391329","sha1":"c273960aa874a87dd022b5e597887142f1b8e34f","sha256":"d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6","sha512":"de3dd553a582e6b3d00782ddd639cb57b29de71afe72af5abef870ab36c7fed68244d511a1e129a0f04af690f27ae9304b1c113c9f1f0e0bd85dde9291a6764c","ssdeep":"","tlshash":"212120987089b815521b9a35677f109bb078ab55d09c40a9c391e4e03f708820d72ef9","first_seen":"2023-03-07T01:14:34Z","last_seen":"2026-04-06T08:05:09.131767Z","times_seen":17828,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":77,"dns":12,"connect":2,"send":0,"wait":17,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/video.js/7.21.5/video.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dsvplay.com/e/vqi8d81ul4je","date":"2025-09-19T20:35:08.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/video.js/7.21.5/video.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dsvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Sep 2025 20:35:08 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 137405\r\ncf-ray: 981bde2b7873c272-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"64bb5c88-218bd\"\r\nlast-modified: Sat, 22 Jul 2023 04:35:20 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 875798\r\nexpires: Wed, 09 Sep 2026 20:35:08 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=nk4i8EAweRjyiYkNOv%2BmsKovNbuzfqCK3VY3BQxsY4RDjNTgwwbKs8CFga4ekcctkRS8qRjpNbhHxwILDAFM4vnFz%2FbATQkNuH2Ik3Q5VurDHV%2F5Gnok9Horp6OvjXLJTNbT5jFj\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":589278,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48459)","md5":"d7fdaaab43bc993b85290c713fd2d289","sha1":"46bf3d27b2cf38b0e999d3b0a7613011181c87f9","sha256":"c9535ea3a4e0af22e960ac1e32d363a71029f31aa96b29fc894e111fee49329e","sha512":"e1cc8a4de54d2d1454b9b58718c7446aba03c7901e09b72a480bfa1d916c96492df25acfe1a95e8fcb15ea9ef12a48ccf799a0eedcf36640524ec089e38f2077","ssdeep":"6144:t4iiw3vnwan/i4WfvISkj4dsJDMXEuxFY9zpDkmqPgr4dAXFeUffWuRgn:t4iiw3vnhn/iyDMXEu0sTdExRgn","tlshash":"b9c42bc87285717247d370b6543f120a723a9e6d5808c16cf529e9da2df8e4da23bf78","first_seen":"2023-10-15T07:44:37Z","last_seen":"2026-04-05T09:06:05.616318Z","times_seen":2028,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":29,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.doodcdn.io/js/embed3.js","fqdn":"static.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"104.26.14.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dsvplay.com/e/vqi8d81ul4je","date":"2025-09-19T20:35:08.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 08:23:08 GMT","end":"Fri, 28 Nov 2025 09:22:48 GMT"},"fingerprint":{"sha1":"41:A0:19:94:CC:EF:97:7B:BF:7D:F2:CD:0C:F4:BC:70:B7:10:69:B3","sha256":"7A:BC:65:69:BD:92:44:70:8B:39:07:C2:CB:6A:FC:86:3D:6C:53:7F:45:1D:B9:98:D8:F3:22:77:EA:BA:2F:7E"}}},"request":{"raw":"GET /js/embed3.js HTTP/1.1\r\nHost: static.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dsvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Sep 2025 20:35:08 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 112942\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 05 Mar 2025 20:27:01 GMT\r\netag: \"67c8b395-1b92e\"\r\nexpires: Sun, 19 Oct 2025 05:18:05 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 54535\r\naccept-ranges: bytes\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=spJjhKnY%2B59rifCr6opleyPYuLTHPifvYac4QnNE2c6wkF2d9%2FuCIu1wbEO1QduNBGYfw8stqy5J8K3SRtV42jpw6sOoB%2FYgsrGZiyTk\"}]}\r\ncf-ray: 981bde2c289656a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112942,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27236)","md5":"2cdc3aa1ffb8ca7b629675d83b2862dc","sha1":"be0a9072b9559c544d1c852c4559f5a64833c888","sha256":"f23168d2b1910ff6e49bab3debce5786f7859e9e65ceda07a5554b66fd60f876","sha512":"70c907c7e85489a51b60cea2064bfc9a6283863687552188ecaa05dc49ea87af6dde390b56dafd955b4d01aca5fc66d319edf7b7abb98c1f707e59d868468761","ssdeep":"1536:mSwx/jSB9d9mPZUao/oj1jxtFzkYZo2nopAMiu4aMVn3rRRk7U5oAAT5Smka7azH:5wxo9mPZUazNNSAMi3E+G7gp","tlshash":"0bb32bc87392b0a257e37079113f610bf23a5d69b80c8458b159d9e97cf8d8a8237f79","first_seen":"2025-03-05T21:16:40.807889Z","last_seen":"2026-04-05T09:06:05.541626Z","times_seen":1164,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":42,"connect":4,"send":0,"wait":9,"receive":6,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"64.233.164.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dsvplay.com/e/vqi8d81ul4je","date":"2025-09-19T20:35:09.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:38:01 GMT","end":"Mon, 01 Dec 2025 08:38:00 GMT"},"fingerprint":{"sha1":"50:D2:49:3C:F8:95:11:7F:74:11:C6:30:B6:82:0C:F4:34:21:2E:47","sha256":"EA:D4:6B:60:2A:3C:4B:39:32:39:92:5B:56:98:4B:5B:00:E5:93:5E:BA:66:43:BD:89:DE:10:FF:76:70:E1:53"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dsvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:JF43BEC9X2AZuZJLDKfW9JDh8fT3:qiVG9LG0pvNbtuYX; Expires=Sun, 19-Sep-2027 20:35:09 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 19 Sep 2025 20:35:09 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026ifkv=AfYwgwUQRUAE1gsN34N8kgp0OsTbQpJG-v-ltDnSa5BhKFYN6Z63i7uEftL64itjl_mum2O_Dj5dhg\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: script-src 'nonce-_leTrEpj2IrIRfLGvNMrUg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport\r\ncross-origin-opener-policy: unsafe-none\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":331,"timings":{"blocked":140,"dns":0,"connect":28,"send":0,"wait":39,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ukankingwithea.com/","fqdn":"ukankingwithea.com","domain":"ukankingwithea.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dsvplay.com/e/vqi8d81ul4je","date":"2025-09-19T20:35:09.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ukankingwithea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 14:13:33 GMT","end":"Sun, 23 Nov 2025 15:11:16 GMT"},"fingerprint":{"sha1":"1A:11:63:8A:09:D9:A9:1F:C1:06:34:29:E0:E0:95:E7:BA:BC:63:A3","sha256":"20:A6:48:1D:DB:42:37:88:BF:13:AD:64:91:6B:C4:6D:02:EA:D4:98:E1:E5:88:85:C0:D3:03:48:B4:F1:11:49"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ukankingwithea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dsvplay.com/\r\nOrigin: https://dsvplay.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Sep 2025 20:35:09 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://dsvplay.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FeR9m%2FfTxc%2FB3utbRERzCXJGEyguBPSQOcgHWyr0GwducLe5NvgHYGI2vVGiJ40VYGj6hdeFjgYzouAk8WoSkZQUg7dup1SJoRdrSsmN7myLQg%3D%3D\"}]}\r\ncontent-encoding: br\r\nset-cookie: csu=164315537263834@1@1758314109; SameSite=None; Secure; Max-Age=31104000\r\ncf-ray: 981bde31dffb0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"47a4aeed3828d0b47515f9529370d03a","sha1":"44769fc4f61f52eea706b16015d2b634a624c7eb","sha256":"378f8e490b3a4344e2d14ceacca10f44ab786221fe105ed31da1e8ae89f0b2ba","sha512":"52d762a68d8e1a588e0d3c01499c6de01094da54d45140616e52e60baa95545c040c6182a1e2995ba51627bcdfd6be949d014b843e4dbc25afe79d91d4706d23","ssdeep":"","tlshash":"9c8000008320008222800ac30020a88b03322a8e82a000c22200b0b22302a202000b88","first_seen":"2025-09-19T20:35:59.511635Z","last_seen":"2025-09-19T20:35:59.511635Z","times_seen":1,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":79,"dns":8,"connect":1,"send":0,"wait":136,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026ifkv=AfYwgwUQRUAE1gsN34N8kgp0OsTbQpJG-v-ltDnSa5BhKFYN6Z63i7uEftL64itjl_mum2O_Dj5dhg","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"64.233.164.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dsvplay.com/e/vqi8d81ul4je","date":"2025-09-19T20:35:09.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:38:01 GMT","end":"Mon, 01 Dec 2025 08:38:00 GMT"},"fingerprint":{"sha1":"50:D2:49:3C:F8:95:11:7F:74:11:C6:30:B6:82:0C:F4:34:21:2E:47","sha256":"EA:D4:6B:60:2A:3C:4B:39:32:39:92:5B:56:98:4B:5B:00:E5:93:5E:BA:66:43:BD:89:DE:10:FF:76:70:E1:53"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026ifkv=AfYwgwUQRUAE1gsN34N8kgp0OsTbQpJG-v-ltDnSa5BhKFYN6Z63i7uEftL64itjl_mum2O_Dj5dhg HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dsvplay.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:dvxlZoTKsbIeJOgnHPor0EvMpzujGg:6hqFZrYbS64PCfSq;Path=/;Expires=Sun, 19-Sep-2027 20:35:09 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 19 Sep 2025 20:35:09 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=AfYwgwX05ADcndXGcI5QOzaPUh4_vTdIHia5S7yrHYrvnLJyoN0YL0xZa4lVtM_vPg1J0gqPnSjP0A\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S1882855656%3A1758314109887612\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-ZhbrS6aM1TbOVA4yE2nXVg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 420\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026ifkv=AfYwgwW-crii3Nxkb_LofhybfxtJceoRFddt-7ERJfJyZCG1cyF1fwP29xoSYrj_-MnDo8prl94ZeQ","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"64.233.164.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dsvplay.com/e/vqi8d81ul4je","date":"2025-09-19T20:35:09.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:38:01 GMT","end":"Mon, 01 Dec 2025 08:38:00 GMT"},"fingerprint":{"sha1":"50:D2:49:3C:F8:95:11:7F:74:11:C6:30:B6:82:0C:F4:34:21:2E:47","sha256":"EA:D4:6B:60:2A:3C:4B:39:32:39:92:5B:56:98:4B:5B:00:E5:93:5E:BA:66:43:BD:89:DE:10:FF:76:70:E1:53"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026ifkv=AfYwgwW-crii3Nxkb_LofhybfxtJceoRFddt-7ERJfJyZCG1cyF1fwP29xoSYrj_-MnDo8prl94ZeQ HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dsvplay.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:8CFsRPOcg_aw9PqjI-CMpcHfDxiz8g:CZN6MH1564xVGbR6;Path=/;Expires=Sun, 19-Sep-2027 20:35:09 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 19 Sep 2025 20:35:09 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=AfYwgwUrlPEezwT-5FfsC5z2j1RyPBZ3Zog4F1wNR7hF-xyCZv64CJ0pYdtI-62VegvfzNJwM9bV0w\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S-2111940509%3A1758314109900597\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-JFvrh6amieWYTlCPHklSRQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 417\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsvplay.com/pass_md5/226428452-91-90-1758314108-738574ae13cfa8c730e221a3530fcd2d/ijstng57i4acsjullx6cynq7","fqdn":"dsvplay.com","domain":"dsvplay.com","tld":"com"},"ip":{"addr":"104.26.6.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dsvplay.com/e/vqi8d81ul4je","date":"2025-09-19T20:35:09.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsvplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Sep 2025 14:02:53 GMT","end":"Thu, 18 Dec 2025 15:02:50 GMT"},"fingerprint":{"sha1":"49:70:4C:09:E1:E4:D6:68:0A:21:7A:96:53:6F:56:21:5F:88:7C:DC","sha256":"17:46:2B:0D:1B:6B:B9:79:84:3A:4D:09:82:FE:1F:FB:96:EC:CA:E2:54:B8:4A:66:04:5C:A9:02:51:A3:E5:D1"}}},"request":{"raw":"GET /pass_md5/226428452-91-90-1758314108-738574ae13cfa8c730e221a3530fcd2d/ijstng57i4acsjullx6cynq7 HTTP/1.1\r\nHost: dsvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dsvplay.com/e/vqi8d81ul4je\r\nCookie: lang=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Sep 2025 20:35:09 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FOzqrXuCuORGOva9Wjy1u2xePYZL0DUc9lhD9lnro%2BNywVVWgEm%2BMdH45UtvsUtV2w1RyiIZFL0CVb598IQRbQG25d0ORCDk\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 981bde2ecba95699-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"9cb176932eac6c40ad23a8f92d26ca96","sha1":"1b7f5a236a8b2bf0426ebb48efc90455ebf8582c","sha256":"cdf5d9bf423533e918dfd3f8704f286ce2bf86fd8cc0fa24d0306c8b69b9b771","sha512":"09ec6a89c4f40193ab654609c5ba31719e9d8ebe8f09f918a95f9de3bb393c5fff8d7035717792a27f10c9a19b29b95634cb5ee148e59aad01e98f3c02ae0122","ssdeep":"","tlshash":"2ab0120e508077976f4e85935083610f9b51723c144b81cd0b0d19074137e26b945e78","first_seen":"2025-09-19T20:35:59.514153Z","last_seen":"2025-09-19T20:35:59.514153Z","times_seen":1,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"dsvplay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"undefined/ekk1Q0wbK1Yucxt0V2U5CCUIZn48bAcFKEksQCF+H3sEJy9MIQVtLxYmQCcqCCZbN2IULEFmfjwtYAY0CB8EJDYzPmA7FgMYWQd+CjlsCzQcEwd6IhshRi8cLhNNBzUrPHwADTEFWxo2Mz5vOwETBF8BHx4lZSQVLhl0MAkwCHxmfjwEYXMpNR4AZn44A3EaHBskXXEFOyYAE35LOHEpJ00rbXICNCNCOi8scE0PGDwxdykrEwZmAgQ0JwQqDxZ8ACIELGwHARtJcUMMHzMZegB0EChjLyI0IGczGy0tRRoLMCtWLj8pKGMvIjYzXioULQcMGjtPBm8UKxUsWW51AyhNCTwtHlYyBhclbAUhFiNQBhoUKm0VaUgLYjkNQwRMIAkZJFoUKhY9WCILOHBicRZDEFs0AiogWnIHHRhDJRszAmIuHgkvWzsCMyRjK2oQOlotPEcnfzsnKR1dKiQTJGcRdQ","fqdn":"undefined","domain":"undefined","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dsvplay.com/e/vqi8d81ul4je","date":"2025-09-19T20:35:09.341Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ekk1Q0wbK1Yucxt0V2U5CCUIZn48bAcFKEksQCF+H3sEJy9MIQVtLxYmQCcqCCZbN2IULEFmfjwtYAY0CB8EJDYzPmA7FgMYWQd+CjlsCzQcEwd6IhshRi8cLhNNBzUrPHwADTEFWxo2Mz5vOwETBF8BHx4lZSQVLhl0MAkwCHxmfjwEYXMpNR4AZn44A3EaHBskXXEFOyYAE35LOHEpJ00rbXICNCNCOi8scE0PGDwxdykrEwZmAgQ0JwQqDxZ8ACIELGwHARtJcUMMHzMZegB0EChjLyI0IGczGy0tRRoLMCtWLj8pKGMvIjYzXioULQcMGjtPBm8UKxUsWW51AyhNCTwtHlYyBhclbAUhFiNQBhoUKm0VaUgLYjkNQwRMIAkZJFoUKhY9WCILOHBicRZDEFs0AiogWnIHHRhDJRszAmIuHgkvWzsCMyRjK2oQOlotPEcnfzsnKR1dKiQTJGcRdQ HTTP/1.1\r\nHost: undefined\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dsvplay.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"undefined","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"undefined","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"64.233.164.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dsvplay.com/e/vqi8d81ul4je","date":"2025-09-19T20:35:09.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:38:01 GMT","end":"Mon, 01 Dec 2025 08:38:00 GMT"},"fingerprint":{"sha1":"50:D2:49:3C:F8:95:11:7F:74:11:C6:30:B6:82:0C:F4:34:21:2E:47","sha256":"EA:D4:6B:60:2A:3C:4B:39:32:39:92:5B:56:98:4B:5B:00:E5:93:5E:BA:66:43:BD:89:DE:10:FF:76:70:E1:53"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dsvplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:JapXg-ou5stGTOwQ48B0Ra0c1oCWHg:YnxmZlhb4viL1_7z; Expires=Sun, 19-Sep-2027 20:35:09 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 19 Sep 2025 20:35:09 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026ifkv=AfYwgwW-crii3Nxkb_LofhybfxtJceoRFddt-7ERJfJyZCG1cyF1fwP29xoSYrj_-MnDo8prl94ZeQ\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-security-policy: script-src 'nonce-dY_PY7PQsDbFF-GEjH0dow' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport\r\ncross-origin-opener-policy: unsafe-none\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":380,"timings":{"blocked":166,"dns":0,"connect":48,"send":0,"wait":37,"receive":0,"ssl":118},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wrathypenitis.help/cuid/?f=https%3A%2F%2Fdsvplay.com","fqdn":"wrathypenitis.help","domain":"wrathypenitis.help","tld":"help"},"ip":{"addr":"23.109.170.229","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dsvplay.com/e/vqi8d81ul4je","date":"2025-09-19T20:35:09.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wrathypenitis.help","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 21 Jul 2025 00:00:00 GMT","end":"Sun, 19 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"57:1C:3C:D5:C1:F2:62:8A:E4:97:AB:47:08:1D:6D:20:A7:31:0F:F1","sha256":"D5:34:58:63:74:58:D1:71:8E:01:AA:80:04:67:17:F5:C4:2B:DD:52:20:24:6B:9C:67:2B:D8:E4:7B:18:74:22"}}},"request":{"raw":"POST /cuid/?f=https%3A%2F%2Fdsvplay.com HTTP/1.1\r\nHost: wrathypenitis.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dsvplay.com/\r\nContent-Type: application/json\r\nContent-Length: 10\r\nOrigin: https://dsvplay.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 19 Sep 2025 20:35:09 GMT\r\ncontent-type: application/json\r\ncontent-length: 32\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://dsvplay.com\r\naccess-control-allow-headers: content-type, megageocheckolololo, x-forwarded-for\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nset-cookie: a97fa794a0f9=67d9d18e1f24b1e7ea7f9c; expires=Sat, 01 Feb 2053 13:39:16 GMT; domain=wrathypenitis.help; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2b37bf97bc1f4314124bc53f7196da2f","sha1":"2f7fb6fe31127a5bc78c55ae6f5c02581cf5739b","sha256":"a2266708cd4c7ba48ce7a610497bddcb40739823648bf1711a64e24402214502","sha512":"527e41cc1d35cf02fbbdd6760b054b76607131fa923f92e100e76f5e3815576c6d8f5a9708a527227abe43060cb1d83d61255e37495fd539c51d6024f3039ae8","ssdeep":"","tlshash":"1f80002a22f022a322c0800cce320e038aa8a8a08023020c0020c220c800a2aaa80882","first_seen":"2025-09-19T20:35:59.516442Z","last_seen":"2025-09-19T20:35:59.516442Z","times_seen":1,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":14,"connect":18,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"wrathypenitis.help","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"wrathypenitis.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dsvplay.com/favicon.ico","fqdn":"dsvplay.com","domain":"dsvplay.com","tld":"com"},"ip":{"addr":"104.26.6.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dsvplay.com/e/vqi8d81ul4je","date":"2025-09-19T20:35:09.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsvplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Sep 2025 14:02:53 GMT","end":"Thu, 18 Dec 2025 15:02:50 GMT"},"fingerprint":{"sha1":"49:70:4C:09:E1:E4:D6:68:0A:21:7A:96:53:6F:56:21:5F:88:7C:DC","sha256":"17:46:2B:0D:1B:6B:B9:79:84:3A:4D:09:82:FE:1F:FB:96:EC:CA:E2:54:B8:4A:66:04:5C:A9:02:51:A3:E5:D1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: dsvplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dsvplay.com/e/vqi8d81ul4je\r\nCookie: lang=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Sep 2025 20:35:09 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15406\r\nserver: cloudflare\r\nlast-modified: Mon, 03 Jan 2022 15:38:36 GMT\r\netag: \"61d3187c-3c2e\"\r\nexpires: Sun, 19 Oct 2025 15:10:07 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 19502\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=llJK7XVxgLDPP0n8cJ8qPOf6r8%2B98DVXQ06EYAAqQ9nXDMb4s7B37LpC48mtKyctd37cgrFAZefFfdBJKp4i8g4dq1hT0nmL\"}]}\r\ncf-ray: 981bde314de75699-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"30d3656f43c817e38c3e7d70b2bfbdad","sha1":"1aa43b43755e7cba5e145d0978517f7bedad7da6","sha256":"a558a4796f60f07743027eec96b538b2e7758cca8c544ed796ff745837478555","sha512":"75b17478d6d98ab14fd4d37d58c9484df68bc3ccc6d26897527eb565d4071c4b7128feb0f65449ce369c99bf12da97959426c5b03256e9782ee472cea81bbef5","ssdeep":"24:nG2q35msJnnnnnnnnnnslLD4zgxgJ0Oqr5646dUlZIJ/KuJmy81DwlJ8SAFf9tam:NBOzgxgJ0Z44Pi1Yy8+fVGfyfqxtb/","tlshash":"14623db4790b1355da125df9dca9ce66834cbe9b1a38029fb154febc306b4c74e18831","first_seen":"2023-04-05T18:53:41Z","last_seen":"2026-04-05T23:38:46.469749Z","times_seen":3479,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"dsvplay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wr.amigojimbang.com/r0xouqn9Q2C5n0esZ/MQmjG","fqdn":"wr.amigojimbang.com","domain":"amigojimbang.com","tld":"com"},"ip":{"addr":"23.109.170.29","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dsvplay.com/e/vqi8d81ul4je","date":"2025-09-19T20:35:08.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wr.amigojimbang.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 07:23:13 GMT","end":"Sun, 30 Nov 2025 07:23:12 GMT"},"fingerprint":{"sha1":"A3:D9:C4:5C:DE:8A:EC:41:A9:FA:24:23:C9:70:3B:2F:73:F8:23:40","sha256":"A3:40:5D:1D:E8:2A:A3:AE:89:6F:43:FD:CF:1C:7E:1C:98:BD:42:EA:C3:E6:C0:4C:AB:5F:49:7B:87:D3:2B:3D"}}},"request":{"raw":"GET /r0xouqn9Q2C5n0esZ/MQmjG HTTP/1.1\r\nHost: wr.amigojimbang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dsvplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 19 Sep 2025 20:35:08 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://dsvplay.com\r\naccess-control-allow-headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nset-cookie: GL_UI4=eJw9zV1OhDAcBHC%2BWdcFnYQDeASKQHj1xSv4SAr9g3Wh3ZQKensbE32bTH6T8TwvKB7g78kZ4Sdv8MRY13Z1U3VlPXa8GoaubZtyaLqSVc00NbiTW2%2F5sJCNcNpWbmxv9wiXmRQZOfajFpTh0am%2F5qr0oSLEg%2BFKZIhXJ5YM6WD0sZEpQkSKr4T0VRqa9JcT%2FEMbhOy5dlkql%2F0Sgd6KMD8jfZNKuGV%2BQcDKPE883N8Wbidt1l6KxEc8Gy4I%2FgtOI7c0a%2FONVNB2tfoG6EX0%2F%2F73ODxYiUTQLkdCrO07mR%2B4dk3m; expires=Sat, 20-Sep-2025 20:35:08 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJwVyM0KgkAUhuE5hxiIJPjA9l6BadnCbbYMXXgFZhEDwxyZGfu5%2B2zxLp5XKcVpAjYTkrrM6yKvDnl5qkBPcNuBRwfdin8PX5AHF0ewd9h0wUrWyOzi8kes%2FgYZbM%2FWfLJe7ByNuABeWjfDzT72l%2F4KmjSBo2gGh3uqQC%2B9%2BwFe7x3U; expires=Sat, 20-Sep-2025 20:35:08 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87169,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"f2b7c680ee2fce541c9b9e2926d2f990","sha1":"f1d7eaae39581f8b19a11fb6a6091c7d978651ce","sha256":"04544a467a262e60a8ef0f83a143e6e38011b2aa90817a25adb4ebd7f83638e6","sha512":"2b45388164dc7d53d8cf4569c5f719f73d55d3911ad1a76e9a775b804dbcd083c6be33807a6cdbbd2a46ff361997724753374c581fa1b71404a3dec0b2a5e46b","ssdeep":"1536:HB4ny9/b1NzHizwPq0hHwWq0cHYLQsbsJXh0DJvpCESXYrT+I:Hqna4zwPpLPEin/","tlshash":"8b831ad0f352f1b9cb9640e6a6255231e2290df1308c98a0f17e5d547f91e8ae1fe2f8","first_seen":"2025-09-19T20:35:59.519076Z","last_seen":"2025-09-19T20:35:59.519076Z","times_seen":1,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":72,"connect":21,"send":0,"wait":34,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"wr.amigojimbang.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tionsandindeedther.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","fqdn":"tionsandindeedther.org","domain":"tionsandindeedther.org","tld":"org"},"ip":{"addr":"3.174.113.76","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dsvplay.com/e/vqi8d81ul4je","date":"2025-09-19T20:35:09.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tionsandindeedther.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Tue, 22 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:2A:A2:36:53:20:6D:FC:D2:92:B5:28:46:B8:0B:A5:FA:C2:7D:2B","sha256":"3A:9E:D2:49:53:E2:EA:3E:4F:77:52:84:C7:6F:B7:4C:E3:00:77:AE:4C:04:01:33:27:1C:04:38:7B:76:D9:31"}}},"request":{"raw":"GET /M2FXdWJSAzQYXVJcNVMXQQ1qUFB1RGUzBgAEIhdQVlNmEQEFCWdbAV8OIhEEQQ45AUxdBCNQUHU0BD0GRTI8HhB0IBIGBlkWMjZRV1UyMAZRBDlAW2Yzb0EucFQcNhhYRGUzLXESGDhQUBMQNChAKC0GO3I1J0UnYFE6JTNbVR8dCXEHFBYIeSYgTC9bLwQQDwsKERInRwUQQTFyMjtFB2UkGDkLR1AGRQkWUxU6MVACAhwzSygGLAR+CzwFJHE3JCUhXyoWHDdJKAUGJnhTL0MvZRE8EDUCJw9HKxZTFTwwWC0dIVYENDtEVHkbLyY6axFjECRfBzVGDXg0O1hTBTE+MDhkOWIGB0k3HBAqWBYGIxZFBDAFMWs5OEIyXys0NlFbVgZFJAU4EEQkaxhnBilLFhYXUUAuBSNbBAQPHSVrUiMGB1gCHTwYQBUSJCNKAx8aGmsPO0w4WAUdJVFhVHEfEVwPJ0g7aSggNFJaFxxADWcq HTTP/1.1\r\nHost: tionsandindeedther.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dsvplay.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 1214\r\ndate: Fri, 19 Sep 2025 20:35:09 GMT\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nset-cookie: AWSALB=gAR8yq/mt1lhJ0oe3EZL0E87O8NPB4P2cbdwuJHJ8kYk65f34iKqXCtVIH0jNlYUmQidXvSSMUUG9ntXV+G5UWlJOg7xBEebNzz/8LQ2oN82RnEBJBRJJkcf1IGa; Expires=Fri, 26 Sep 2025 20:35:09 GMT; Path=/\nAWSALBCORS=gAR8yq/mt1lhJ0oe3EZL0E87O8NPB4P2cbdwuJHJ8kYk65f34iKqXCtVIH0jNlYUmQidXvSSMUUG9ntXV+G5UWlJOg7xBEebNzz/8LQ2oN82RnEBJBRJJkcf1IGa; Expires=Fri, 26 Sep 2025 20:35:09 GMT; Path=/; SameSite=None\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d0f0580810241b91124f38ca77e164ee.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: HEL51-P6\r\nx-amz-cf-id: ilKbVRKe9Qd8ol9nsU99q-ndEVzU1ts7mPcEZg3P0iFjZPIsuNNjKw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]}],"data":{"size":3068,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3068), with no line terminators","md5":"b58690274088b317abdb34f5c36cbf63","sha1":"cb29d07179d70e09be54abfc105963e1eafacb29","sha256":"d4b5c89d3aefa35b8a6fbd0753271c63fdae555a6d90e737ce8e25dc144acc7c","sha512":"429edde55fca7bf8c2948c54d010ebbc819c2145ca392c1f1e64879ff8ad0c50f19b8715dcdb3ac4a79c0b53cb87ac1c8424ca78f8cb2c4c46b9ba1aab3d5563","ssdeep":"","tlshash":"3551018d34f3a0c282f27054053bb89afa384aa1934cda14867c96bcbd315e9a317f4c","first_seen":"2025-09-19T20:35:59.52146Z","last_seen":"2025-09-19T20:35:59.52146Z","times_seen":1,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":25,"dns":0,"connect":13,"send":0,"wait":132,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.io/theme_2/img/loader.svg","fqdn":"i.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"104.26.14.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dsvplay.com/e/vqi8d81ul4je","date":"2025-09-19T20:35:09.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 08:23:08 GMT","end":"Fri, 28 Nov 2025 09:22:48 GMT"},"fingerprint":{"sha1":"41:A0:19:94:CC:EF:97:7B:BF:7D:F2:CD:0C:F4:BC:70:B7:10:69:B3","sha256":"7A:BC:65:69:BD:92:44:70:8B:39:07:C2:CB:6A:FC:86:3D:6C:53:7F:45:1D:B9:98:D8:F3:22:77:EA:BA:2F:7E"}}},"request":{"raw":"GET /theme_2/img/loader.svg HTTP/1.1\r\nHost: i.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i.doodcdn.io/css/embed.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 19 Sep 2025 20:35:09 GMT\r\ncontent-type: image/svg+xml\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\nlast-modified: Mon, 03 Jan 2022 15:43:40 GMT\r\ncache-control: max-age=2592000\r\nexpires: Sat, 18 Oct 2025 02:24:10 GMT\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T2clbVWhIYrju183Fpr7KHIAEsEEmikw4iksJu5mqY5dVd9WuXJ3AXLetvmr9fTA8Xrl11uzOHn9IVVDZ3MXXujNY%2Fkgqq2AkpOc\"}]}\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nage: 70663\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 981bde2f1c200daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":694,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text","md5":"be00fc4a29d03016e78b28c9943e3f51","sha1":"10f2025f5aa96706cc81e050eadfcaa9bcc55af5","sha256":"eec2c40d8b1bb98306990239204d8b90ca030f0def0e00dfe3117ae42991e126","sha512":"ea5b50ec59873392642e6cdd1e7fbd84137d8db13906b4e435ec04160dc5412bafdea1a5324efb2a5a08fe12e9af89f4e1c99c18f5b97c987709c55568efd75a","ssdeep":"","tlshash":"6701c0645cfb4548006c8539d3e93850396c50a3954c0194fa9c1c326f008af2c6f38e","first_seen":"2023-04-30T18:25:34Z","last_seen":"2026-04-05T20:22:51.83669Z","times_seen":2274,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wrathypenitis.help/cuid/?f=https%3A%2F%2Fdsvplay.com","fqdn":"wrathypenitis.help","domain":"wrathypenitis.help","tld":"help"},"ip":{"addr":"23.109.170.229","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dsvplay.com/e/vqi8d81ul4je","date":"2025-09-19T20:35:09.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wrathypenitis.help","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 21 Jul 2025 00:00:00 GMT","end":"Sun, 19 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"57:1C:3C:D5:C1:F2:62:8A:E4:97:AB:47:08:1D:6D:20:A7:31:0F:F1","sha256":"D5:34:58:63:74:58:D1:71:8E:01:AA:80:04:67:17:F5:C4:2B:DD:52:20:24:6B:9C:67:2B:D8:E4:7B:18:74:22"}}},"request":{"raw":"OPTIONS /cuid/?f=https%3A%2F%2Fdsvplay.com HTTP/1.1\r\nHost: wrathypenitis.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://dsvplay.com/\r\nOrigin: https://dsvplay.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 19 Sep 2025 20:35:09 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://dsvplay.com\r\naccess-control-allow-headers: content-type, megageocheckolololo, x-forwarded-for\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":124,"dns":1,"connect":19,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"wrathypenitis.help","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-19","alert":"Sinkholed","trigger":"wrathypenitis.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}