{"report_id":"c26355eb-ee12-4b61-878f-3b660a45cdca","version":6,"status":"done","tags":[],"date":"2026-03-02T14:35:38Z","url":{"schema":"http","addr":"vplayer.fairuseonly.xyz/","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"172.67.170.177","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"title":"Google Drive Video Player - GDPlayer","dom":{"size":701,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (624)","md5":"db0ce0972f16ec25d0eaf188851efd56","sha1":"61d373a3cbb6975b7efc7fe789e6c1b390874a1f","sha256":"70df9b0f1ba0a0c1abf5bf2b5c117ebf58ae868cb3e3232ee22efe01958ece7a","sha512":"74489b9f2710004926e320f04cd00ac45e6b3ef4082710c0f4665a67aaded43c67f5288a0e6fce1213779b6014b7b7be76f237728bc007ee038de744cf841cc4","ssdeep":"","tlshash":"ed01448bf405382d9673032430e93d89987e93608c402230b24e62c346c47e75b06b95","dom_hash":"domhash66fb451f1b6f50d037d5916aa3d25bcf","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"vplayer.fairuseonly.xyz/","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"172.67.170.177","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-06T14:35:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"static.addtoany.com","ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2006-03-10","domain_rank":28267,"first_seen":"2012-05-21T12:58:18Z","last_seen":"2026-03-02T03:42:55.311942Z","alert_count":0,"request_count":8,"received_data":86699,"sent_data":3829,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"vplayer.fairuseonly.xyz","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-22","domain_rank":0,"first_seen":"2026-01-06T07:52:59.74794Z","last_seen":"2026-01-06T07:52:59.74794Z","alert_count":273,"request_count":91,"received_data":1884817,"sent_data":42973,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"AddToAny","description":"AddToAny is a universal sharing platform that can be integrated into a website by use of a web widget or plugin.","website":"https://www.addtoany.com","common_platform_enumeration":"","icon":"AddToAny.svg","categories":["Widgets"]},{"name":"Bootstrap:4.6.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"SweetAlert","description":"SweetAlert is a JavaScript library that provides alternative alert and modal dialog boxes for web applications, with customisable features, aiming to improve the user interface of the default browser dialogs.","website":"https://sweetalert.js.org","common_platform_enumeration":"","icon":"SweetAlert.png","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/vendor/bs-custom-file-input/1.3.4/bs-custom-file-input.js","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf7b32d2c33b293644c4e93290507b11","sha1":"41808c13924954c9fffd84fbe7ae2c6c5ddf9205","sha256":"16e21d998428f592b1e5eba951aafff03c6c33c40bcdff115fb68aaa16e541ba","sha512":"4e4aaf06dc5f01981389137d5eea21fdd928c0b21cb94a7804a1d10ba04520da687f1c0368aebcdc0fd7a8b6651ad19e17ef5fdbebc1b2cea13fdd44689e43ef","ssdeep":"96:gykKyXOBC5Mhbx3Gvan8DXbp2pVancHip+Gk1WeWG9OGN3Y0yWGGapIR:gykK3BBMangdcHeWoCdUHIR","tlshash":"09a120983ef940767453ba7e97cf5080e666c48b040cea407a6cd9489fd091817f9ffa","size":5009,"data":"","first_seen":"2025-06-25T05:24:59.08187Z","last_seen":"2026-03-27T16:40:09.241865Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/sm.25.html#type=core\u0026event=load","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"107e713ee1be819b72679a9b20d1b704","sha1":"1d4a8f1f9af8ae391110851b0c5df66d50a1d8dd","sha256":"8eb57361472f7fa5e3b2def7d28f9a03330413fd300a2223ee2ca3291782a41f","sha512":"503b1a4d5d8ff0a9b6caf23041156bf016983c5243d3c129aa6da4a26b947dc73b4ca76400f3d0bed5b7e67c721948a6f77d4720eec763e78268718e4524ac3e","ssdeep":"","tlshash":"a7f0204ff21e393c86730615309a3c86e43e93708c003230a64fa38306d8b9b574af51","size":552,"data":"","first_seen":"2025-03-02T13:21:48.338565Z","last_seen":"2026-04-04T12:49:46.091016Z","times_seen":32521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/vendor/bootstrap/4.6.2/js/bootstrap.bundle.js","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ae532666f4d22a7a52ab1d29f6966a8","sha1":"28fb4ae220d52c24195bbef5c91f62f2ef579b09","sha256":"15a00e75874401991699b80c563adbee4ab8049e3abda514883277b7b3bea13f","sha512":"7b34ddeda9f964ba46dca620a3b7cd3033240411f3bfb0fb3f6dfbda4186108ad8480d19422458b4551d55d59550263d5e08308b78865d28f022ff1e63630d6e","ssdeep":"3072:nXUiN6JsHhcZMJ6ZsqoBGa5fHWv0YAgKbi9vqsG:nb6JsBUMJ6ZvoBGa5fW0YAgD9v0","tlshash":"4c34a30e3dea70a31567606e87ef9149f231545f510df9047ccc96a82fa4e3492eabf8","size":230599,"data":"","first_seen":"2023-03-09T14:48:15Z","last_seen":"2026-04-01T03:28:06.42544Z","times_seen":300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/vendor/select2/4.0.13/js/select2.js","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b9e61ffc46edc5610a2020a60d331f6","sha1":"bd04d39aaf95afae66f3b9e0c01ce72feb5cf5aa","sha256":"46716cb20114cd73f37e4ab748945e68bd3d153e08af566ce3cc29371d6023da","sha512":"b6fb389760b754f7021f3514d4a186fa35964ceec7d2cb6f9358f09faa6be01d6e8a670bff66a98b7ae79a4321550e838258312dcab22d20d2d481797b279346","ssdeep":"1536:mSgOuLb2WNv6aW7PeaMNlk4t2hAP9DKvWtWMV9Atd4v:mbLb2WUdbMV9AtM","tlshash":"3fe30f986ef72174576b30af9adf60082138914b9409ea117c9c87cc9fda43852b7efd","size":153589,"data":"","first_seen":"2023-03-07T21:23:37Z","last_seen":"2026-04-03T21:21:59.234874Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/vendor/bootstrap-sweetalert/1.0.1/sweetalert.js","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"10ba6a45b5ea3105870ce30d6b15ceda","sha1":"6538cc1fc3535db08575b4e6c793b576fb8e3336","sha256":"66f31ff658b4339186ae219410a9f583a94bc278f9bbe10da826cb33922d8d0d","sha512":"5d5cf53f80b29add38a6ec26e4e2133e6e60ca5cb28f9be46a1bdfeb84fcc65b7fc9b793a73e281ea25521e0ed0e8179912ad730e5267587b0138252ff845600","ssdeep":"768:4kTsnFnQf2PTNZrv5EShXqzOGShX9WyZa:EQ2PrrvONyZa","tlshash":"f3f2b69939fd61b3067b10a6538f5d45bb308027b004ea91b9fddb800fe0d654ba5fea","size":34735,"data":"","first_seen":"2023-03-07T01:41:15Z","last_seen":"2026-04-04T05:25:58.565733Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e56ddbb05a974a6bc5ea44661e509a21","sha1":"448d4cb69f9441e10731b1ff4aa9dc81502589bd","sha256":"1759e8c6c2ce9c987245281cd33bb9260ce82e31b604131a5da486db89369913","sha512":"a3b2b0accbc0f18d13fc0eb6d742a5bf00a9614399e05b97b96ed0963e7d29b5868f73ef541c5f5bf8d125e7f7040d03f39cc853a52ffa2f1e2ebb7a20165242","ssdeep":"","tlshash":"7b700008080000800a002c00e000020080c2000802202008c020a8a0082c088808f800","size":21,"data":"","first_seen":"2023-04-10T22:51:51Z","last_seen":"2026-04-04T12:33:12.165122Z","times_seen":39585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e56ddbb05a974a6bc5ea44661e509a21","sha1":"448d4cb69f9441e10731b1ff4aa9dc81502589bd","sha256":"1759e8c6c2ce9c987245281cd33bb9260ce82e31b604131a5da486db89369913","sha512":"a3b2b0accbc0f18d13fc0eb6d742a5bf00a9614399e05b97b96ed0963e7d29b5868f73ef541c5f5bf8d125e7f7040d03f39cc853a52ffa2f1e2ebb7a20165242","ssdeep":"","tlshash":"7b700008080000800a002c00e000020080c2000802202008c020a8a0082c088808f800","size":21,"data":"","first_seen":"2023-04-10T22:51:51Z","last_seen":"2026-04-04T12:33:12.165122Z","times_seen":39585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/vendor/FormData.js","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf5d6597a2d19f254f8e972f62119e48","sha1":"2f4bde660860dff72898eb6d5fb49f9eac951bfa","sha256":"fff7e53e9d2bab74ebb5d68ac76907ca488aaeacd50a8e63e26b20e5dcb789c2","sha512":"ec25be83844dc32ef86f24a2b890b3911fc75dea52b8fdb48f7169c3e463eba5662809faf4e61344387955795a3f15d3fb11575ad39ecac9975f26be52f86fbc","ssdeep":"","tlshash":"c501cb187aad3511a3a3d13067ebe28a7b39a13c4856119839c9a9c769bc04c7419f94","size":678,"data":"","first_seen":"2026-01-06T07:53:06.87995Z","last_seen":"2026-03-27T16:40:09.272783Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/a2a.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"baf0595a19bdc7f7497b74731d2166c4","sha1":"fd5714384c52fc0338083574434d12328313896c","sha256":"3dab93242ee573bbcfc22c9d15acd47794e500ed44e6bd48a35400b39d65aa43","sha512":"da0e15a709b3d043e8cd9e4f97cf70d8c1addc2a7d90b6bb11d71cd72aba9133e5b9388528691cf6a354a6aaa346045f64d82b947883057471e1f1a2fdbd1901","ssdeep":"","tlshash":"74c01291501575418c1342fb475e500b167120bd015c14ca36a881f9595613f8c42fc3","size":182,"data":"","first_seen":"2023-03-08T14:25:33Z","last_seen":"2026-04-04T12:49:45.956749Z","times_seen":13845,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/whatsapp.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e8b3ac6bda5451ff39c5ecd6d7b3873","sha1":"fb477a11167000a30e45369e686ec43dd62d026b","sha256":"c15e1379ca2c59f99912500bbc23a0d1d88f43198cbe1b53d87776fa351385eb","sha512":"b9145fa20ccc86c3e3e28ded1df1611ec4bd8ff2fe0d93d392081248d59d77a4982150f85d8ef0b545850ac2a8797a136692e801b23cb26de1227c66e5dd4d24","ssdeep":"","tlshash":"d31100c92110d3a41c97d57edf6e9d46a61f707d75bc24d6039ecb28498f0edb50c845","size":1108,"data":"","first_seen":"2024-04-12T13:25:33Z","last_seen":"2026-04-04T10:43:26.26216Z","times_seen":4185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/modules/core.ydpp7jcu.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9732b656e9f76f9f4523aa1e726d5691","sha1":"cf90b38d8ee1c46594445a7f4d4dc479f4dede06","sha256":"afb9825a91c5980ddb68ebfa3c7323533f4355f14a0a7db233b5de527f4c32d5","sha512":"a938bc8eb39437eeeab4d0e9cca78714487c7eb0f41e373ac32b543531ecc3724972bee71117e130116c6ab5c447dc261960976fd7c88dc16c7e2d0dd952960e","ssdeep":"1536:j8fEZ0gdDGst00AQVWFaC7Segd292vOBbJkbU4mxSZXb1xA6Wv9szbfe5Ddrayt:YfpgY2vOwbJmSXb1xAlMbAPt","tlshash":"0b636d9b37056937ba5b30e9a9ffa608a037235e9e080550f5a0d4b521fdecd3067f28","size":72579,"data":"","first_seen":"2026-02-12T07:28:51.937994Z","last_seen":"2026-04-04T12:54:29.788759Z","times_seen":8446,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e56ddbb05a974a6bc5ea44661e509a21","sha1":"448d4cb69f9441e10731b1ff4aa9dc81502589bd","sha256":"1759e8c6c2ce9c987245281cd33bb9260ce82e31b604131a5da486db89369913","sha512":"a3b2b0accbc0f18d13fc0eb6d742a5bf00a9614399e05b97b96ed0963e7d29b5868f73ef541c5f5bf8d125e7f7040d03f39cc853a52ffa2f1e2ebb7a20165242","ssdeep":"","tlshash":"7b700008080000800a002c00e000020080c2000802202008c020a8a0082c088808f800","size":21,"data":"","first_seen":"2023-04-10T22:51:51Z","last_seen":"2026-04-04T12:33:12.165122Z","times_seen":39585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8551519370b4d576d48f14fd052e3254","sha1":"9327e41b2df0d7b09d24801b0c1edbe40bc371a8","sha256":"0dbdf62911e349e4e05adee394b31fa3a682ce6392b760b3a981fb833f1ce8e8","sha512":"9132f869c8c33ab1b0a2fc4dcac8ad0b260e1b0b634828100652243909a2eca8d25ea8ad747afe65ab6f3a55dd4e34d5dadfdc4badd132ec0b34acfb5e875533","ssdeep":"","tlshash":"f6611f2108b63d324abc57d4fde74b8c842c13914941f81bb5df4a944bde2bab2e3a64","size":3259,"data":"","first_seen":"2026-01-06T07:53:06.916889Z","last_seen":"2026-03-27T16:40:09.283169Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a31819b597fb6a06d1e4157e354845ec","sha1":"248da1c78fe2045cfc01ecc48aadad3b7208e8a5","sha256":"cb975db0e69eb2f114f61647b2e5395cf27d63adb2a00a63377d6baa15d979a3","sha512":"44cf10c61da9d48c8dc059f8890365865446ea82ace9035b4604cfd6168e316c042ee9b394c79638564661f3993d6b2f4f53a8a1c48fe47a8ab805814216ed1c","ssdeep":"","tlshash":"5441362cf0f201142fbb252d5d7b468036685413d04dad187f6fa2e08f49678f86bf8a","size":2439,"data":"","first_seen":"2026-01-06T07:53:06.918487Z","last_seen":"2026-03-27T16:40:09.283735Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/vendor/jquery/3.7.1/jquery.min.js","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-04-04T12:43:23.514643Z","times_seen":136280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/facebook.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"014bcc757e484e12e3aea6c9d768fd4b","sha1":"4c17157d0012f8002e4e6cf77c5f4a9747792cf4","sha256":"4b475960843a5619b907af1f0a89e3136bd5e6a4a700ec78cb417f302647cf49","sha512":"b00fab0ce2e56b56c18e0dc54ac3329d77fc18096e63bc2aef34342770f40dac91c10f7a8a9db1dcc5ce42fbafe637fcb1fdd51994ef937aa00923375476d467","ssdeep":"","tlshash":"dae0ab951236d9864d51093ec71fa48fb3b0b67fa1d8298006bc80b289d20fd3e0ba03","size":429,"data":"","first_seen":"2024-04-12T16:11:44Z","last_seen":"2026-04-04T12:49:46.069421Z","times_seen":16127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/telegram.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48f25c508c92c3601cf047609318001f","sha1":"59117e825084c63a0dda48edec82c14a60e16f23","sha256":"6415561e892cf9d614e7179f71353af4ceadfd641d71c42fe54c9420eb0d0138","sha512":"32ca9e672cb26c5cc9370d32a2739ad99a933a700250e310955b68ca4a974964f22095179d1a56f8f57c160ee6ab4d3ff659b4bba5838879472289b06bf53a42","ssdeep":"","tlshash":"66e02077611084814c2a54bbda1e614f5434f069529d65d3436ac4f754d726f5c12d8b","size":360,"data":"","first_seen":"2023-03-08T15:33:09Z","last_seen":"2026-04-04T12:49:46.00916Z","times_seen":10155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e56ddbb05a974a6bc5ea44661e509a21","sha1":"448d4cb69f9441e10731b1ff4aa9dc81502589bd","sha256":"1759e8c6c2ce9c987245281cd33bb9260ce82e31b604131a5da486db89369913","sha512":"a3b2b0accbc0f18d13fc0eb6d742a5bf00a9614399e05b97b96ed0963e7d29b5868f73ef541c5f5bf8d125e7f7040d03f39cc853a52ffa2f1e2ebb7a20165242","ssdeep":"","tlshash":"7b700008080000800a002c00e000020080c2000802202008c020a8a0082c088808f800","size":21,"data":"","first_seen":"2023-04-10T22:51:51Z","last_seen":"2026-04-04T12:33:12.165122Z","times_seen":39585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/vendor/pwacompat/2.0.17/pwacompat.min.js","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"048d919591a36ad00b235a84bffd0f35","sha1":"e19d08f4238bfcb58706a0daccb221ddc699ac8c","sha256":"42689f1bdb72d9ca37efad650562702f929d0ce749e2c16343f50b138683d7c5","sha512":"e0383d22ad3f54cf805b8b5f33efcb2cb5fe628a6e768ed212c3327d32731bfc7b6eb290f8d00c10bae1039d7b700db0155387a349be9f4e97582744ef442c7b","ssdeep":"96:89MYpgCIxM4vw734O750YLk7MkNsnyI6+CHp8wegYmBnAoXQ2paUeGMNyLb9mV7:OJKSd734O76YgYDnyIoeMn/XQEaVGQg2","tlshash":"a5c1e8d971a33016172321bfd0afc14eb13a2847ad8549a09156d8c07d75abd137ff9e","size":6154,"data":"","first_seen":"2023-03-07T14:43:12Z","last_seen":"2026-04-04T05:56:56.102972Z","times_seen":235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/vendor/js-cookie/3.0.5/js.cookie.js","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f4494c431a067221baccb5611bb1aa5","sha1":"466c13564f574b9359b6060a49ea813ced25c89c","sha256":"5f8b02d87028a3f689b8d9303a828e7ce2c16d47e10ca2cb7775d21c5741aecf","sha512":"17f7626b68ca304d768f0aa26036b2783f91afff234d6503db07dbb890746f34b07a74849d7b27e2a43fc15c975028b1e5b982023f3125db45af63aa52d8cb03","ssdeep":"96:/CKM08LT+SiQqKqL4HS4MECmkhk30QYOai/3a:aKM0wT+SiQqXL4HRC7hk30QYOaYK","tlshash":"5481026c28e625e21f072438dbaf65007374d51b049ede607c9ce3621f6ac3916f5aee","size":4189,"data":"","first_seen":"2023-07-22T22:41:15Z","last_seen":"2026-04-04T06:08:41.893304Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/js/main-v3.9.2.js","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"802bc0ff1953cd26b1703c25b28cb7f3","sha1":"10d2eaced52955e5fc23fd1e6548ed6b7065a9f8","sha256":"ecb76b9607737231415402b7c8da5ed43a6e2a596ee666291ca2e2a87a30afc1","sha512":"f9fe1372ec3413f44d0542908e0036650a47fae01d13bf1a799b4c6894f2d255d3f1b359dc92d01237f207ce25b96de1971a1efe9b63bd664b526ef6973181b9","ssdeep":"1536:STCtWEqO2QTEvWHzIjsgHc7n3AYkoAJb0hp/TvxN0q2dmSWbBqhDu9WO7c5AAy:S2tWEqO2sTLAWbj9Cg","tlshash":"61f394c9f35c39978136309a5c2e15ce683c9536cd054cfbfc78a0a06ae8d7c916ae79","size":161758,"data":"","first_seen":"2026-01-06T07:53:06.879034Z","last_seen":"2026-03-27T16:40:09.242641Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/twitter.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca05cf90bd32d6134c0b92464c343f9a","sha1":"187feb5cc71d225717838268487a0abc9b8d405c","sha256":"3003867b66a32c12fdafeefc27cf06d906e5a99ba275550ab757f4bb04834636","sha512":"d36553644d3a52a96dbf733c7eb766deda074c926f44514001633dd0a3ea2b84d1a835f207bcd9772e33b2a8c086616cebf6119a3d802134636ef7c53e92dec0","ssdeep":"","tlshash":"8bf0ddfe277c60dc28234baacb15e5591b2d30ba3b8051c3061c87b0488791ce503d42","size":645,"data":"","first_seen":"2024-04-12T16:11:45Z","last_seen":"2026-04-04T08:25:47.897321Z","times_seen":3996,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e56ddbb05a974a6bc5ea44661e509a21","sha1":"448d4cb69f9441e10731b1ff4aa9dc81502589bd","sha256":"1759e8c6c2ce9c987245281cd33bb9260ce82e31b604131a5da486db89369913","sha512":"a3b2b0accbc0f18d13fc0eb6d742a5bf00a9614399e05b97b96ed0963e7d29b5868f73ef541c5f5bf8d125e7f7040d03f39cc853a52ffa2f1e2ebb7a20165242","ssdeep":"","tlshash":"7b700008080000800a002c00e000020080c2000802202008c020a8a0082c088808f800","size":21,"data":"","first_seen":"2023-04-10T22:51:51Z","last_seen":"2026-04-04T12:33:12.165122Z","times_seen":39585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e56ddbb05a974a6bc5ea44661e509a21","sha1":"448d4cb69f9441e10731b1ff4aa9dc81502589bd","sha256":"1759e8c6c2ce9c987245281cd33bb9260ce82e31b604131a5da486db89369913","sha512":"a3b2b0accbc0f18d13fc0eb6d742a5bf00a9614399e05b97b96ed0963e7d29b5868f73ef541c5f5bf8d125e7f7040d03f39cc853a52ffa2f1e2ebb7a20165242","ssdeep":"","tlshash":"7b700008080000800a002c00e000020080c2000802202008c020a8a0082c088808f800","size":21,"data":"","first_seen":"2023-04-10T22:51:51Z","last_seen":"2026-04-04T12:33:12.165122Z","times_seen":39585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/page.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"096748c105fcef34c221a4931699bb13","sha1":"24e8582becb232f4a0cc9c009cf6478d7210cc18","sha256":"fdc19178ffaef3c25f667e332a6b3a832a2d433196e269e62705b32635cc4535","sha512":"7134e982336d3dc9ffe788f9849ba220d456897ef23165d040da5fe84398464e94ae15f24090a49164af67964f3969902874a64b4750de2b98d0f21807a57e96","ssdeep":"","tlshash":"2061c84f774ef8368e5735b6c4afb61ea223235d98548400c914d8dc8abcdc7116fa79","size":3457,"data":"","first_seen":"2026-02-12T07:28:51.868975Z","last_seen":"2026-04-04T12:54:29.845183Z","times_seen":8489,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/mixdrop.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/mixdrop.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 613\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"265-61163ee8-5f02c00;;;\"\r\nlast-modified: Fri, 13 Aug 2021 09:44:08 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oqXH7FBbgam6abCy5Ne%2F41PfRW5sfhCM5I5sCdbA%2BRYoscOEz5vhTh1NJrnKPGXmkIVZAlCKrULzw8URK1HXZnW7TJKu%2FtXh1nNSWarHq7I9YIYoeUiR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081edd15864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":613,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"3a828b9171c3048a90baa5a4641693fc","sha1":"fd1fc3e44a18730eace1c4d6ef494356f324044f","sha256":"7accaed793151c0a7977d5f8c493c8a580746615b1ed5cc83b9c9b8402245473","sha512":"99684cfef0dc6e5a20354583706dadbd960a54e470a761258dcb2f253fd03fff275ac5d657b86cb04d9faf5e6384a6caf603f2165a4161793bdb649a098e9d39","ssdeep":"","tlshash":"71f062d04474bd7ada8e9a202467d830a4140b29c111de7a339b826d5081fa200f0f41","first_seen":"2026-01-06T07:53:06.907711Z","last_seen":"2026-03-27T16:40:09.280624Z","times_seen":3,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/uqload.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/uqload.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 681\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"2a9-6187f96c-5f02c3d;;;\"\r\nlast-modified: Sun, 07 Nov 2021 16:06:04 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wQw06gYkQuqsvurN%2BZei53cFtktRFy4G3sXttaatQdDoj%2BlQ7KiHVHKjdcZSYQDX7jMyPrBoRJK8rH6NdaBzHQWxvC3ED3AgEcgOQLJ5pmNA6s7Ab3iP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6120820e295864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":681,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"87846c6ed32c40cb0c932e53fcc90b8f","sha1":"9e8a9ee3b1b44ff7fafaef518f528843792f0e47","sha256":"07f3fcc7228a12912037219cc97761bb6c246093b76e7a6063b64f7f163552ca","sha512":"a807bf4dac648c887f30e2478919c4374fb6e95104c82a6d390d72d45751b705f591dc75956263c883a304fbee813450460eab4d0268c657ce91a790c9b79199","ssdeep":"","tlshash":"0c0183fa2234fc2b5a3046b7c907b34e3e3e509035944c2129a31416b2cc2b2e0defa4","first_seen":"2026-01-06T07:53:06.915997Z","last_seen":"2026-03-27T16:40:09.281205Z","times_seen":3,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/favicon.ico","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 2665\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"1536-69045308-5f02b91;br\"\r\nlast-modified: Fri, 31 Oct 2025 06:11:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PrgxpakrvajHL6SH5LTqWr%2FgKwv1IWsCJKrWOFTEhZIvkdpTVqiDvsrSerW6dfEvFNDg0kIhK%2FjYwJ7btZm9kKrTMzdeVEbISQV%2FmadBgB6xhTsTJand\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612085bbf15864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5430,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"3e435febc47fa0279e95117b3a0e4d1c","sha1":"1360257b4f28688153197408c38cc227586eb565","sha256":"aa22f551320833888fe4351cace4399dede55e35dddfb736d450d1bd969f1eab","sha512":"64e42ad99b31eb8ee128854347b5f9df38326526f93987da2c9179c7278fd5c50379578212501518a088fa3743591e9b279a448231d4129d574ade71aef37e9a","ssdeep":"96:17YYYYYbx91Jxkld2e0oQl0r3PWnYl39sji1OZuFQjM7fKRVjqqqqqqqqqqqqqqq:1C9922ecl0r3PGYl395+E0jqqqqqqqqO","tlshash":"bab1836c86c7826fd5b85bf04217433ac4b0ad5b7568780760db32ae72787228ca7c0f","first_seen":"2025-12-01T12:02:43.074081Z","last_seen":"2026-03-02T14:35:52.746305Z","times_seen":5,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:17.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 182805\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:17 GMT\r\netag: \"2ca15-689d6a98-5f02bb3;;;\"\r\nlast-modified: Thu, 14 Aug 2025 04:48:24 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K5DrGlMWdUyyOtYgy%2BZtdxSpOzldxdikL62uXSPI0JPty5Yrpa%2FfPLLs3B4WniupvaRmEv%2BX3BCn10o5HcacaG3DGoV2rPSkskWXEAkFcDLPABfgRVZF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6120875e8f5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":182805,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"b7b88de19bd38525a92c03fe977823e1","sha1":"b885dbeb13662598d396919b7896c66f44c9679b","sha256":"f481b0154f844d92edfdb59235c2555410c20e79c99d2ea7795b2ee8e7a77f0f","sha512":"15da2d3e1c2bb0799cd9ebc44d9a6a84981d26a4da41ca60441664d2b9033046a6c7e2bdba41035418affdf6d66b47164bf6a286edfe3796b3569823d223ee28","ssdeep":"3072:DVKxk/3aQ0lbL8aPCUsi0PFxligwpW4axHX3G7H3BgoQKHyn422m4ZtAMCsD5Mo:DVE+3UJLnCUsi0d/RxHQRprSn4jnZtAE","tlshash":"c70422595fd4ab21e5779112b23ae2acb9b4e52d267c021bd2c3572ef89df44301023f","first_seen":"2026-01-06T07:53:06.805129Z","last_seen":"2026-03-27T16:40:09.185749Z","times_seen":3,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/vendor/bs-custom-file-input/1.3.4/bs-custom-file-input.js","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/vendor/bs-custom-file-input/1.3.4/bs-custom-file-input.js HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1321\r\netag: \"1391-1dc09d84-5f02d12;br\"\r\nlast-modified: Sat, 26 Oct 1985 08:15:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3e1D4vgb2qU%2FlVKyH7m8YXEzncs5jM7fbUY%2FK11UhSKXyp17Xgpo8R499CEveq4%2BCUL5LfYT3vBPFVJfZD9jLmbVyUlb3yJZ9bc2%2Fs7F9EwWsXylmWFz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6120824e9f5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5009,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"bf7b32d2c33b293644c4e93290507b11","sha1":"41808c13924954c9fffd84fbe7ae2c6c5ddf9205","sha256":"16e21d998428f592b1e5eba951aafff03c6c33c40bcdff115fb68aaa16e541ba","sha512":"4e4aaf06dc5f01981389137d5eea21fdd928c0b21cb94a7804a1d10ba04520da687f1c0368aebcdc0fd7a8b6651ad19e17ef5fdbebc1b2cea13fdd44689e43ef","ssdeep":"96:gykKyXOBC5Mhbx3Gvan8DXbp2pVancHip+Gk1WeWG9OGN3Y0yWGGapIR:gykK3BBMangdcHeWoCdUHIR","tlshash":"09a120983ef940767453ba7e97cf5080e666c48b040cea407a6cd9489fd091817f9ffa","first_seen":"2025-06-25T05:24:59.08187Z","last_seen":"2026-03-27T16:40:09.241865Z","times_seen":8,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/page.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 15:45:18 GMT","end":"Wed, 20 May 2026 16:45:08 GMT"},"fingerprint":{"sha1":"E3:E6:90:64:B1:24:43:EC:4D:21:14:86:2B:C8:91:2E:6F:C9:85:A4","sha256":"40:DD:88:49:48:EA:3F:06:89:4C:09:F9:57:FC:99:B8:FA:ED:E3:FA:79:6D:FA:28:0C:4A:85:EC:18:B4:A6:82"}}},"request":{"raw":"GET /menu/page.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400, stale-while-revalidate=30, public\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TZxZ2ChI1X9Y7R1qbFBbQ5LjbFgLU5MIKA8GIjNH3UwFeBWPEN27AkAFv9yGhf%2B6xW55KeDwNIZwuMl6X1mjMqM2GY28mg5tCAQhB33p2uLbnBIw%2BCQtfGD3bsWx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ba58662c7d87649cc6c58ffa655758af\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 445\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d612082ce7dea57-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3457,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3457), with no line terminators","md5":"096748c105fcef34c221a4931699bb13","sha1":"24e8582becb232f4a0cc9c009cf6478d7210cc18","sha256":"fdc19178ffaef3c25f667e332a6b3a832a2d433196e269e62705b32635cc4535","sha512":"7134e982336d3dc9ffe788f9849ba220d456897ef23165d040da5fe84398464e94ae15f24090a49164af67964f3969902874a64b4750de2b98d0f21807a57e96","ssdeep":"","tlshash":"2061c84f774ef8368e5735b6c4afb61ea223235d98548400c914d8dc8abcdc7116fa79","first_seen":"2026-02-12T07:28:51.868975Z","last_seen":"2026-04-04T12:54:29.845183Z","times_seen":8489,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":34,"connect":8,"send":0,"wait":20,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/dzen.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/dzen.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 392\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"188-650b8e92-5f02bd2;;;\"\r\nlast-modified: Thu, 21 Sep 2023 00:30:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2BC%2BFw9PR34U1xk2c4iKIVBDv23Yoi8DhDWLR9OTGVyF79sdk%2Fp7XwfjAqHvOg2HU4C2aZ%2FRwdEzy7B2ketnFmLKMWl13oDuOEDhIW7Eg9orq16HyOiC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081cd915864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":392,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"e4564fd881413f005b19986e355a3c74","sha1":"d030d25769f933b39f1df22888c2cfe6dc2f6fd1","sha256":"e1faeb1964e187abb0445beda83c28dd91e8aaa24b50e9b6b9c48f473feff81f","sha512":"35e67621e6d7a8b96392779024564a59bcd3bb2d4bf56e53fb5d5c8f9cf9f94975ba8a4e8c3c9215a675df37f9c12090913af5a59e592b313cd941955cd8c2b7","ssdeep":"","tlshash":"70e0f1c57367e1d1aad0402c011ae4b98c30040081f71e9f040216a3d36f98d32ec06a","first_seen":"2024-12-03T08:45:09.231746Z","last_seen":"2026-03-27T16:40:09.238421Z","times_seen":4,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/googlephotos.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/googlephotos.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 465\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"1d1-610821be-5f02bf0;;;\"\r\nlast-modified: Mon, 02 Aug 2021 16:47:58 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HRPDjcWdDj8jI8yy6%2B5ah5iQOkfpPmmX0RMTEUjkEwct%2By%2BbKzYaHlhxfki8zYsNNQtEca8DxY%2BlJy%2FhsfOgzYtJmXUnL2pr8Gf54woke67%2FxYz%2FIVoI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081ddb05864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":465,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"ee027154d9dbfd21a5b4cbb69a6682e7","sha1":"66010fb71f352084e5e989c0436c5980cdd6419a","sha256":"ebdd535223b3735d3a9c9955efb8f192e0aa714042f3c480c1fb6d293b7755be","sha512":"1a507f06c69027703a6490996c62f9ad0269c5ced6933040872b2a74858684b5f1feb8fc0e0dd2f0232741f7adb3e1b67426c707be0c6cfff5aa800173475710","ssdeep":"","tlshash":"74f023c13b90ca389d8ebc224c514058e0a30dec58f18b5c490cc4af787aa65a3d4a4b","first_seen":"2026-01-06T07:53:06.867171Z","last_seen":"2026-03-27T16:40:09.255073Z","times_seen":3,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/administrator/ajax/public/","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"POST /administrator/ajax/public/ HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 26\r\nOrigin: https://vplayer.fairuseonly.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":26,"data":"action=getLoadBalancerList"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 96\r\nx-robots-tag: none\r\ncache-control: no-cache, no-store, no-transform, must-revalidate\r\naccess-control-allow-origin: https://vplayer.fairuseonly.xyz\r\naccess-control-allow-headers: Range\r\naccess-control-expose-headers: Content-Length, Content-Range, Accept-Ranges\r\nx-powered-by: GDPlayer.to\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D%2Beh2oGM1%2BeO2vNsED5h%2F7KtJQSjj8bHgoCvG3y7LuzU27Zy%2BG%2BMA9OELClFd%2F%2BSqkDzzEhiPy9pRwoJT0Nn4f%2B6lJ2WY8XWFHMddj0nmvgE0ZEClp2L\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6120849a245864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"027f768ab86dd582f58cc2b02b5c10c1","sha1":"e014f8bba04e639e3a29a589810480a6461bcd72","sha256":"8b1a5b638dbd624e0cb31bd283c8b55cd3aa2a7640a947b602a05322838fd143","sha512":"44f5236eac8c9bcc3b1d69a571f267d2a10a1d903148ebcb566a50037c3f88d70a9ca93362d9ed9738947fbcd10d4aaf8d8d3665facd91dc784603b363bb9fc0","ssdeep":"","tlshash":"8eb0118e23020c2c03ab0a0baa0002b2aae088aa038880800a0ca0082382088223ff80","first_seen":"2026-01-06T07:53:06.815531Z","last_seen":"2026-03-27T16:40:09.203116Z","times_seen":3,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/vendor/bootstrap-sweetalert/1.0.1/sweetalert.css","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/vendor/bootstrap-sweetalert/1.0.1/sweetalert.css HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: text/css\r\ncontent-length: 2244\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"32fb-5727c4bc-5f02d02;br\"\r\nlast-modified: Mon, 02 May 2016 21:21:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lP8FC4JSUpneZmnP%2FWux7psAXIRdBZMHVsIQ2n2ItCx0ufDqgGuDq6lMD0Twev0lQLkVhhpiwsHNthQpZqmxGNg%2FkFk1Mpt%2FKxOnKNBC5RlGLJJndDcW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6120819d2b5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":13051,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0862d17907b9cc4e4374b540690c0dd6","sha1":"0eb540f9a6eda209bf993d67a70df31cde7f2486","sha256":"67c4d6f91122526f73490306647e1b7d98b9d9526032a11309b3c5946441d4ff","sha512":"7fc80dfc885f23ed04f4573f2cab6356ae32c1f85801578c18ab040b30d41dc149e6d795c2f293aa2ce6fb96bce0520d85fae076f8d7f211096de9b68a8d624c","ssdeep":"384:K8t7DgOgFB9FstFKRF0PvFWFmwHH3CX1YtqemnERpazA5:fgOgFB9FOFKRF0PvFWF61YtjmnEnazA5","tlshash":"2a4233eb2df41648e76b835452de8f68633c9083691bec7eb7c010ae8f805d9519a752","first_seen":"2023-04-17T22:27:10Z","last_seen":"2026-04-04T05:25:58.695906Z","times_seen":265,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/vendor/font-awesome/6.7.2/css/all.css","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/vendor/font-awesome/6.7.2/css/all.css HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: text/css\r\ncontent-length: 22003\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"19f9a-675c499c-5f02d1d;br\"\r\nlast-modified: Fri, 13 Dec 2024 14:50:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D8MSi7EmPL9Dcyu4IwqTFaj3byngk63jTdyDZ4iHA0muLBt8L9jFMsk8jQOkHXkJ0dpGT2ecNDpaQPL4oYXxmFRkXJH4MWljD700XKbc06w7DRosJKa5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081ad415864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":106394,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text","md5":"088a3c770cec8dbe419f555d6e946f0a","sha1":"d5834f5a36b052d3205a9c54694e20c9a8f855c7","sha256":"05e004a9125ff6d5d4882a2936de99e7817002714322c7359641c00b66f781c8","sha512":"1a665843d48a4e739e6b4df44db89ab7463e8e19d82c8a6c1807ba4139d3a22f212369cd6d53044c778ae309b832e60c41dadcdfcc7eb17efbfa4543d3578db1","ssdeep":"1536:/+mYmRmJmprmymymAoJ+EW1jAEsLy09Hck7fI7lgY3RT5LC33bHX0fwCceQXKIoU:fY+EW899HxjhpWFcUUOL+JESOHA","tlshash":"cda32bbb61f3156a900121233547dd85b73a3b987d8f4ca82dc1ac19fd9ab5c325bf22","first_seen":"2025-01-21T07:00:57.533426Z","last_seen":"2026-04-04T12:56:37.180497Z","times_seen":312,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/fileupload.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/fileupload.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 413\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"19d-66f64764-5f02be5;;;\"\r\nlast-modified: Fri, 27 Sep 2024 05:49:24 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TrjTWJBIyE4Kibq8IjiO%2FhDo4Rm17S976TjklCUcg78cyiz5YmhVgwSaF%2FR7Gw21Ik%2B9R6O%2FtQuxcy5eeuX8dxhQNT64eVNi3XB33UYfbVhVWEJWD5uF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081bd5c5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":413,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"6360ec634264d4c7e9660876144339dd","sha1":"2988a297f464f2932af63aa7ed7204cea36eb346","sha256":"93e63380f543094b8ab416ea1fbbb18357e28cf2c4ade9f2e0eb916d7ed23729","sha512":"19edf1794d1d8dbfd37d8fe849e9c50652fb55e3b8ddb61b95a39dbf0b099d93e02c4040a4cdbf96c9c051931275eb32e79be1e17a68a38c913b8da6f2846657","ssdeep":"","tlshash":"fee0ab5a24b39c1858b693306a8548c798702932a5846608de09aa632a03a3fe4b4783","first_seen":"2026-01-06T07:53:06.830154Z","last_seen":"2026-03-27T16:40:09.262665Z","times_seen":3,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/rumble.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/rumble.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 379\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"17b-6108231e-5f02c15;;;\"\r\nlast-modified: Mon, 02 Aug 2021 16:53:50 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FSaMLg3v7f1iYnpCnI8OtbgMv8imuYmTco8%2FlkYnA8Dt%2BTY6EKHqsJXXtCEvfk6uSKXKrARgMPk6%2Fy9rCkrJ0b9ycofpf4WP7rUoVyLDLNbUeLITs8bY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081fded5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":379,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"056d2c3df4dcd7313a2d3163007c103f","sha1":"7a7ac98cd49f6c5a0a6304aa309a9cc44e5659d3","sha256":"5f83c7075b2a7f4b0a3d3be0e567031dc393536c7602a5670b50796249f8c9d8","sha512":"c45faf6dfa531df42c1f80fd37f2c3e2dc1ef65c3005e1336806478d9ba6b5ee3b330d0dc11bf248ba5e93ff8266fcea1b13a23381d01d6e83b5f67adbdd4825","ssdeep":"","tlshash":"80e061b1aacd684cc46600d705c14453fdf05d95559c515a065d975116cc70ba298a2e","first_seen":"2026-01-06T07:53:06.90995Z","last_seen":"2026-03-27T16:40:09.279382Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/streamtape.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/streamtape.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 536\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"218-61082380-5f02c25;;;\"\r\nlast-modified: Mon, 02 Aug 2021 16:55:28 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J%2BUi%2Fz31z7tgjbJci%2Bswir%2FunxRUL8z%2BZ9B7YvHj0ytH4fbReOpsms2r3uwC2uKEEybAQKmMdpK5S4AHoFPGXLZRfWX3z4e3Z4jvaVJgHSmq4t9TG4fu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081fe015864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":536,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"85452582d5c6e891e8dc4e7680803292","sha1":"46697daafc5d82fbb0d24faea3670e6efa2eeff6","sha256":"3107c592a5763dafdce0d24c1ec5b459c5a5b5f4ce46daa57e7c1b67bc90d9b8","sha512":"bcc69f3efe0533f8fbb728dc01746d1e1503019696e69d5b3b15419b0812e2fb8385762ca13c77afbf5a3b3a0ee1ce3521fe117389723b910c9548fcd9fb834d","ssdeep":"","tlshash":"45f090803f660cbf8356042b895302bc882501d6ec886527929bcc782ea08a9cc48adb","first_seen":"2026-01-06T07:53:06.882433Z","last_seen":"2026-03-27T16:40:09.20645Z","times_seen":3,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/vidoza.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/vidoza.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 541\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"21d-610823c0-5f02c49;;;\"\r\nlast-modified: Mon, 02 Aug 2021 16:56:32 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bG4dDXUDS4reYjdH7T2w%2BD9Fd6zn83se2LC%2F4MUS9rCUzHdWOuC8TlWXy8HCmFCMs2XUs3E6WiavTkqKgCXeZuIxJadIpD2OHhiGOGr%2FvYFTkF6LsscH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6120821e405864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":541,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"9fa8b65b215f3ba19abdff1fab6f9950","sha1":"9ee4c2263803906229b98ff4ebe1c24308787a49","sha256":"de30ead974f3ad2e683aee4705c8952913787a9ec33630973737a48ff4f895c7","sha512":"67678bdaf7e7e86de46614d22638c6c7b40e702a7d102509c47979e69e6fcf20a83a953daba8f67fac886b623aba61a46f5c775bd8ff1985fe76cc7e84fdb745","ssdeep":"","tlshash":"4ff09098919739b6f0fdc7bb40cba300d0e3a86ab0687d0c4d84ae92813b505a029e72","first_seen":"2024-08-20T08:34:33.733559Z","last_seen":"2026-03-27T16:40:09.280011Z","times_seen":4,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/vendor/select2-bootstrap4-theme/1.5.2/select2-bootstrap4.css","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/vendor/select2-bootstrap4-theme/1.5.2/select2-bootstrap4.css HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: text/css\r\ncontent-length: 1280\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"1eff-67686422-5f0378a;br\"\r\nlast-modified: Sun, 22 Dec 2024 19:10:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8uAoWelp%2B9tGS%2BoR6Zmiz1n8pBCQoef9Nw4SONq9rKc7ER%2Bxjuze4GkZZy54qYRU7b8MsZ0EX2x7lYQnWVKrYFGUymxQtnS3UVnPETvTfROdqAKnbbnR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6120819d2f5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7935,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0796c21f82d7cf7754632a517021f991","sha1":"dc1180af4f3021d9b023b184611079f9f8cd3b7b","sha256":"744e6d2b5bd55583e303bddfc8b7177a4cb20d8c95c7340e1024cb29f0d62db7","sha512":"c481ee89efe072a8cbc51eec419b589dc741ca6a7c847ef4b767aaff9ae34be5b7cb8b42ac2fe727738a78056b41af5fc31beeecda7e0efafb0520ea21327b9d","ssdeep":"96:wJthYv9Vrcq0OVAmEmS06RKal7lUguSKYLKJCveEWZVLEVB:wJthYVVrcq0OVAmEmul7lUgbJHvMLEVB","tlshash":"e5f1be2d9f8e29b1f47e485fadfab0801758880b8444cbde77cea100cfd6a4465e755b","first_seen":"2026-01-06T07:53:06.84597Z","last_seen":"2026-03-27T16:40:09.272115Z","times_seen":3,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/iceyfile.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/iceyfile.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 440\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"1b8-656ae728-5f02bf4;;;\"\r\nlast-modified: Sat, 02 Dec 2023 08:13:28 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TPy%2BadtqplLKcCmeTpZFjxH6SCiegFav7UAhApJ8XQ8dnkyBhJGHp%2FWkZ3duQi3TYKS2dMdflItFDgfDFvaC2C0MA5pV9tUBv2G1NNq8k7rkVme8vio%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081ddbb5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":440,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"660e263edf28ad64c5de0721b52d24e4","sha1":"fad57f6a454f16527d2b5e3659de93c0b7d9dc7e","sha256":"bff8f4d949b7052f34378f50d898b016bd54f4a2b0cdc707bc34e54b4cd7c9e7","sha512":"9379c34f7de67f0f5e8a9a1a325381fd4bdb8d44f412eed743487538289d1c6b09a8e4db5473272cec3fa563bceee5fb8447095009b0453be7bc9b36723d4948","ssdeep":"","tlshash":"85f07ddf39901c174157446ac904ca4e9863092c5d6cb8c4d6562658348aebc31cd753","first_seen":"2025-02-21T07:00:08.195749Z","last_seen":"2026-03-30T10:06:44.491243Z","times_seen":10,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/facebook.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 15:45:18 GMT","end":"Wed, 20 May 2026 16:45:08 GMT"},"fingerprint":{"sha1":"E3:E6:90:64:B1:24:43:EC:4D:21:14:86:2B:C8:91:2E:6F:C9:85:A4","sha256":"40:DD:88:49:48:EA:3F:06:89:4C:09:F9:57:FC:99:B8:FA:ED:E3:FA:79:6D:FA:28:0C:4A:85:EC:18:B4:A6:82"}}},"request":{"raw":"GET /menu/svg/icons/facebook.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vplayer.fairuseonly.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.addtoany.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000, stale-while-revalidate=30, public\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RKAzXmQ3HqWkO1TQaYxasMUwyztmXG5eMmkFtTP1%2BgYxR79XWPfm14eH92KLNkF1P6Dd8aQZ2eKxhSLzrYv%2BwItWmG2PPtCFR5giYSgQJ%2FJS\"}]}\r\netag: W/\"68925fa8e347041c6006837e73c518bc\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9d6120853811f375-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":429,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (429), with no line terminators","md5":"014bcc757e484e12e3aea6c9d768fd4b","sha1":"4c17157d0012f8002e4e6cf77c5f4a9747792cf4","sha256":"4b475960843a5619b907af1f0a89e3136bd5e6a4a700ec78cb417f302647cf49","sha512":"b00fab0ce2e56b56c18e0dc54ac3329d77fc18096e63bc2aef34342770f40dac91c10f7a8a9db1dcc5ce42fbafe637fcb1fdd51994ef937aa00923375476d467","ssdeep":"","tlshash":"dae0ab951236d9864d51093ec71fa48fb3b0b67fa1d8298006bc80b289d20fd3e0ba03","first_seen":"2024-04-12T16:11:44Z","last_seen":"2026-04-04T12:49:46.069421Z","times_seen":16127,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/vimeo.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/vimeo.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 470\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"1d6-610823c8-5f02c4d;;;\"\r\nlast-modified: Mon, 02 Aug 2021 16:56:40 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wQJOZmIy4i%2BAMjS0FiTFH32jimGmyC%2F699d0BdoGygKyvUz%2Bvj7oum1ORec1p%2BkE2Vvv2vZjq%2FN8qbwvCt4UI5uFHdRjGOmuL%2FhSul8GGilEsWy4iC4o\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6120821e445864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":470,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"62a97f56c66e4838d61c9d5caba70375","sha1":"148d6a8be59259a12442264be8ba5a0777b9509e","sha256":"efb4ae3b08f2de6953534ee1c9d5359014bf6860c0c6a1dbe0429059f5255218","sha512":"3b556d903853231f8a60dcd15fff6d9d55821f1e13c28ff4148e37f2286980071d486ecb930987d6df18187088b5d2e85b4c09b7f36427d619deed44bbb026e9","ssdeep":"","tlshash":"27f05481b3f0289bcfd80051ea420550c92281587b6561602a85d0e7211ed31df0355b","first_seen":"2026-01-06T07:53:06.897477Z","last_seen":"2026-03-27T16:40:09.216296Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/vendor/jquery/3.7.1/jquery.min.js","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/vendor/jquery/3.7.1/jquery.min.js HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 29595\r\netag: \"155ed-676857ea-5f03614;br\"\r\nlast-modified: Sun, 22 Dec 2024 18:18:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=va4nQYg2dI3NVdrG5X6U9HmKSnwsDuhCEfVjRLEN2l72yfRGg3CBmzLbvRkWYpxKMMBRstKWl4q5LbYwNe%2BibtVweoIhkDypyKUMt7dAKSiupI782K9e\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081bd4e5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-04-04T12:43:23.514643Z","times_seen":136280,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/krakenfiles.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/krakenfiles.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 350\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"15e-64126142-5f02bf7;;;\"\r\nlast-modified: Thu, 16 Mar 2023 00:22:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JbM%2BO%2BhWdQqpuCMGiac1ON7dZgDkuYzbCo2Sz4V7xibtUkjmQ0xLjgK6OlVMet9rfOYHw1I2Z7y8kPZJflAQ957VLgoZr3SCg00D7pEKoljxRcblkfJr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081ddc15864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":350,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 13, 8-bit colormap, non-interlaced","md5":"4d6a90111d01f10f92fa5d83f1771770","sha1":"98a3c3b82eebb73aeea04a0baa5733b8e9b6b37f","sha256":"7b8da698c2730de8fc4a54840c8076308beeae5777c679d2e8734d7054c9e502","sha512":"1fea7a329d2393ccd91c65abb159d11ffe7fbd77604be4a4e28cdb5d66a24cfcd461674bd66c770f7ff5c7db6bec5ea2aeba989bc176d7f3d395d1a7a4f3018d","ssdeep":"","tlshash":"f6e0c050e2557c55caf84f9385a23d21fc313466c514d727064489100ba7196c49e137","first_seen":"2026-01-06T07:53:06.795645Z","last_seen":"2026-03-27T16:40:09.248529Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/lulustream.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/lulustream.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 228\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"e4-64cb165a-5f02bfa;;;\"\r\nlast-modified: Thu, 03 Aug 2023 02:52:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7mv%2F%2FKj76mEgz%2FHRBsjWxf96XGjp0OL3l6kKstS9anjt%2B60aOd43uBtiN3e0rjppU%2BgWZ3dGnfe68pSYX%2FdFpsBrDEqtehQwktKGaSzB%2FSr%2FTDtbWA4I\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081ddc55864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"ef406befed39ece510904f589b6efbd2","sha1":"85611d59799b5c87d062873278f1f22cd989c183","sha256":"0620a244e07c55930b739a2c28c81fa16f720ad82d7f61e404a976bf5838e336","sha512":"23672191d3bfd44e9ad156c65d9d74bc97663ab789ddde3c88e8ca651badc4f34d41c89d53f8a716a2da6a718e81e835c4730e64badef7b49a945cc11cbe8770","ssdeep":"","tlshash":"b2d023c519502f35d1d5222247614555fd2d3c20bd351135052a493418b0c4c65f46d3","first_seen":"2025-12-06T11:13:28.345126Z","last_seen":"2026-03-27T16:40:09.199131Z","times_seen":4,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/vidmoly.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/vidmoly.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 403\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"193-643353aa-5f02c48;;;\"\r\nlast-modified: Mon, 10 Apr 2023 00:09:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qbv2XWp%2BGNQDSyZcIDJnLZvWegQmBhz6QmH%2FprTXfSOUHnXhYbIQ06jJ1iesZkNMhs000%2Bu9O5lz3Gt8JarqRQubHB8oiox7Bz32mwuSxNJGSU3vNljo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6120821e3b5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":403,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 14 x 16, 8-bit colormap, non-interlaced","md5":"17769426a92ecdc38c489beab999dbda","sha1":"19186445d780a00aa508200306d00e2317f5393e","sha256":"c6f1e856eed764ad77158960d1bda3d9c1389f850e0da63d83512362bc0a47cb","sha512":"39c0db1347f89972bf99a99c0f67e36fa77e71c6b64bb458512e2c4784e4e5f2d8b3c1fee2df419b2e84a35c2b554bca83b42263e18486fd65b0169afa9f60d2","ssdeep":"","tlshash":"d8e0f1fd7ad0e80c0b3a039fd4bd45e0c002d305482c1d250e4ad53cd5853fd5dc0185","first_seen":"2024-08-20T08:34:33.723175Z","last_seen":"2026-03-27T16:40:09.228995Z","times_seen":5,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/telegram.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 15:45:18 GMT","end":"Wed, 20 May 2026 16:45:08 GMT"},"fingerprint":{"sha1":"E3:E6:90:64:B1:24:43:EC:4D:21:14:86:2B:C8:91:2E:6F:C9:85:A4","sha256":"40:DD:88:49:48:EA:3F:06:89:4C:09:F9:57:FC:99:B8:FA:ED:E3:FA:79:6D:FA:28:0C:4A:85:EC:18:B4:A6:82"}}},"request":{"raw":"GET /menu/svg/icons/telegram.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vplayer.fairuseonly.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.addtoany.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000, stale-while-revalidate=30, public\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3S3PLYx7zmY9gX%2FPvNQXntPI7Z7JU6QMQ17hZaW0ONreWEI%2BiNha33wK1yMq5kVk%2BUbuH%2BLAQm9GqloaewGP8qHzguKCl7ZEgFIaJG6IYYuo\"}]}\r\netag: W/\"fb47b4f6548b6499923a1beed7472419\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9d6120855869f375-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":360,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (360), with no line terminators","md5":"48f25c508c92c3601cf047609318001f","sha1":"59117e825084c63a0dda48edec82c14a60e16f23","sha256":"6415561e892cf9d614e7179f71353af4ceadfd641d71c42fe54c9420eb0d0138","sha512":"32ca9e672cb26c5cc9370d32a2739ad99a933a700250e310955b68ca4a974964f22095179d1a56f8f57c160ee6ab4d3ff659b4bba5838879472289b06bf53a42","ssdeep":"","tlshash":"66e02077611084814c2a54bbda1e614f5434f069529d65d3436ac4f754d726f5c12d8b","first_seen":"2023-03-08T15:33:09Z","last_seen":"2026-04-04T12:49:46.00916Z","times_seen":10155,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/cyberfile.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/cyberfile.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 639\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"27f-656ae7c0-5f02bc5;;;\"\r\nlast-modified: Sat, 02 Dec 2023 08:16:00 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9G6DoM2a1le2mwpzVJliC9kpW9uN7lgZFwhL4fYKrlp8ObTj1BasRu1b6Y90jhLWLVZv6PwU1Ll%2BX2%2FHRmKaH%2FzE3szPgug%2BGLXn74OSM9gHaiKczY31\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081cd775864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":639,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"202c49003f6bdf782fa0131d406b3753","sha1":"a23d48d4af6d51ddff713d98ebfcb243e9e9d843","sha256":"41d7ccec997e513b060bc091799d1d0a4562a800b950ff222d23fbae6f6693e5","sha512":"c7f497da0e3f371406e3938ecd177d91e7b24612ca6da6b4f798ebdf75dc283a7854254742a7ad63505647b386b053cfde32ac67120f50a3958f6a1b3087093f","ssdeep":"","tlshash":"6af06806fb684731d6a9e773255a7800d1f15e30420162cf93dfcb05e21372258e13d2","first_seen":"2026-01-06T07:53:06.776412Z","last_seen":"2026-03-27T16:40:09.220304Z","times_seen":3,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/filemail.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/filemail.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 461\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"1cd-656acd74-5f02be0;;;\"\r\nlast-modified: Sat, 02 Dec 2023 06:23:48 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3lOTjFF2lQ7Rwxr0j0muUuxjaHDIjlTXmQE4%2F5PDSJPBWSGrmMMB130mfrdKlrW0RI%2F%2Bzxum3PJ17fnxZd4R6lJB630ARAteBXccbHl8NOnrxuZ2rbIX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081cd995864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":461,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"91c2c251b319ab35502857b58c1ad561","sha1":"e50e95f0191df507a5c6697cb5693d39f54f163f","sha256":"262836513f7d235798d35469084fe4438382a2b378a5e64b839a00e6a9f7003c","sha512":"06ba76025e5c1ffc9c90197e475067779cee8352a52a3524c973f773c8eabeaa2c7baa862d607c580a29de659e780ccf6cdca1ac0afaab9a2e71bf7045f9a663","ssdeep":"","tlshash":"97f05cc97aa02a38d472221bc82e82e0b83e03350b208c98e248d1fc2b04b078ba1634","first_seen":"2026-01-06T07:53:06.887477Z","last_seen":"2026-03-27T16:40:09.196375Z","times_seen":3,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/indishare.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/indishare.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 801\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"321-61082284-5f02bf5;;;\"\r\nlast-modified: Mon, 02 Aug 2021 16:51:16 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cUemEFo2DjA%2FwzWSwLlx6upwSkw9ao8uCKK2dGD8db5Op8o9ShPR21iAaiPu1GXpMs5A4EIBtu%2FeB8JFidDY93INOUbnWgsxGBGtXBX35RqG1qpd39n4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081ddbe5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":801,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"49090ac30dbf776604e6e4529cc8471b","sha1":"7f360f07f6e6877d066811eec25373cae2064003","sha256":"3ca8b34822a08320b1fcf976a662475709f5228e6ec8243e0683342c697cfb4d","sha512":"9c693a4db233e4154cf95f25640c38d8cff6149061fce5b94cdf3cb4beb515c23db963b089b4b64f89562ad4bf796164f2c2b6b22e58d1ece502b3be93b7989d","ssdeep":"","tlshash":"aa01c58b25d4713418e29dd848164955f42a876ded5803cce2ce08a4a3b0f8620707f0","first_seen":"2026-01-06T07:53:06.820586Z","last_seen":"2026-03-27T16:40:09.245907Z","times_seen":3,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/turboviplay.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/turboviplay.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 400\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"190-654500bc-5f02c2d;;;\"\r\nlast-modified: Fri, 03 Nov 2023 14:16:28 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qW7%2Fchf4ubWgvL1uDq4JXSosWsXlpTg1T9ezIwuQBhe0RiR9u8%2FvJtUSg8yDdFT0sX0qCUBMssWhOFDPO52PUN0j6HXJeqmZXSnJZfUht%2BJkQZm65dLX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6120820e1f5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":400,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"e6538140e6fda4b6c3e97bcf297e54c5","sha1":"059c3e7f1d3a320ee67a4a0d68731d3e5e441934","sha256":"6c811bb1880f5e4250d8a2502deab38a195e22a1c75555ccc46ba1c95d8b0f2d","sha512":"02ff93a35019829a6c3845f81e8e02e9a47abc0ea35f86b41d49cdf8b18a8c801e047107187b1817b80ce3339722416c39aaa7fe1f3ac3595f32ff34646e1e8d","ssdeep":"","tlshash":"dfe0817163ccaf26c2c24842020938b2880aacffdbc38dcf2f00c268605090c1300095","first_seen":"2026-01-06T07:53:06.809694Z","last_seen":"2026-03-27T16:40:09.276671Z","times_seen":3,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/vendor/pwacompat/2.0.17/pwacompat.min.js","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/vendor/pwacompat/2.0.17/pwacompat.min.js HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2787\r\netag: \"180a-5f476fa8-5f03789;br\"\r\nlast-modified: Thu, 27 Aug 2020 08:32:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6a97XQh7eZ7YN2%2BkUlBtksvfanWdjtXchKlEsoBOaonjf%2FCRRZBCCKAFLThOrLJ35vtqiSBrwdrGWytVCO5p%2Fe8sCALPqkE6jxjSjIdga4FGnC008FNI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6120823e805864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":6154,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (517)","md5":"048d919591a36ad00b235a84bffd0f35","sha1":"e19d08f4238bfcb58706a0daccb221ddc699ac8c","sha256":"42689f1bdb72d9ca37efad650562702f929d0ce749e2c16343f50b138683d7c5","sha512":"e0383d22ad3f54cf805b8b5f33efcb2cb5fe628a6e768ed212c3327d32731bfc7b6eb290f8d00c10bae1039d7b700db0155387a349be9f4e97582744ef442c7b","ssdeep":"96:89MYpgCIxM4vw734O750YLk7MkNsnyI6+CHp8wegYmBnAoXQ2paUeGMNyLb9mV7:OJKSd734O76YgYDnyIoeMn/XQEaVGQg2","tlshash":"a5c1e8d971a33016172321bfd0afc14eb13a2847ad8549a09156d8c07d75abd137ff9e","first_seen":"2023-03-07T14:43:12Z","last_seen":"2026-04-04T05:56:56.102972Z","times_seen":235,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/apple-touch-icon-152x152.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/apple-touch-icon-152x152.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 92799\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"16a7f-689d6a98-5f02ba7;;;\"\r\nlast-modified: Thu, 14 Aug 2025 04:48:24 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k6w1N8GvnRf0KUflFoCT5l1ebL7pTCSXmCnrGCEZOVjQCVbVuUtC1xAxQAPcDuT9jk7OlAHM3i0Tgzg%2FGcF1nLlX6f5y74l1DIwIP6l1bn0Qd7VIyGM3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612085bbee5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":92799,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 152 x 152, 8-bit/color RGBA, non-interlaced","md5":"ece6f05707734ac2fd8a6cea7339dc0f","sha1":"9a6bf5ad7041524529cd5fa30ae7c5bede7ebaa8","sha256":"fe7b41cc54f860819cb5c53c0713b2ceafaba45674c070662dbde518c30467bf","sha512":"a6e0319ea0bd0c2aec682c42e7b53c7725209bacf4603cc354cafc557a110e0d428fd59db82b52dc26e5f8534f1c98ca3bd60e0172f50c0ca96fee60f43bdea6","ssdeep":"1536:FEhudRvVSjxqgWO1Xt/ISnyHzh9XjnzaFyx/myoy4mMVmP/x1PW1TeUIJrhPeA8R:FnR5N1m","tlshash":"20938352bf41ac06c09b5a3a8ab6d7b46335fc0d9a16834334f7de6bbc9a5d30d022d5","first_seen":"2026-03-02T14:35:52.771799Z","last_seen":"2026-03-02T14:35:52.771799Z","times_seen":1,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/filemoon.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/filemoon.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 370\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"172-62e249ba-5f02be1;;;\"\r\nlast-modified: Thu, 28 Jul 2022 08:32:58 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fdqaMLnnjTv92k4EtZFbpajBaa%2B9No9lGkWcID3s5QbgS9S%2BBOyS6FSMIXa1Sln7JpE9ambyis1xYJ4ATFbjWqbtBBP4kazyrqA2mOIi%2BcKZgAtmkePu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081cd9f5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":370,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"1890e941734d87980f46cd0d6b83c3f6","sha1":"999a3546ab4605a3988801f45b77df2df0773e51","sha256":"fa5d0d05df5fde625a3d244297de45ca7d82efd60e89646730e8cffaafac7049","sha512":"7b262771b611e17586ed3aa39034a72a6bd2c12ce2672556c075a15a1351b47b0deb69b971819a72e7bee0d90b62db04ccfdd2f4ea72fbb57fbb1ba40ebe234f","ssdeep":"","tlshash":"42e0f8c093c7383dc00dc9aba3867620883f6f8c8122a67ca11860a7216a8a81112a88","first_seen":"2023-06-02T21:55:34Z","last_seen":"2026-04-03T20:40:39.155784Z","times_seen":323,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/sm.25.html#type=core\u0026event=load","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 15:45:18 GMT","end":"Wed, 20 May 2026 16:45:08 GMT"},"fingerprint":{"sha1":"E3:E6:90:64:B1:24:43:EC:4D:21:14:86:2B:C8:91:2E:6F:C9:85:A4","sha256":"40:DD:88:49:48:EA:3F:06:89:4C:09:F9:57:FC:99:B8:FA:ED:E3:FA:79:6D:FA:28:0C:4A:85:EC:18:B4:A6:82"}}},"request":{"raw":"GET /menu/sm.25.html HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rmoh2is0AVQapdOCg8FppoklTKR0B4OmEyH41PhUJN88zxm16wj70cK7b2%2BtrLYs10bj0knr89T0kCTLVktIah9UzMoE0nroKuheEBEvll4P\"}]}\r\netag: W/\"551efc5187c9f500b4e394155ba03720\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nage: 12619\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d6120846a80ea57-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":716,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (624)","md5":"41b7ed0cbe240173eea85148fcba633e","sha1":"39acd5fe099974486a1c9ba11ba0fe7be6bc97ca","sha256":"274d4116239b63097bb7c16e56e27cbb5a77be20392fb8e2317c0a0235185cad","sha512":"1ee1d21b138a9f55f823b93d809b3bc58453ddfc3b3ee4d00a1010bbd4ec296546277c6777819cfb744c393ba93fe7578b60ccf0259fd17901f4542714d6c06f","ssdeep":"","tlshash":"c701448bf415382d9673172434e93d89d87e93609c402730b28f62e746c47e75b07b95","first_seen":"2024-01-05T10:14:09Z","last_seen":"2026-04-04T12:49:45.965555Z","times_seen":36332,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/terabox.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/terabox.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 301\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"12d-6548a0ee-5f02c2a;;;\"\r\nlast-modified: Mon, 06 Nov 2023 08:16:46 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v5DfAKOuojSgcPNGeEF7mpD3rs3tuJFqZDeGN8xDgcAhgmLX9tg7pVW0gIBFVn5idBTKLQc0Z6iPPkISoEKuEL4eSvLDymA5foCue8NLLi%2F7Bjrhy4iC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081fe0f5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":301,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"aa2456f2f100bf2f39eafd52bc7c9020","sha1":"99bd4633634b4fc11f5a0ee7f06fa3ca4bab12d0","sha256":"b480e9ec2031f69e156b5bd12bbbba9a1ed0cb00cf19e96f134760d822f97c4b","sha512":"e020c078ca1f33b5014f52e2347b7097f9e414747ce07d3da7d76e14e2976dd9c54d92de116bc1925f7df7f7463f42349ec040f0d869839628b8e9b1f082969f","ssdeep":"","tlshash":"94e0e7d7771d5e75f2fe71614e1d4dd0c8526d58652450c70cce54251760704c2c90d7","first_seen":"2026-01-06T07:53:06.832665Z","last_seen":"2026-03-27T16:40:09.274322Z","times_seen":3,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/aparat.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/aparat.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 576\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"240-65713e24-5f02bbd;;;\"\r\nlast-modified: Thu, 07 Dec 2023 03:38:12 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O9O4W2ndmVLkugLCNB9nIWF%2F9GlsT7ogs%2FznKGX2SusFtJiFJ2tICzWwY5SekBOJuo%2BNLUS9YFQNjutw509hpiYae0VLOCZ5XVmq2QKWf4a7NNeyvgcJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081bd685864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":576,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"2ec8d91558ed5292c799d29aa34a19ff","sha1":"dd621d7c654852ab7ea00f4b57b0988fe4e5b072","sha256":"46b3991385a664f71bd2055bc691e22ddc2e722fb70a1f8d478bb5f52b745947","sha512":"6b60437fe552ab3d759ea34271bd952d7fe8a2ac90d75b4617f65af8bac92ec7036b546c1a14d37fc9058ed1e14805a209b264f82f68bb5860ffd58c8c235bd4","ssdeep":"","tlshash":"eaf096526fc37e61864f02672529b56ab03e88fe453e08420045e126fc717856ff9f21","first_seen":"2026-01-06T07:53:06.853552Z","last_seen":"2026-03-27T16:40:09.267164Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/freedl.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/freedl.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 268\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"10c-658285dc-5f02be8;;;\"\r\nlast-modified: Wed, 20 Dec 2023 06:12:44 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0vw%2BjYgVDChh1fmPVdG9rdAdeTyouf05BIWDh2BdBwZzKAYWT2p7JyTDVCiVxEOSitC71NY6SiY60ONaP%2BDt2SC%2BE4XzO7Nf97kJ6LhumsuNRZFZgB6%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081dda95864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":268,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"fd9176128f495f70a6f24fe7c7a53a53","sha1":"cbe74702afcfb627304270df8b7b6c8ffe0dc832","sha256":"a5142373c6051e400242dc421ac7d0f91dd9623288ae8b45c7edf30263bb4356","sha512":"72ca0ab63ac2784a6e68bdd1177bacd53931fc7af0930249d7583a1a225c661b9bf062fc074f930d33fe1d2a64bb61167484ce34989da95a17bf3bacb111cfc2","ssdeep":"","tlshash":"4dd0a77133c02c74d7e71163e5769e5ba82655085d67b581cb0b501520077b89d75a73","first_seen":"2026-01-06T07:53:06.843248Z","last_seen":"2026-03-27T16:40:09.273482Z","times_seen":3,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/streamable.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/streamable.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 636\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"27c-61082336-5f02c1c;;;\"\r\nlast-modified: Mon, 02 Aug 2021 16:54:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9n2gO0BBIvw7ulrxmYF%2FKlUFfbITRHNVeA3QGjRsVE99MFcvveDR%2BYNqREBs4Hh9CzPe1O1T0blAmkMGiH3EeLc35XjHtMPdYLM%2F50wkd6hNj4%2Fp3uVJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081fdfc5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":636,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"dde2a86889a478a75567557cd06babd7","sha1":"a448607ce7590317e0e717870840c91a30235eb2","sha256":"1539496085c25ae02574ac3f38e4f5531d8b9a79d0d8ea61de8591044776c5ba","sha512":"f830a3b1abd311560bf658a646fc880f3afaeee4aaa5e410af949da9c29c91d742b29fb36e8e4a6897c483ae3dcef1d6c61d43690789d0a5a05e5cd399972ee6","ssdeep":"","tlshash":"55f02df3e972a649d07ec9b947a5c024232cacc01ef47e09ec8a2e148218b49a797c52","first_seen":"2026-01-06T07:53:06.912336Z","last_seen":"2026-03-27T16:40:09.225174Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/udrop.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/udrop.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 477\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"1dd-656ae85a-5f02c2f;;;\"\r\nlast-modified: Sat, 02 Dec 2023 08:18:34 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5a086bDU1L%2F0Ng6HFJUP6U9FcZ6gQgz0Qr0OTsSjId906GuEum71xo%2F8YxQUO%2BFsZt3lD2dPQK1p%2BUPE8WdVWmMllvpLr8BvkneeR4KX4VfUTRjeJ891\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6120820e215864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":477,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"9e10ea18df09aa05d3de894a53c92b3a","sha1":"a9cf59aac4a242b17716919506d790a330d711d8","sha256":"beb5371cbc4099a78fb441d7b09fc78c6c463a4ddceb367e6168541984826fb2","sha512":"a37044de84a6e48a9630048dca5966bc8d717409982671da700242c87e8052968a22da31936827f6c15783e1dbe2a89e3749d8333467698b2ba9b0fe7a7d8438","ssdeep":"","tlshash":"8ef0d46c30673d2940bec1ffe7d1d6c3a9b0d19b8017351096559c7e66301481775597","first_seen":"2026-01-06T07:53:06.811283Z","last_seen":"2026-03-27T16:40:09.193672Z","times_seen":3,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/mediacm.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/mediacm.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 569\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"239-65825990-5f02bfc;;;\"\r\nlast-modified: Wed, 20 Dec 2023 03:03:44 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tlz4rCCdrB1%2BN5o9ml2y7hcyizoEXqrtGoJclgkF4yAgXwy2l2SeQ2TRukVakabm5Lhc0Wv87CWKH7opxgeESLISW6Ii7jQEohebLvgFIwhskNfXsSOI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081edc85864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":569,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"b8c2e455f48fc66d27f206a2ef5da7e9","sha1":"443b61e902fcee4ba99398d29f90a062ddcf552b","sha256":"ac1e6a62441d5fdba0efa6c7304e33f6318fef4c46a671518bb68a20d8be5bc4","sha512":"fb52a9ea47ff64617594d5e468b8b048e51a41da0d944acda42aa1fcbf092e5a7335a6c0adc7c508b03ad7fa41fb8b13fed6d5c22400dba0926d29b7dc395e89","ssdeep":"","tlshash":"3ef04753321959998993014131e3e6158d2969f450c00e04491cf5ad77ff7b003f5af7","first_seen":"2024-08-19T21:46:49.158147Z","last_seen":"2026-03-27T16:40:09.258303Z","times_seen":5,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/soundcloud.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/soundcloud.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 354\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"162-6108232e-5f02c1a;;;\"\r\nlast-modified: Mon, 02 Aug 2021 16:54:06 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Av5Xl%2FlUrr5%2F2vsUKROGuDBDOXCAKEUwahKMhwlslzrJO5%2Bl8mKz1nBfwGphJ%2BUR8%2FHure%2F5nE7b7udd6QS98jWcDPaAL7FJ710mKevmE2%2FffnI%2BS3r4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081fdf95864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":354,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced","md5":"9736e1e432cda3884d0bf359621dae7f","sha1":"f6fe2902793d5ec9008fb90865f5bf5ba06d777b","sha256":"7e4ff8c5c06273441866fd9df95b6a2bdea597772b30701b708f740a7cb0355c","sha512":"c013797837567cf1f8b1bb82eca988b5a8528edb63b0f451f9dbccf848a0c0bb659f682fa7d3dd9826b049fd357ab34994989838c75cc0a20f787c942cd7748f","ssdeep":"","tlshash":"3de0c0ca023f2c36c90443aa129d20358d209151093a420db16af69429658bceed8929","first_seen":"2026-01-06T07:53:06.900247Z","last_seen":"2026-03-27T16:40:09.210405Z","times_seen":3,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/voe.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/voe.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 533\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"215-6200fbe4-5f02c52;;;\"\r\nlast-modified: Mon, 07 Feb 2022 11:00:52 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lWWfYWCleRbcUJPYlk%2BjaoUjq4CNZC2L14e9pzucd%2BptYBsOO%2BmrFqi35NnM%2FSLlIrKHgqc6Nh6GP2BVSDZUzQr4WDuYi783qDCjzjX36kc99WJYmwgO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6120821e4b5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":533,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"4a1c219d978909f413ca1b9a39f7523d","sha1":"08859f796b01690ee81a13e4bcc0976f16c473ca","sha256":"dc91f3be29e28fa5aa027f4c3165a5df794424e66c1627b90a204482b470f0be","sha512":"898c1447a0dd59b40541b9720d28b191d01ce9e4e1d1c5e3ccae3e879a2249183fc74e752760f3ae0c16639c9dad6e8b5d00c627bbb4c5965c99aff1ec0aeada","ssdeep":"","tlshash":"fef020bc3323583cddcd9db641f51094a913d88c86c42d3cbec672ec44356a8c9e4036","first_seen":"2023-05-08T15:55:48Z","last_seen":"2026-04-04T08:27:39.53384Z","times_seen":920,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/yadisk.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/yadisk.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 544\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"220-610823d6-5f02c5a;;;\"\r\nlast-modified: Mon, 02 Aug 2021 16:56:54 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xZRA1KQOHzZjpwN6YduKYB%2BcidlaqQgOn0ct4HtS5JP8QhCTjBCdeMswsVKP6onPgUFXtC%2BWFjZD6O3F5K0SkwdHysG8uY46QdgbV9kd%2B3%2FgCeiMg2ZH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6120822e715864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":544,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"cd200861115365f432a6fbd8de11a8f6","sha1":"00b9fa0eb93ac21e7a2b9f20bbe800b923cc9933","sha256":"9c55b2dacb4f4e3ec2edd1afaa03f5ad08bd12084126346187fe839c691d4e9c","sha512":"dbeeaf01a0db01f6bcfe589cec91e012c1982360c47a616f1e265826e133a14a57f8f2036b1a4328eb96389a182c88a0abbbf98a6911942b791016812cc5772e","ssdeep":"","tlshash":"6bf020903bcf88b857cb2c7a9f1245cecc71a10046717eac46657eaf0a055198a6b9b2","first_seen":"2025-11-01T18:20:41.490707Z","last_seen":"2026-03-27T16:40:09.213963Z","times_seen":4,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/vendor/FormData.js","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/vendor/FormData.js HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 342\r\netag: \"2a6-62ff4dea-5f02cc9;br\"\r\nlast-modified: Fri, 19 Aug 2022 08:46:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hzs%2BM8PBPy%2BAba4EBFqGQYGkf%2B%2Fyq9QAE9SP50I7xyUgCcB8hRF2ptJV376L1SqouLsEMfaIrT%2BFn%2BxQJOzkEKY5pc6lPecNpVRqNCCjloHcX3VcDQ6l\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081bd4f5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":678,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (582), with CRLF line terminators","md5":"bf5d6597a2d19f254f8e972f62119e48","sha1":"2f4bde660860dff72898eb6d5fb49f9eac951bfa","sha256":"fff7e53e9d2bab74ebb5d68ac76907ca488aaeacd50a8e63e26b20e5dcb789c2","sha512":"ec25be83844dc32ef86f24a2b890b3911fc75dea52b8fdb48f7169c3e463eba5662809faf4e61344387955795a3f15d3fb11575ad39ecac9975f26be52f86fbc","ssdeep":"","tlshash":"c501cb187aad3511a3a3d13067ebe28a7b39a13c4856119839c9a9c769bc04c7419f94","first_seen":"2026-01-06T07:53:06.87995Z","last_seen":"2026-03-27T16:40:09.272783Z","times_seen":3,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/europeup.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/europeup.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 399\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"18f-66067908-5f02bd9;;;\"\r\nlast-modified: Fri, 29 Mar 2024 08:17:12 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W5lb8a44aBJIQeUY4Ed3uZwZr9aPHsFG0mm23rQSyjxXOl%2BcGktWlNCpLTPrXCGr2ADI0B4vNp7EgBGN3RAtfT0KWBHPX5SdAAJJP86Gyi%2Bz9s8ZF3Pc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081cd925864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":399,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"a5e4378e3a5b32fc868e178b5083a365","sha1":"f47cd965b1ab9be3ee3d2ba5487e093b543da176","sha256":"903607aa42a7ed44ed533bf9b7d2947060a26cc62f1866caf2223e71950b792d","sha512":"803f7d3865941a76a152cc8c19b5d361458898ab4b32daec70ca431d03c32ae7c0b669ecbaa5e72a696c187b68c423cbe32992facff4efd2d731c28d7b61b040","ssdeep":"","tlshash":"40e0f1d923601c4cdd69c9b22e3451d2da33732c15b03243c209c57a2a2f7b00589b43","first_seen":"2026-01-06T07:53:06.880801Z","last_seen":"2026-03-27T16:40:09.261093Z","times_seen":3,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/hexupload.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/hexupload.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 356\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"164-61082276-5f02bf1;;;\"\r\nlast-modified: Mon, 02 Aug 2021 16:51:02 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4SHDadK6870UhklaN73LhcsIVMq%2BNFuntkzZunxXB9c%2FQXx8bRf9Cr%2FUSXMd5nze8Z2SmUMRIfalSbPEtptrvphqDPqxohiGV9vyMNqPKwwqVchCpYWO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081ddb65864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":356,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced","md5":"f0f43b32322f7b99bbdf56928dd02b5c","sha1":"a0a95978d1229c8ea1191f6e847f9bfee8d1d1f1","sha256":"028e895faaf59357d04653e0cb9cd58e86a4868077ffb7b3ae720071bf076fc1","sha512":"ce4c349a16df3bc4cec9ff765aa0034d4cb6afad8304c608bad3a1de91cd0e29eba503a78f9a1030b145edba95ad7959bc102d69148b06bb02c8ea4f0529ed67","ssdeep":"","tlshash":"47e0c0d60381e118ed09893384caea36f6b0609a41c7260ef182c6153938529a3dff37","first_seen":"2026-01-06T07:53:06.889013Z","last_seen":"2026-03-27T16:40:09.243421Z","times_seen":3,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/vk.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/vk.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 661\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"295-6372f3f2-5f02c50;;;\"\r\nlast-modified: Tue, 15 Nov 2022 02:05:38 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CC9m3YPm6gokZ%2FMaWrOZhgCUnfTxc%2FH3omJVGCuwWKF4OH08Nk8%2FDkaBmpLIJZ3pOSxZ%2FaLKJbLNmP%2FHJBs9GpikyXorcEWXOl7CmMIZF5g%2FUC2b73Pn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6120821e475864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":661,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"e53c4579c292380972f707fdb02eed93","sha1":"563f3c3151381f4b3347be040fd5d3bae11d6c12","sha256":"009ae3346e69cd8d7a226020c37ba25d242e4edee3d468d9bfdbc007ab1ae4fe","sha512":"d7472183e2af0d3d6d346e52e132d07eee3f881adb913a38dca5dd53aa388ec1bc5d95fabed659b770789b19e89450f0f63c182ce7149a1d7177d06133222282","ssdeep":"","tlshash":"db0168d14f6504ac361a405e2710a012523e21de2a92662f7bc0eca54615af5b765ade","first_seen":"2025-11-01T18:20:41.480365Z","last_seen":"2026-03-27T16:40:09.21125Z","times_seen":4,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/vudeo.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/vudeo.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 722\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"2d2-6187f55e-5f02c54;;;\"\r\nlast-modified: Sun, 07 Nov 2021 15:48:46 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6fN5uUL3ZHClds2rNtCBvM7%2F7aBi1CNAHvSFSlv1Efh098FvJ7s5n%2FWW95Q5uH1mBzLIjS3w3XYIFGZkGqalMGZ%2F4QABFrMkO3XaBWl44AQ1DXRqiQQk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6120821e565864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":722,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"0f6ec166774dbf0d4b06fcd667259ccb","sha1":"bb7b1d864290e2d04905a29a5109c3c9b783eb19","sha256":"51caff625d159cf9d8b5b514bda73cf436df748d727ea7d6517c23b32f480a39","sha512":"0a7f4791cacb5f9acce32bd35926f25ae3c28556cca613219101f9c51a7d670c99f182935f2b56511361f75bf374acd2e0a7f2ae24dc175cf325abc066ad511d","ssdeep":"","tlshash":"dc0144962d913eeaf365cc381abfc41af06d3897917b55c52c43443b26ba44070c23b3","first_seen":"2026-01-06T07:53:06.884388Z","last_seen":"2026-03-27T16:40:09.21722Z","times_seen":3,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/css/bs-dark-v1.3.2.css","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/css/bs-dark-v1.3.2.css HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: text/css\r\ncontent-length: 4431\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"860c-684e9b26-5f02b9f;br\"\r\nlast-modified: Sun, 15 Jun 2025 10:06:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MLhIDNqNbxlf4UA%2BsLg%2FG5PrjT3MT%2B1tzRp0wDWSFgRvdHjjbwbucqhccm9q9ZrQLPkEDMaXTYyRAhW8LrG96q6rKwFh%2FV76Z%2BKYZ%2Fv1owt4acxMo1In\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081ad485864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34316,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9bfe25efa2356389e7f2cc536f5df81f","sha1":"27eb2f2ae046648229a98655b0e6ffb32540d91a","sha256":"4785623f3f97ab2033e532216ba3291ffbdc027f2f959304e0c1f6c4d9cb715e","sha512":"0f17402cce39c5cb96491fb2f0eea531abe48452caca28bb74cf2fa624279dc517aa4d36d0ba570baae366c6dc90dfad722ff422a2768b7ec691119127576117","ssdeep":"384:5//qZv8yQJU17+NQNGJnwCzE75lM/04u9pmX1qGO:5//qZR17+NQNGJnwCzE7k/7u9pmX1qGO","tlshash":"0bf20508d76339da911b85ad346c9d8127be32a2949d6e2e779f73500f0b24abf37c50","first_seen":"2026-01-06T07:53:06.857639Z","last_seen":"2026-03-27T16:40:09.240141Z","times_seen":3,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/mediafire.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/mediafire.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 427\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"1ab-6108228c-5f02bfd;;;\"\r\nlast-modified: Mon, 02 Aug 2021 16:51:24 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FGanqzVTlDYJ5bwcQcHKs%2Bck2hpPyMDnqOQnBoxJe%2FmPkZMtf88AW7jucMylAQeNVxJpxxGifA13ve0byStc2DFPla4utBPpYbmyDbjIO9ou6U9GsMhw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081edcb5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":427,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"8fa0d9de1453b0c66dcf3aad6d2b180a","sha1":"1684e541ee0f631e58f9f3639be7dae8e5f99ea8","sha256":"02c0b3c66003b78d4d09bbd497cde126556417c9ce21a9cae09e688d1870d11c","sha512":"206a626f03ac0733a186b884e160bdf6b3cd6fbd089c12e321e76a5a1252d24f99822eb38f7b7f202bf65ca73c9034e0dd0b1c2b2fcfd74319b2d3e21c05ef1c","ssdeep":"","tlshash":"11e023e5b7d36cefd69ec4776212e0d90cc9e4180069c4163915eb39a0050118071f02","first_seen":"2023-05-13T21:46:52Z","last_seen":"2026-03-27T16:40:09.221469Z","times_seen":5,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/mp4upload.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/mp4upload.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 587\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"24b-6108229c-5f02c01;;;\"\r\nlast-modified: Mon, 02 Aug 2021 16:51:40 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kVxw1N5HaIBDadi5jf4wHWg8SM3NSTxdnMU961SeJs9oqI7KmBVW77USw6C3IAJJcNkJ8n1ycgON8H6ihZsOwhzuL9T4Z8%2FuSWvgAGJkofMwjF5%2F%2FLtS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081edd45864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":587,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced","md5":"053cedfeb9e95ecd09cb503804f0032b","sha1":"834b2ab19489e79ccc9d62776bcdf37f534e8964","sha256":"c06ab54b017f1d7b7d06fe30e3da1d135d4048b14e5a238b0472df76735f3dd4","sha512":"46d5dd6119e902e878f9db3714420821cd14dac9e77f5d11a29b189b11f4878b519feff725d3b4617abf1370e1bb78d4b7467a898b9f4725ea2d174374b2b227","ssdeep":"","tlshash":"10f047ef4936aa3c856e1b0117644b74f4bd43e8b146050a4916cc08b59940b32e2284","first_seen":"2026-01-06T07:53:06.847936Z","last_seen":"2026-03-27T16:40:09.231343Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/a2a.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 15:45:18 GMT","end":"Wed, 20 May 2026 16:45:08 GMT"},"fingerprint":{"sha1":"E3:E6:90:64:B1:24:43:EC:4D:21:14:86:2B:C8:91:2E:6F:C9:85:A4","sha256":"40:DD:88:49:48:EA:3F:06:89:4C:09:F9:57:FC:99:B8:FA:ED:E3:FA:79:6D:FA:28:0C:4A:85:EC:18:B4:A6:82"}}},"request":{"raw":"GET /menu/svg/icons/a2a.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vplayer.fairuseonly.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.addtoany.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-type: application/javascript\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000, stale-while-revalidate=30, public\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OCeUfEd0VPPBZk8lTK8ynATk8ZDd%2BybdxcqXX00KPKpspnQDbHZo%2FkpvILn373Bh%2FfUIGR8FdLTALY2pCbz9vQVbmeuUxV5YmleX%2ByO6aY3J\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"0aca4ea1e5f8f250126a8e0c597dd969\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncf-ray: 9d612085686b7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":182,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"baf0595a19bdc7f7497b74731d2166c4","sha1":"fd5714384c52fc0338083574434d12328313896c","sha256":"3dab93242ee573bbcfc22c9d15acd47794e500ed44e6bd48a35400b39d65aa43","sha512":"da0e15a709b3d043e8cd9e4f97cf70d8c1addc2a7d90b6bb11d71cd72aba9133e5b9388528691cf6a354a6aaa346045f64d82b947883057471e1f1a2fdbd1901","ssdeep":"","tlshash":"74c01291501575418c1342fb475e500b167120bd015c14ca36a881f9595613f8c42fc3","first_seen":"2023-03-08T14:25:33Z","last_seen":"2026-04-04T12:49:45.956749Z","times_seen":13845,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/dailymotion.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/dailymotion.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 270\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"10e-61082164-5f02bc8;;;\"\r\nlast-modified: Mon, 02 Aug 2021 16:46:28 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1jFsAdWD1xjI%2FpPeq1oczJR77UXXCL1FF5IB4GqCUiV16kGyTodD2rL4OleSGSgQKn4QudvYxqUmOA3mXbSKJP8xw%2F5OddTZX64NwT37ZUU9uGkA3fu8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081cd7d5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":270,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced","md5":"1aab0f9b04b7e60df7cf48b1196f1b3e","sha1":"bbd2b55da9ed796de2e5f2e751eb3b4c329f1425","sha256":"a90fc7147a0842519a0fadb926a419b1b693bedaa59332de5cdbb44000ad5bfb","sha512":"24007277bc38d6e9376f9bee789a56eacaa65a86a665f0122861d0ebe8cc4eeaf01300e37cf2ff66e1beb7aa47c67db9291f11227bc298e78890008e53976063","ssdeep":"","tlshash":"9ad02bdf8366bcb4c9ce146b1a4640a2d9714104c620110d6e06c4247645661e4e9ba9","first_seen":"2026-01-06T07:53:06.783094Z","last_seen":"2026-03-27T16:40:09.275026Z","times_seen":3,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/dood.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/dood.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 314\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"13a-618a4b04-5f02bcd;;;\"\r\nlast-modified: Tue, 09 Nov 2021 10:18:44 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sZKZISvhlqLbFUtFKi%2FTL1Hwu1amSaTC0obBew9TU4Hvgc%2FLlj81Sk3kuxFeelr%2Be5D5gXj7gwTTistIzyEIb3592pU4qbXTH2igOkhQD8doPj8J2wOk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081cd8a5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":314,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"d693b1861fbae66522846f4b05ba10a5","sha1":"c61309c5ff90fb5efe2817bc89baf3e07c58aec3","sha256":"d2b2cf30500a756ff5a6fa99168b94fc0336485751aa08ed66cb19d15c6ec186","sha512":"04a2cadc63413562b803d529c72c54124a9d96b41cdeac3fe5060a084cf0c17ac42152e8bd892b73e731b591a04da5d6833a487783d8b543ad337f5d764915b5","ssdeep":"","tlshash":"52e07dc332a23dbdc245ea3f0f16e0408da3959129e55c284c1d64ef2054a9659510f7","first_seen":"2026-01-06T07:53:06.906071Z","last_seen":"2026-03-27T16:40:09.237566Z","times_seen":3,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/gofile.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/gofile.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 409\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"199-6108226c-5f02bec;;;\"\r\nlast-modified: Mon, 02 Aug 2021 16:50:52 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nZkKyf5OrM0uerlr2J99mWi37oexXGQzEmwRPmldmUcRx3YGf9JGta9uXl66dY7lXDLNySXyf6uUuaFfvK5mMExsRvHEQBHvzzGaCEH%2Bv0XY9rjk%2Bm2g\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081ddad5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":409,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"eadd4446c0dcf50253da37c453608096","sha1":"6b5c6c1adf2dcea494793bccf5269a4a5722f16c","sha256":"6ac979c207bcd92b06dd3e868de27341b0e98fc700f93a2bd6361dcbe0f9fac2","sha512":"7aafb99749f404eefc6d87227c3132faf7042b90e931e54522529fc7256b7e04b06e84d6807db141aff1c3659612fb41ca8e540077856fa796f1465ef7444ed9","ssdeep":"","tlshash":"0ae0abca23ac693cc6786826fc67946069426c0e1dd4e38c1506ca24c9a222ac8b07c9","first_seen":"2026-01-06T07:53:06.838164Z","last_seen":"2026-03-27T16:40:09.239291Z","times_seen":3,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/okru.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/okru.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 539\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"21b-610822a8-5f02c0a;;;\"\r\nlast-modified: Mon, 02 Aug 2021 16:51:52 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HuKzadmiHSvxtAdVTzlbqzjG7Ak6codHMmusZseHheOcl1GA08yyQ2c7HCAUfO7f8mBO8tiBZrnVhK6cPXHLAmDJnzJzZNH9DvDbCzwjGKbL%2Fn%2FnWy2m\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081ede25864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":539,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"c8e8bbaf74071ea689056b0d02c52428","sha1":"92efc71ce7caed3bbc142c6317173a7af055d575","sha256":"11c0409f6f3d3a60accdcfd03ef62466de6b7e6693072a4e3545982ea651fce9","sha512":"5a91576d84960848d4193a561167becc446c62ac0fd6b0f08d0835863cfc06bd8a47245b3596fd06c5de2f4014bea6496b4d07ca473f2a41bb69b45eb8c82dfa","ssdeep":"","tlshash":"def020d5b7b02eb8e202143947c5a7044578828d278cb68cb028c43bace434732e8dbe","first_seen":"2026-01-06T07:53:06.875346Z","last_seen":"2026-03-27T16:40:09.209398Z","times_seen":3,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/vidtube.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/vidtube.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 506\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"1fa-656aca58-5f02c4b;;;\"\r\nlast-modified: Sat, 02 Dec 2023 06:10:32 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AMJXFeDhHFKRQlVsWCJ7cEl%2FLw3e6hqoFA6NNcqFqun3Z8yxNyEOIR94wlGZiz2rjZkTq4St4pPrOtxGAgccvoIbgmYFR%2FVStLBdWp%2Bsw5ut9ziKSYZz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6120821e425864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":506,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"5c4ef1e326e1fc39ce3206fac60ec377","sha1":"623d58b0f1f9cffac2022c73b68df9c05ce9627f","sha256":"126cf539c36482d480d97187327b723d8834baa777490ca91a613b7fcf4e394c","sha512":"ed49248f0fd0d23ca93d6cc8f9af5c3e416b6a7507ee15cb249f7b8da7321e8b1301e4b8d861b4ce578d0206f2b379be6e8bad75c4391d8a1fa5f08567e15091","ssdeep":"","tlshash":"66f005a9131e0c1caeefb2126445d549c3193b5508fb747500a6675d80f76d23fdf663","first_seen":"2024-02-16T00:02:45Z","last_seen":"2026-03-27T16:40:09.236015Z","times_seen":10,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/darkibox.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/darkibox.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 1612\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"64c-6582622c-5f02bc9;;;\"\r\nlast-modified: Wed, 20 Dec 2023 03:40:28 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OhIJ%2BRA451zsP4037xcmLAsqLDHm%2BF9b6nDuu70s%2BAp8IzdEA7eEhcseRptVT4mry6O3W%2BrXp7JkoW8tIWkYm%2FEE0T1QzZV66rE5CL%2BbelLNW7czoOe%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081cd7f5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1612,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"c073c8fb6be0bbb05f8ee42e232f3606","sha1":"5daf3f78776c126d3e4704aad328afb4a57d36d3","sha256":"31e66860303d558103fd6e2309702339bab5a04567b49b162b42ee7a2625ca48","sha512":"66afc272513718b23c0a32d4c29e949eb8ec36794e162f2396521bdfbc8847f78ff1e1c163f0c05870c5edb4ea600e3d7c9d5821804206cdabebc3b7ce07e20c","ssdeep":"","tlshash":"7e31c8d2971dc578da98c63745c69a806db88ca3214a052b2138d17d6c287f020afe08","first_seen":"2026-01-06T07:53:06.903598Z","last_seen":"2026-03-27T16:40:09.245126Z","times_seen":3,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/mymailru.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/mymailru.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 570\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"23a-61b2bfc0-5f02c04;;;\"\r\nlast-modified: Fri, 10 Dec 2021 02:47:28 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A3l%2BTPmXuokDf8pKexBs526cKWeuyAr9uGl3p6q1nWcL9cObfzfBfRNHwmQl3mZ1BrOn2bvdrqf32VznsFGL2tdkBYmYZ3AczI2mNqKfHJCUEgoa1ju2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081edde5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":570,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"9061dfea6aa085ce97f1dec476aa96d7","sha1":"6391700db8a06fc46d830dece5a007aa7e45d359","sha256":"216b1c606cfbf177297a0a37599d1b48552d76803d68c6a8b0a83441bcb9f1dd","sha512":"1921d1beae6ce0ff152e5ef1be1d9b3bde32302c41139a99ce4c8cbaf3f05ffa4aa1cc9690513d5e4de045f60ea80c78b1be1fc5be462f1de1bf14153258fe55","ssdeep":"","tlshash":"1df096e3f6302cbe098f5caf8222f128e1a237d9409bd33f068858080e1603068a8dd1","first_seen":"2026-01-06T07:53:06.881656Z","last_seen":"2026-03-27T16:40:09.246793Z","times_seen":3,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/streamruby.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/streamruby.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 1259\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"4eb-650f5774-5f02c22;;;\"\r\nlast-modified: Sat, 23 Sep 2023 21:24:04 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dXIXlcCmvFtvrrk%2FArW7QjhsPJAbFkI4SvyvMj8krescyHa8MpNKM%2BkODBogVpYBKn5KJhBdb%2BaB8GnbM3lnis45WyhECxxVPV2Cnow1TrnzHhM3BGyK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081fdfd5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1259,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"6457e55df769c5d672b8d3dad9b9abc0","sha1":"a4debbfceaa09e34a633be3cacf5b8b4e8bd13ba","sha256":"ee54bbc4412170d8700034d4ccc87a060d737593e971d93a9a0964fb56674143","sha512":"3847793f03f1a0287260b3d156b3aad28b6beb3760e47bd819b2ce7110924405b12971687e1f8b2883a19c3de7738ee5053f9e0ec686bc1ddaa795419bd4951a","ssdeep":"","tlshash":"882160aaf2aade30e54793d1dc5422c2d310de0516ca928b7166f2093838ed555d9c9b","first_seen":"2026-01-06T07:53:06.786095Z","last_seen":"2026-03-27T16:40:09.232197Z","times_seen":3,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/modules/core.ydpp7jcu.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 15:45:18 GMT","end":"Wed, 20 May 2026 16:45:08 GMT"},"fingerprint":{"sha1":"E3:E6:90:64:B1:24:43:EC:4D:21:14:86:2B:C8:91:2E:6F:C9:85:A4","sha256":"40:DD:88:49:48:EA:3F:06:89:4C:09:F9:57:FC:99:B8:FA:ED:E3:FA:79:6D:FA:28:0C:4A:85:EC:18:B4:A6:82"}}},"request":{"raw":"GET /menu/modules/core.ydpp7jcu.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vplayer.fairuseonly.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jn68MsrREZnF6KpsKgaQU3lO%2BVbzQrYhW14Lb8%2BhUEImblLeM410zkU0%2BIQv19gGcG1UML0ECB0MvPohGxdiAn%2Fk2Wns1OlKbu5NL%2BaQxw%3D%3D\"}]}\r\netag: W/\"44ad5ade899a741fb11da1dc866d3785\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9d612084bef2f375-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72579,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9732b656e9f76f9f4523aa1e726d5691","sha1":"cf90b38d8ee1c46594445a7f4d4dc479f4dede06","sha256":"afb9825a91c5980ddb68ebfa3c7323533f4355f14a0a7db233b5de527f4c32d5","sha512":"a938bc8eb39437eeeab4d0e9cca78714487c7eb0f41e373ac32b543531ecc3724972bee71117e130116c6ab5c447dc261960976fd7c88dc16c7e2d0dd952960e","ssdeep":"1536:j8fEZ0gdDGst00AQVWFaC7Segd292vOBbJkbU4mxSZXb1xA6Wv9szbfe5Ddrayt:YfpgY2vOwbJmSXb1xAlMbAPt","tlshash":"0b636d9b37056937ba5b30e9a9ffa608a037235e9e080550f5a0d4b521fdecd3067f28","first_seen":"2026-02-12T07:28:51.937994Z","last_seen":"2026-04-04T12:54:29.788759Z","times_seen":8446,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":30,"dns":1,"connect":8,"send":0,"wait":35,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/goodstream.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/goodstream.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 637\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 08:32:00 GMT\r\netag: \"27d-65fbc18a-5f02bee;;;\"\r\nlast-modified: Thu, 21 Mar 2024 05:11:38 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 194595\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YImbS%2F7GfUmj5EOF0iJ%2FPgMYuvCoPO0pBh7jbuBc86A%2F5YFQfAYhNpJTT05UbqzBTIUS4PixdehIiVa61%2BsTBr3IKrdXdRp3a0WWr5OhIabdJg19mvwK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081bd625864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":637,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"638197015c1941b2b67ea42b4998f195","sha1":"06c7624875f8a6a3b68fab4639badadfbb710120","sha256":"e1dc9809cf12735bcf80ea01e489a0a0a3ecb0fc6e8ba52a95479da584bb72c5","sha512":"215b070bff15399ff4f944192525363ab0713746563495dab703af60ea3f2413719168cdf2e4647e6ebe1be2cb9a53cc9ee32a24a2bb855c704bf5b363d4f2d2","ssdeep":"","tlshash":"e9f0d34ab15ab6ade2c5359a08df39547978de1e4061009b758c4192f10580badc718f","first_seen":"2023-06-02T08:18:59Z","last_seen":"2026-03-27T16:40:09.225989Z","times_seen":15,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/direct.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/direct.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 370\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"172-6108217a-5f02bcc;;;\"\r\nlast-modified: Mon, 02 Aug 2021 16:46:50 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dRtKw9fH3BWsmk8PMo1E8KF57S64a6QW1TWjScUTWz9bd3kWGxkFj6NSUveoBXeVVa6HWrozJH2bISUgkFu9TFnpcSWxVPJFNLWfTBrBqpXQsbaooUJr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081cd885864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":370,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced","md5":"0c55e586e54d8a1025bea75b3be4d159","sha1":"ac366840688bfbffd98e1829e6c78424a3afd07f","sha256":"ca0fa469771eebb909fb79f4c6be5e771ff353dc2c589f0fa7d5eac36939fe82","sha512":"335954889c868373b93d7d063f71a645071fc65415f560f727b497515c4f3cee92a2444b84cd593b6bf001f9f166c945185adeb5c7e5707c27ba84664b3848f7","ssdeep":"","tlshash":"9de06aed3b008f3c920fd361a1263a055522152b0d4c1c77737105145f2010bd3f2f72","first_seen":"2023-12-01T23:54:28Z","last_seen":"2026-03-27T16:40:09.260215Z","times_seen":8,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/yourupload.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/yourupload.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 367\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"16f-610823dc-5f02c5d;;;\"\r\nlast-modified: Mon, 02 Aug 2021 16:57:00 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fyaOZh5zigv1Fko6iXnwuKpcA86MsfHCMB%2FkNA88ccRjKtBFGeJDyi9tbC7qJEGDBhxvwLoC3nV%2FHiirxUeFCZzzvFOgc7bX1aQERO1Ym2nFy8KWtC3Q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6120823e7a5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":367,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced","md5":"5d022f3b64ed3b5eba350e7b00c49bcc","sha1":"2fa071461e5e27157e71ec1380d1cb212aa0b916","sha256":"7e9e01fabe39ccad962deb90f3ee6375899af6314f38918c9cfe97d9c38a7b13","sha512":"e81a5841cb54b26a2a9ae6282d8e774da5f4f8dafe389f8465080c56876b994a8566fb60260f94ea3ecf3a23fcbbe0383765d909c47c8d2f0fe71c9320381910","ssdeep":"","tlshash":"82e068db1f0c207d568a6a1a072178a3e823264841685b2cd9568d1b1812091e7d179a","first_seen":"2026-01-06T07:53:06.905101Z","last_seen":"2026-03-27T16:40:09.250674Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-02T14:35:15.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:15 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P0z%2Bu32Nwc2l6JPRD1T%2F2a%2Fn2QZZkcCcp2uqgQpe0akkV%2BLnAidycykN7yF%2Fr76NnWzMXamYgOOnvC7G4gAqdG9pW07gd1B%2FrJgMTsdp4lzGKjIx1Whi\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d61207febf3dd16-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"AddToAny","description":"AddToAny is a universal sharing platform that can be integrated into a website by use of a web widget or plugin.","website":"https://www.addtoany.com","common_platform_enumeration":"","icon":"AddToAny.svg","categories":["Widgets"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Bootstrap:4.6.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"SweetAlert","description":"SweetAlert is a JavaScript library that provides alternative alert and modal dialog boxes for web applications, with customisable features, aiming to improve the user interface of the default browser dialogs.","website":"https://sweetalert.js.org","common_platform_enumeration":"","icon":"SweetAlert.png","categories":["JavaScript libraries"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":83310,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2838)","md5":"5ab6ce50b3192aad6e2bf24bcf7c1e72","sha1":"bf9b63463d641027690eb3128152030ea946a4ea","sha256":"60c5e650f75379ab469392d561d0df2b84025c04e2e305414100a21de75bcdd5","sha512":"fc559619a53725f94cdbb79f803a7bd168ca402f8ce387caa05527818d3a7ebad20311ee31cefae01c25fe2febd98b7ec5ca1c10c7c5c58dec95bbb3dd174341","ssdeep":"1536:IM7vAzMxoSXdyucfVfjqosZ/wn2FHZU1eiAltO4mmf86/siZtLo8w1oYyAwv2wv4:JyeZ2XBSkB","tlshash":"2683515260ec5cbb44fa64cce5d89e4460cf59bbc2c848caf6bf5b649b8dc113063ab5","first_seen":"2026-01-06T07:53:06.834292Z","last_seen":"2026-03-27T16:40:09.205198Z","times_seen":3,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":82,"dns":52,"connect":8,"send":0,"wait":86,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/vendor/bootstrap/4.6.2/css/bootstrap.css","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/vendor/bootstrap/4.6.2/css/bootstrap.css HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: text/css\r\ncontent-length: 23080\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"30ef8-68248b56-5f02d06;br\"\r\nlast-modified: Wed, 14 May 2025 12:23:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A49BoLi2Fzv2indVFqKTJIMvkXI%2FNE0m1C1psniTnOZcJjEpBssNuxSOBNFVkgqVXt9nei3NlS91LQH337ji3g1rS83iYIhY%2F44SzpNOJLp7oCX3jfNb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6120819d255864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":200440,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (629)","md5":"1a0bee3b6592c6692ee6b16a1f839fcd","sha1":"c81e9987958c624be0f70fb2c75ad1ec443d7811","sha256":"b7ac093ee377468312e9bcfd78cf98d7159e0ddaacc061f2da29c1026db5803d","sha512":"8630be92d6cd052be9d2d3717ba1a8c133b265f87f33a71c211cdcb8a62a375aeef9343602b21de2c58c0f33ada4593906728dcb7a6fa6ecd9c4124d0f9ab775","ssdeep":"1536:paQZdslGfJCdUHh2W8zWynDow4leASzjP+QTzNthB6GHwLIN9K/zDL4iDF4sx:pvnCdUHhmzjBwLqK/zDL4iDF46","tlshash":"9a145359fdf11408706b826c64d6b7f57b6d8087c61edeba7ae32224df493c14cb2988","first_seen":"2026-01-06T07:53:06.901554Z","last_seen":"2026-03-27T16:40:09.208325Z","times_seen":3,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/pixeldrain.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/pixeldrain.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 329\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"149-67aef0f8-5f02c11;;;\"\r\nlast-modified: Fri, 14 Feb 2025 07:30:00 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ifT2WGey08woRuKBgm%2BHbsjZbu7KDGFkyc5T23%2B4btA8prGnjvAXspkLIcXT6OWA%2Bm2vHbI6hU0Nb5CScSRRS3aNwSukYv0NrgNAtZAr%2BcVm19AYK%2F41\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081bd575864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":329,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"d22d70091c2064303400ded9039d4697","sha1":"160746d49e5a90e0c68e4ac9a6dbabb43c3452ab","sha256":"085516ee04cad6b229b8883a81131bb7e1378913f2e170f6e34121ec733c680e","sha512":"33a7b9456d31eca1daceae69ccf39867447ebd341fe02421173e94f44b2b3d6ab53c8d6f10e78a92ba1d271eedfe285d3253a7388840f26014415500825f8083","ssdeep":"","tlshash":"35e07de1667a7d7a89b1c0a009478ccef9a27f2c9bab05630d09f421a671640d05b3b5","first_seen":"2025-09-11T14:48:06.090014Z","last_seen":"2026-03-30T17:48:24.367081Z","times_seen":6,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/onedrive.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/onedrive.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 428\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"1ac-6108230e-5f02c0c;;;\"\r\nlast-modified: Mon, 02 Aug 2021 16:53:34 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4AG6Urj4jO2YyslxBIm831IctcJMtp6T5%2FJcofgrolwZDrm2CPBsS5f5NLIT8YZ5yhHEaONJRtBYpGaX3wrSjQktuzt85MtwN%2F1g2rQucAmWGr7k96VH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081ede65864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":428,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"9502f18133f56ad0c47562cd1e012f74","sha1":"bed50436036cfc3558e2780c7926a02fdd3e359a","sha256":"4ef34e862c6f20d9025bc5e1a69f5110e470b855a1f7f4321b98beb86183e5cc","sha512":"3ab05d70bf9a17b6e76ec1281c59f7f9046be67b832c47bb96dfdb23d2c6b9ca91ae7bbbe540263171174af3286762b52db041089ac58746be9fba34ad006899","ssdeep":"","tlshash":"dfe0a3d673605d19c39817797a3743aadd8d1298f3044ffc1605985ff4315c56060059","first_seen":"2026-01-06T07:53:06.911443Z","last_seen":"2026-03-27T16:40:09.215082Z","times_seen":3,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/vendor/select2/4.0.13/js/select2.js","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/vendor/select2/4.0.13/js/select2.js HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 30782\r\netag: \"257f5-1dc09d84-5f03793;br\"\r\nlast-modified: Sat, 26 Oct 1985 08:15:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wgi%2BcW7SpMIAiQ4QQ7k%2Fk4%2BFF0Hf90tsgcgRlUIuafjF444Wc3D2Nz0I9BHLk5Ebre9jqAEZ%2F4yo0%2BegO6rGJmPQKf6BkKVoj9st%2FtQ1PXIPp%2BclsRel\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6120824e935864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":153589,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"8b9e61ffc46edc5610a2020a60d331f6","sha1":"bd04d39aaf95afae66f3b9e0c01ce72feb5cf5aa","sha256":"46716cb20114cd73f37e4ab748945e68bd3d153e08af566ce3cc29371d6023da","sha512":"b6fb389760b754f7021f3514d4a186fa35964ceec7d2cb6f9358f09faa6be01d6e8a670bff66a98b7ae79a4321550e838258312dcab22d20d2d481797b279346","ssdeep":"1536:mSgOuLb2WNv6aW7PeaMNlk4t2hAP9DKvWtWMV9Atd4v:mbLb2WUdbMV9AtM","tlshash":"3fe30f986ef72174576b30af9adf60082138914b9409ea117c9c87cc9fda43852b7efd","first_seen":"2023-03-07T21:23:37Z","last_seen":"2026-04-03T21:21:59.234874Z","times_seen":66,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/dropbox.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/dropbox.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 569\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"239-6108222e-5f02bce;;;\"\r\nlast-modified: Mon, 02 Aug 2021 16:49:50 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8A6mFvZXupDPDvf08pcGX8mBDbtOkeU8yoDqQAnQ8tri%2FqWnbmIkG1funD%2F1tDLYfs2YrMgh54A2jpIXdQup67ppz30d2aiVZw5zxHemCWrIx6gn8Uq4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081cd8c5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":569,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"21f9e2d1190af08a6f8c106d25acec4e","sha1":"3d501ca3359fa9703baf23c1975ded8f37046a27","sha256":"e27383af38b32078784f303dbde9c6ecba959d88a4ddf5c08d2d203a19e20c91","sha512":"4e6b19b3aa534a118f7e0b9cc5918ea2cf053d49b65390d1fc3af952edf05a36ee5badeb3af5f0c021e985fbc456859d19298903ae695c8a02ab9bb088e33a68","ssdeep":"","tlshash":"d9f0413373dc4e23eaa0cb3884b4c916a03b3be50c7226091302a162a07b05ca4e4c0e","first_seen":"2026-01-06T07:53:06.840371Z","last_seen":"2026-03-27T16:40:09.269823Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/tiktok.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/tiktok.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 459\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"1cb-6108238c-5f02c2c;;;\"\r\nlast-modified: Mon, 02 Aug 2021 16:55:40 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=efC3J0uN%2F8M0brqsE%2BJC%2B1cH6Oduj1bo69%2Bvq9hBOUVWoF%2BHpKe0gGCTs9IgCp3RT34cUpMqgJEfU5YLd%2BibHvU6AZpZOSS1VrBCTUtEtsysZH%2BCAKb%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6120820e195864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":459,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"fe85656bf34ee252afc2c212d7edddcf","sha1":"f02fb958e79b2632439208ff75bc2820c1221184","sha256":"0e1115fa6ea48f839315b6b9ec53a4cfaa8e236e81885e866ddc15ec4285d969","sha512":"bff0c8a005e58bad5bf4fed5f6348519549d98e3e2c25566776c1dbce79355b87e5889b69db2264c9cb04136dba7d102540fa659fde6632d1845c7cb6b661a79","ssdeep":"","tlshash":"56f02b79f3ed9475d25cc136e4955550bf1771c901d11d4c83ccf51dd550473a1d65c4","first_seen":"2026-01-06T07:53:06.891839Z","last_seen":"2026-03-27T16:40:09.234057Z","times_seen":3,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/amazon.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/amazon.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 631\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"277-61082212-5f02bbb;;;\"\r\nlast-modified: Mon, 02 Aug 2021 16:49:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Dn2u%2FY9%2Bn3ibVPn58TPpiMgwCiNV0dIv9lf2s2yR9L0MHmQbuv9IndQuBA0o2xQMtcqjAJLruZxSnOpfZAkKeSq4%2BPRhASRVKrxIdLpVt2X%2BEt40VhN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081bd665864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":631,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced","md5":"36f40d2c2d957305309d13055d87cf88","sha1":"0f36eb5d34717edb3edeb6f4e0164388118c7c82","sha256":"6b32d646f22f0c6c14cf00dd6e2dba23b4e9e9f266d7a407ab050b31e8bf4767","sha512":"5a6c446c220823c584e8e79d3c63f0055f419391bbff7a780928840005490f22d440276086f6306e41657b03a73f0e134dbd82f65a0973d917d2ae6999cadcbe","ssdeep":"","tlshash":"bbf083eb2844391fc8d03a5328172051f413d2d0139a1394a04087a49b5941ac9cdeb2","first_seen":"2026-01-06T07:53:06.852471Z","last_seen":"2026-03-27T16:40:09.195519Z","times_seen":3,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/blogger.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/blogger.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 407\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"197-610821a2-5f02bc0;;;\"\r\nlast-modified: Mon, 02 Aug 2021 16:47:30 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G32ZDO1hRmc5UmAqgn9vpZGP%2FDwGeMKHd1PELiDTD%2FzcdQShF%2F71GMelIalZ673kjbDqG0p%2Ffh%2Fg%2FnVEYRiJyKgnF24rswlOQr1pzoaT6tLoy5jnvYup\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081bd705864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"f1f5b3cd0388485dd03fcfe4c41dfc93","sha1":"cf316b531cdea875d567abedeb86b4ab18628c12","sha256":"5bd87780748a2315f482096fad4ae3cc09fb954ba58c8c33e6e5fe948bdbe668","sha512":"54f634a7800bf246cd09590911471f70150bf1c893632547b11302611ae88b448dc9e188f32822819a6061d72ea3c500a83147517e5648eaa9d84efa92513862","ssdeep":"","tlshash":"4fe0f1c77384fcb44f8f7462470a64451984b17a20819f6c83db1c3f80f6596d594ba9","first_seen":"2026-01-06T07:53:06.902626Z","last_seen":"2026-03-27T16:40:09.256794Z","times_seen":3,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/filesfm.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/filesfm.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 644\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"284-6108225e-5f02be3;;;\"\r\nlast-modified: Mon, 02 Aug 2021 16:50:38 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gwELG2i6T0hC5ZTGhZ6JQRMzF84q%2B36SI7W7jJ%2FZRiFgG22M0IfnnNY7Ziw1myB1bSrrSm%2FSNNDAoySa4Ddls%2FhnWBPhyg178SAtaAGZx2Aqq1wE5OHI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081dda65864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":644,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"3399d4f85e439edb0fc2e953806ee63b","sha1":"ee0e1f9d774c33ce85c7ddc9c6b5c710eb83ec69","sha256":"87b1dc3f64b97dcc278df2d2718b9aa17ea525d7da861d855702d2e9e1f1af0a","sha512":"4d4e92b7a2d79cf037538cae7be65774caefb3e4f3c4ac59b3927a7198acb8ebf83e356865bf458ff66384f36b70a3bcb82dfb3a8820b0a9a0183f30526ad057","ssdeep":"","tlshash":"35f083a2b1911cb7e3ac583ab20410d9c439503199e240e90182840d82a6cc61794bd7","first_seen":"2026-01-06T07:53:06.818638Z","last_seen":"2026-03-27T16:40:09.219337Z","times_seen":3,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/vendor/bootstrap-sweetalert/1.0.1/sweetalert.js","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/vendor/bootstrap-sweetalert/1.0.1/sweetalert.js HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 8281\r\netag: \"87af-5727278c-5f02d03;br\"\r\nlast-modified: Mon, 02 May 2016 10:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rgdaUPA1BqzhZfIQwcW2SNA9z%2BZm5C8vJW4cMHxwL%2BFXN5YQvTqNX2br%2F92B8gy6C9Sqs7Lkl87mcNwa80A%2F%2BKzI1AML2YoP9XJkuRAqvVQqCSU7AFRk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6120824e945864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":34735,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (480)","md5":"10ba6a45b5ea3105870ce30d6b15ceda","sha1":"6538cc1fc3535db08575b4e6c793b576fb8e3336","sha256":"66f31ff658b4339186ae219410a9f583a94bc278f9bbe10da826cb33922d8d0d","sha512":"5d5cf53f80b29add38a6ec26e4e2133e6e60ca5cb28f9be46a1bdfeb84fcc65b7fc9b793a73e281ea25521e0ed0e8179912ad730e5267587b0138252ff845600","ssdeep":"768:4kTsnFnQf2PTNZrv5EShXqzOGShX9WyZa:EQ2PrrvONyZa","tlshash":"f3f2b69939fd61b3067b10a6538f5d45bb308027b004ea91b9fddb800fe0d654ba5fea","first_seen":"2023-03-07T01:41:15Z","last_seen":"2026-04-04T05:25:58.565733Z","times_seen":85,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/manifest.json","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: application/json\r\ncontent-length: 449\r\netag: \"610-695903b3-5f02b94;br\"\r\nlast-modified: Sat, 03 Jan 2026 11:55:31 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qGmm1ulSYgEX3CC2iDWZDixJFXq3lxLeOOfH8D06Z1I9RHCWwaad7YVmWG5r3volwUIZv6mBxQ%2FQrshohSahzeJwK1LaYtesX%2FalTC4hMQdGTdkePfNB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612085cc1a5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1552,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"922d2ed3631685ace05cacd9063e8b6f","sha1":"46b576eddc676123eee43edcec3485d5da828866","sha256":"5d91a7925109e2a6a30caea23ef4fb29ebadced70fbbb7a3ea8ce2d62b3030c9","sha512":"50049992195e9821c2183b63f61f0ff00592921078e87e17aa50dea55b0c18bd85c79d0d09dc7cb56fd5f4af06506487bdb5bb9fc2fd6f3502706714441ed1a4","ssdeep":"","tlshash":"f1313802d424dc53058ae0eabd524b41a232620bde882e1dbf7e549c1f6e85f84b627e","first_seen":"2026-01-06T07:53:06.841256Z","last_seen":"2026-03-27T16:40:09.255957Z","times_seen":3,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/hxfile.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/hxfile.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 684\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"2ac-630ad9d2-5f02bf3;;;\"\r\nlast-modified: Sun, 28 Aug 2022 02:58:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6U9wck7zqajtSWbAgu8xq4oDAbB8ti8hpDo%2FST2wtecWJLgxIOSTLuQ9E4CLdEsKGktwE16TwYaHivBxTLOPP2PREn2vopdeTJM72Y1H2llvz%2Fby7lFZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081ddb95864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":684,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"461ff7e0461cbbbe48ce357d29288cc5","sha1":"dea54ec457a424d2a35fb5c49692ddcae5a4e53f","sha256":"587fee34553163e25eee4745da2f076fdbaad3953c3aaab632dbbe652c30a973","sha512":"6e2622349801777d826d9b8251d94471417fdab6bb209bd154ab702352ef4581c533ae864b557f71e580ed68ec186b0d4f641f225fc91ef8a50010668b71eb7f","ssdeep":"","tlshash":"8d0144a7177fe8188dbad025a449695dc81672451ba901697cbcb15cac0958d1c71f0a","first_seen":"2026-01-06T07:53:06.863535Z","last_seen":"2026-03-27T16:40:09.189166Z","times_seen":3,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/whatsapp.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 15:45:18 GMT","end":"Wed, 20 May 2026 16:45:08 GMT"},"fingerprint":{"sha1":"E3:E6:90:64:B1:24:43:EC:4D:21:14:86:2B:C8:91:2E:6F:C9:85:A4","sha256":"40:DD:88:49:48:EA:3F:06:89:4C:09:F9:57:FC:99:B8:FA:ED:E3:FA:79:6D:FA:28:0C:4A:85:EC:18:B4:A6:82"}}},"request":{"raw":"GET /menu/svg/icons/whatsapp.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vplayer.fairuseonly.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.addtoany.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000, stale-while-revalidate=30, public\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VCeev8QO9ntZDP38Knmut87F1eBxTXnRNJBMWWZR5%2F%2B0GOwcl2z0G94VCPjjrZ7rSIKcfk9j%2BXnRQgrESSS8qrDQfFOE%2FspEVuhXop%2FcpRTL\"}]}\r\netag: W/\"83af4df8173e43227812296bb8542dcf\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9d612085585af375-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1108,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1108), with no line terminators","md5":"0e8b3ac6bda5451ff39c5ecd6d7b3873","sha1":"fb477a11167000a30e45369e686ec43dd62d026b","sha256":"c15e1379ca2c59f99912500bbc23a0d1d88f43198cbe1b53d87776fa351385eb","sha512":"b9145fa20ccc86c3e3e28ded1df1611ec4bd8ff2fe0d93d392081248d59d77a4982150f85d8ef0b545850ac2a8797a136692e801b23cb26de1227c66e5dd4d24","ssdeep":"","tlshash":"d31100c92110d3a41c97d57edf6e9d46a61f707d75bc24d6039ecb28498f0edb50c845","first_seen":"2024-04-12T13:25:33Z","last_seen":"2026-04-04T10:43:26.26216Z","times_seen":4185,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/facebook.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/facebook.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 636\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"27c-61082236-5f02bda;;;\"\r\nlast-modified: Mon, 02 Aug 2021 16:49:58 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J2q%2B9QcZoI6Vtd2qxnysF8V1reIHfovmu0mHKNkAEC3te4BLalNzoiHDTKVK4bH%2BzOuOjUsYuhQ523MEM8ShG5AjBTA5FpsX1OPYGB5ANJP7U98I61YO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081cd955864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":636,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"322840c40f4e0bb694498ca26bf1c7d9","sha1":"6d867b734ba0c2897d0c042472a81df5cf02b30f","sha256":"77c7c781e89628822b1767ac302dc8f3291d4b0202251ec9cfa1e75f9cfc645b","sha512":"598b89aabe756cfcb5125e094d9f12c43790982821d5362b6d957ca8d6d4afe368736896da25d72aaa50b42aa73baea500221c190a95d3f155bf7591acf32871","ssdeep":"","tlshash":"c1f023375a81bc7de16ca4451d1148056a2e964a03d4f93f1c48f75a380da4e46b2c36","first_seen":"2026-01-06T07:53:06.825693Z","last_seen":"2026-03-27T16:40:09.271404Z","times_seen":3,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/themes/frontend/default/assets/css/style-v3.4.1.css","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /themes/frontend/default/assets/css/style-v3.4.1.css HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: text/css\r\ncontent-length: 2328\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"275f-67fe6aae-5f03a22;br\"\r\nlast-modified: Tue, 15 Apr 2025 14:18:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Mx3AlIH6SAuHFKZPKsDUZHfUnIB%2FyhjkFrD4OWEL5O1ot6zgJayBaiRZhyjy9Fa0CJX1J5urJcYbxUdyTuWXGlKEF7z6D438k70CKCYO61pCi2RmSfN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081ad4b5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":10079,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (337), with CRLF line terminators","md5":"4bec6b969a59f777ce497550bce2775a","sha1":"af80a2a164fb3dff42e29f0ca5216e538a25222f","sha256":"89749e04fb69721dc3f299b75530ba1fe14c2d7ce178bccfc18fed7ab5b4074e","sha512":"6a4b1708f1b1ec2d0f96a9d56342ad371a82c5b0549195a11b3b61c7547ea51d53003d168c7670516eaede4cada49de5b952789aa94a4d5de47b506fd44866b4","ssdeep":"192:CFlbzs0K0EEjAwuujoUewmvoVHsWWYIWvA2WOFma2Lh0hKXIR40gU0rg2QKf8:0bufruVM3YpG0ZgJjdf8","tlshash":"7a22616ed742218ba2774f7c6bb51154ef591023cb060aad77ce73504ff92685a32e8c","first_seen":"2026-01-06T07:53:06.850718Z","last_seen":"2026-03-27T16:40:09.261947Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/fireload.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/fireload.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 422\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"1a6-6187bcb0-5f02be6;;;\"\r\nlast-modified: Sun, 07 Nov 2021 11:46:56 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3CzS3%2FMzv5pawYycY9kcQGzq%2FXerO5DGZDbPuxukKcbLWYSOmgtFsXOyRnt8Z%2BNBTXp0q%2BbJKIkRivPcwhHTgXIGCEP3eFV55LWia3MdvlmK8r9IDeu3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081dda85864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":422,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"9e487ff6381b00b797e537e39696f78b","sha1":"3491a990816f1982e5eecaecb592a1136afb17d6","sha256":"0c062254aa4071e6de403979a8e0799b4ae392486e79e06cfb3e630dcd7d630f","sha512":"dff96ae95b5d06cf58aeb574ea6d30f539656b0a3002e818f9863352829e61335aa4f938e183e9e9da2a7a0752e30e6dac310f6070195345cdbee52f8f8c9ce2","ssdeep":"","tlshash":"1ae023ef35597e3ac0dd043b42a146c79ad1005a24eb01acb006601f446c1f5c9b12eb","first_seen":"2026-01-06T07:53:06.888219Z","last_seen":"2026-03-27T16:40:09.247694Z","times_seen":3,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/sibnet.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/sibnet.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 246\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"f6-61b2ceb8-5f02c18;;;\"\r\nlast-modified: Fri, 10 Dec 2021 03:51:20 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5U4OxR8Agj7zYrybBrhkeGQLsSXW8zvdz3j7JgWYnKBE5Kr2S9cvcyBexNRG9hvinqilk%2FBBaJykskxMLd53lgXQrLzWdge7aY8IGxPLkSRUbHl6nv17\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081fdf55864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":246,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"31dfdfc2435be941f165973027fe2076","sha1":"c5db88adb4f48d391fc9e070a94402d25bd8948e","sha256":"90ea7f414f85b077e403e3e8737d98d520cbe7c80fe7a4987f35d84bb81b83db","sha512":"cc3e8bb496f01c70a1e0298e75b1e08c731835ada1a1cc8c33785dcca1e5e5c8f3b876cf27703be276bc1e81b35f374452fc7de5bbd46438bfe9abf10e028b43","ssdeep":"","tlshash":"17d097abce003c7cca290129029246a26d36294586c0a39f8f91c4343a3221ba1f92c7","first_seen":"2026-01-06T07:53:06.807324Z","last_seen":"2026-03-27T16:40:09.252428Z","times_seen":3,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/vidguard.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/vidguard.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 528\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"210-669b5e68-5f02c43;;;\"\r\nlast-modified: Sat, 20 Jul 2024 06:51:20 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LNVXEXU6YgNDKLkMjvuMqip%2ByWaQF53%2F3ZmIRlhpHJBIp6BGUoR0LW8IxEQhrTtyuw3NGqH53a9zroN1Gu42i2BBoge8RKxmQU58JWEWViJj58Hsmw6D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6120820e355864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":528,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"f949237948a7c41e37f4e89823b7ac22","sha1":"7488ac60f29bebc07255d9759ab0273a5857e299","sha256":"87caf7d7d9d082f8e9d1e4df4eed7b75dc7f55f104123a4d2a852a088d9a9826","sha512":"6359f8c9ba51564686a0cf66f1ef17177510d46b6cfb0e64150edf0ff1833f2f7c3e5b60e2e99b1f1119c48cd01e219507027293f49b4fa020e5cef14442f773","ssdeep":"","tlshash":"99f00c937351fb7ac74d7037c70cba77be544e0a5be4358e4714a1a85664114c0f0757","first_seen":"2024-05-25T10:34:53Z","last_seen":"2026-03-27T16:40:09.200263Z","times_seen":10,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/twitter.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 15:45:18 GMT","end":"Wed, 20 May 2026 16:45:08 GMT"},"fingerprint":{"sha1":"E3:E6:90:64:B1:24:43:EC:4D:21:14:86:2B:C8:91:2E:6F:C9:85:A4","sha256":"40:DD:88:49:48:EA:3F:06:89:4C:09:F9:57:FC:99:B8:FA:ED:E3:FA:79:6D:FA:28:0C:4A:85:EC:18:B4:A6:82"}}},"request":{"raw":"GET /menu/svg/icons/twitter.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vplayer.fairuseonly.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.addtoany.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000, stale-while-revalidate=30, public\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ROZDBMhSZEJ6cMjFGi2XOXkAYJ7LFo1m%2BoscNnrfaDhjzD%2FdaUspS9%2FZZm7xboarSw5uTbHSBi03cIYI2%2BDDmukz5px4p7NoG5oSwR4B2%2Be\"}]}\r\netag: W/\"af2b829f9b79fabec7c0148a8b7e444b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9d6120853814f375-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":645,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (645), with no line terminators","md5":"ca05cf90bd32d6134c0b92464c343f9a","sha1":"187feb5cc71d225717838268487a0abc9b8d405c","sha256":"3003867b66a32c12fdafeefc27cf06d906e5a99ba275550ab757f4bb04834636","sha512":"d36553644d3a52a96dbf733c7eb766deda074c926f44514001633dd0a3ea2b84d1a835f207bcd9772e33b2a8c086616cebf6119a3d802134636ef7c53e92dec0","ssdeep":"","tlshash":"8bf0ddfe277c60dc28234baacb15e5591b2d30ba3b8051c3061c87b0488791ce503d42","first_seen":"2024-04-12T16:11:45Z","last_seen":"2026-04-04T08:25:47.897321Z","times_seen":3996,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:17.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 182805\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:17 GMT\r\netag: \"2ca15-689d6a98-5f02bb3;;;\"\r\nlast-modified: Thu, 14 Aug 2025 04:48:24 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XBIw3FWwd7c3k3w1ZTkWeYT8uRXsXzy49tDpvWrqR5iQkIGG4Vz2Cv6G%2FP9OWMNJQiQENSYE6K1lRRbosaks9gCWg8iTIpUgLzEql9EkWg7jynM1G8Ew\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6120875e915864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":182805,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"b7b88de19bd38525a92c03fe977823e1","sha1":"b885dbeb13662598d396919b7896c66f44c9679b","sha256":"f481b0154f844d92edfdb59235c2555410c20e79c99d2ea7795b2ee8e7a77f0f","sha512":"15da2d3e1c2bb0799cd9ebc44d9a6a84981d26a4da41ca60441664d2b9033046a6c7e2bdba41035418affdf6d66b47164bf6a286edfe3796b3569823d223ee28","ssdeep":"3072:DVKxk/3aQ0lbL8aPCUsi0PFxligwpW4axHX3G7H3BgoQKHyn422m4ZtAMCsD5Mo:DVE+3UJLnCUsi0d/RxHQRprSn4jnZtAE","tlshash":"c70422595fd4ab21e5779112b23ae2acb9b4e52d267c021bd2c3572ef89df44301023f","first_seen":"2026-01-06T07:53:06.805129Z","last_seen":"2026-03-27T16:40:09.185749Z","times_seen":3,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/vendor/select2/4.0.13/css/select2.css","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/vendor/select2/4.0.13/css/select2.css HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: text/css\r\ncontent-length: 1907\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"443e-68248d44-5f0378c;br\"\r\nlast-modified: Wed, 14 May 2025 12:32:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GgsZmQlm9mRN0Ru%2Fy2YV%2Bd2%2Fvcc1BE%2FeCmT%2F1JtnQ8mAKwO%2FMe7R2dYcJtCsHbbDYhUP59Ut5ySSpfsI2HASiDD0AJniaKVq%2Fm5ihCvPUfRJ8lHFTK%2Bq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6120819d2c5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":17470,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3961712c5ecc8237fa1e2042fbe8ee00","sha1":"ddf92e7c71ef0c8a56602073b344f8d8d8289b13","sha256":"e65c9ec7aa92a6dc53122afeb95e425f8931b0150b67be1968c435b672b708e9","sha512":"91fd260970078a9f521befd05acecf643c308d77f74d83158a933b46599d1fd36a3cf95b1633d80534b1f16d2fe79109be0eeb6b6b3626df508eea9408c55a32","ssdeep":"192:ZM6g+1Fjdr84eGH+NG+LtCjFIFTFuWFLQq0gwKLbXvAsHyFTFu4FIRL1d:XFCJIjFIFTFrFMgwKLbXvEFTFPFWr","tlshash":"0372dda4aedf1931b07e4caf9df5b140632ccd4fc0088b9a7ae4e144efd5194255ba4b","first_seen":"2026-01-06T07:53:06.836603Z","last_seen":"2026-03-27T16:40:09.22814Z","times_seen":3,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/navertv.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/navertv.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 794\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"31a-65710d9e-5f02c05;;;\"\r\nlast-modified: Thu, 07 Dec 2023 00:11:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8PqL5Ykew4ljvKyurrVC9JKnmwP3PA0rhGhmzeDKblV7rqdwt0p9B%2BclAxtDFH4GOknmlHLrHPn%2Fz29tO5owmCUwaEUtR8%2FItXMbsQ0q%2FRBhSanmodQO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081eddf5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":794,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"e40970bde86cb0cc1433107cf015936a","sha1":"3faca02c644144dd1c4e8c3df7c142ba9b589c16","sha256":"36da311ffb04e7072d37805185eb31d04600ed349543314657e079593370422f","sha512":"9449e9752f909da386ead4783fe69043b26bd49278d4fca73d07ca2c4c5624001b9f555b8b65d4695132948528197f7c6dd8d0095ba848f61a9835879c2e8f94","ssdeep":"","tlshash":"6e01dce05529abd0e8c612fa9ad03947fca049ce27a2c855f9fed2590c047083c299cd","first_seen":"2026-01-06T07:53:06.827698Z","last_seen":"2026-03-27T16:40:09.19456Z","times_seen":3,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/vendor/js-cookie/3.0.5/js.cookie.js","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/vendor/js-cookie/3.0.5/js.cookie.js HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1327\r\netag: \"105d-1dc09d84-5f03615;br\"\r\nlast-modified: Sat, 26 Oct 1985 08:15:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0dEHQmgy%2BVRgonoh35Br%2FnAAyV%2FP7UONDXoXSxezm9JC7hxRjCBIiseBkN74K7p2upRwIkzqQqqrzIAjLldeUbEUZO4rVHB9F0ee3TSsG%2F5ul6Cx29%2BE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6120825ea25864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4189,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"3f4494c431a067221baccb5611bb1aa5","sha1":"466c13564f574b9359b6060a49ea813ced25c89c","sha256":"5f8b02d87028a3f689b8d9303a828e7ce2c16d47e10ca2cb7775d21c5741aecf","sha512":"17f7626b68ca304d768f0aa26036b2783f91afff234d6503db07dbb890746f34b07a74849d7b27e2a43fc15c975028b1e5b982023f3125db45af63aa52d8cb03","ssdeep":"96:/CKM08LT+SiQqKqL4HS4MECmkhk30QYOai/3a:aKM0wT+SiQqXL4HRC7hk30QYOaYK","tlshash":"5481026c28e625e21f072438dbaf65007374d51b049ede607c9ce3621f6ac3916f5aee","first_seen":"2023-07-22T22:41:15Z","last_seen":"2026-04-04T06:08:41.893304Z","times_seen":113,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/js/main-v3.9.2.js","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/js/main-v3.9.2.js HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 24391\r\netag: \"277de-68a9d798-5f02cb3;br\"\r\nlast-modified: Sat, 23 Aug 2025 15:00:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6hEictcerwtG9q6ryKXSH6tYWddlTMMYUDA%2BW%2Fd6dIfB%2FLN43P2Q3vyzBC9U5JAs%2Fl%2Fbv%2Fujm%2F%2BLOLY8ac0M31iTLAQXPNI%2F6kj%2BKpTHMmFMGiX%2F3cLY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6120825ea35864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":161758,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"802bc0ff1953cd26b1703c25b28cb7f3","sha1":"10d2eaced52955e5fc23fd1e6548ed6b7065a9f8","sha256":"ecb76b9607737231415402b7c8da5ed43a6e2a596ee666291ca2e2a87a30afc1","sha512":"f9fe1372ec3413f44d0542908e0036650a47fae01d13bf1a799b4c6894f2d255d3f1b359dc92d01237f207ce25b96de1971a1efe9b63bd664b526ef6973181b9","ssdeep":"1536:STCtWEqO2QTEvWHzIjsgHc7n3AYkoAJb0hp/TvxN0q2dmSWbBqhDu9WO7c5AAy:S2tWEqO2sTLAWbj9Cg","tlshash":"61f394c9f35c39978136309a5c2e15ce683c9536cd054cfbfc78a0a06ae8d7c916ae79","first_seen":"2026-01-06T07:53:06.879034Z","last_seen":"2026-03-27T16:40:09.242641Z","times_seen":3,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/cloudmailru.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/cloudmailru.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 258\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"102-64eaedec-5f02bc2;;;\"\r\nlast-modified: Sun, 27 Aug 2023 06:32:12 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wjZJ0beli1efGGJcj65oqcsEbHcAohgyd3sHwSqN2N9q5ujgpJGk020btB4KhHl6cv%2FtC%2Fx%2Ffl0cInj6wi%2Fyb4qFKRxdydNOAcjeyXm2L2B7I07v%2Fy2I\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081cd745864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":258,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"7fe2601f8894835363a192bb2e5b9e41","sha1":"c6e641d9d9e22b678e93f3a6a06bb5f6975ec7ca","sha256":"9f1f8471fbed2912e9f00067dc6297163efb2773cd6c815865b30be7f93021f6","sha512":"a7d553698b734b45deec0977625604c1c5509e05c99fbc53ee9009449f84378f0567dbee25720e0c6db31c6cb4e2bcdfa5f4b135444fc914ec008f7c1ab6f732","ssdeep":"","tlshash":"02d095d15317d83ecdfd90115ca8cda9cc70156466650047094d4049a503dd5c4fd45b","first_seen":"2026-01-06T07:53:06.842302Z","last_seen":"2026-03-27T16:40:09.218265Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/sendvid.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/sendvid.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 397\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"18d-61b2c572-5f02c17;;;\"\r\nlast-modified: Fri, 10 Dec 2021 03:11:46 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lEre8l4fk0poHOUGllY80BKWI0ZCtvfDlh73FdKs172uLagwUzyVaLtnU%2BBHRVT3MYHBjY5x5zmhW9Ch0d846pLUKLZCKo55dxZZ%2BepTweVsA5US3IyK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081fdf15864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":397,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"011babf36ae12235f0ef91131983bbbd","sha1":"4fe492d88c77d0321da7d3751428564c4c5d07e9","sha256":"2682c29adff7cf5a2271f4493716aa6719005a39d343ac50b751e512096a73af","sha512":"41fef85d257a6b6e1edffa44d8108aa178802c680daea67d1e1f83d64f59a01ec29b10c83c79d8e2346d1cf63481fa298b7df4f43ed1f5b469bbb90d3442b3b1","ssdeep":"","tlshash":"ace0f1bbb7116ee88e4c1f70c8b4d06e6c69c87943d08f39204a40cc08aca4bc468e16","first_seen":"2026-01-06T07:53:06.890269Z","last_seen":"2026-03-27T16:40:09.26794Z","times_seen":3,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/supervideo.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/supervideo.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 501\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 05 Mar 2026 07:24:44 GMT\r\netag: \"1f5-6200e5ce-5f02c29;;;\"\r\nlast-modified: Mon, 07 Feb 2022 09:26:38 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 371431\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PYt73Rgphgy2g0Yz3Zi1rTZlqpavdXYcLC3MLP2dsUqZwVKdhzFpkcjvGfN9TiGyIk5su%2FIW3UFzV66W5FqQvTlMXNp1dK4y%2BmeS39QZWOshXkKlZhd1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081fe085864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":501,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"621b9d8b0808416bad337df24695a665","sha1":"f3fd85d0bbdff757d4fabe5c8df0a1369bd46fe3","sha256":"d8a01fb04631d2c120fa2e814c7716deb375e250817e70ee9194d97376cf190d","sha512":"fe1848cf620865f8c60dc97969b209bd304b5fa8db4261b526393fb97eb51cafe90f85408aafdb2b93291b36517e2d25228f1893b3b05f18a834cc3002abdb8d","ssdeep":"","tlshash":"fbf005e9db4d8df8ef86ae29642ec881c7350d310d551d64388e48161793c0d8a91b40","first_seen":"2023-05-11T20:48:15Z","last_seen":"2026-03-27T16:40:09.224051Z","times_seen":20,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/uploady.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/uploady.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 236\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"ec-656c7a52-5f02c37;;;\"\r\nlast-modified: Sun, 03 Dec 2023 12:53:38 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kRgWI16gWXilH8uix%2F2PoimSt8dQULYIsqTUSL7NSbTsVPTOWrFeOb6aDyYOuaTZtYSYxEFnOfJzBjiiv496D7rDbuIAl4l7M%2FuPHXEt7hG3tw44F8ma\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6120820e245864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":236,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"a84621e8ba3d319cf2af942abe2e76f5","sha1":"05247025c097bfd1842dbc7476dd4f4dcc531cd0","sha256":"b5712394325113364d5a1130cd217e52a0fff2ecd9d25d2921d81e10cfb089ae","sha512":"69ba7529ee394882e3b98060534915574431c30be0c41ea85a4450b060ee018f79445080464d96953aeb355d2c26a4d447244f1fb05a4c89122b6a8c51875069","ssdeep":"","tlshash":"ded023d22105bd37d415133575c5d361fc173594a53b90464345cd3805d163310e4da6","first_seen":"2025-12-01T14:12:44.156727Z","last_seen":"2026-03-27T16:40:09.266431Z","times_seen":4,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/uptomega.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/uptomega.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 537\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"219-656bff9a-5f02c3b;;;\"\r\nlast-modified: Sun, 03 Dec 2023 04:10:02 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4fzKSkthVWDaANyVh31V5oOH998ilU1j%2FCPvK0jl4EPRA6llq9sTno1W31HQvBnRd5P4kykkykborKPzC8IGormVL3EDz7Gd3nTD0mf7O%2BZ6hjLFUS9Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6120820e275864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":537,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"bd319a23b55ba857cd74ff7e46a2d055","sha1":"e3e938748ab3d24047a6550cc9bf303b527a16cc","sha256":"fc2b689abcaa713826a0f2d3d46dd82f7b0d2b365cdd1f7b2b26ec78c2abc295","sha512":"3bfed9acd404fc321ffd8280d874887c65cb4c8308f0f45c2d2e05db24950403b8934238b269d3caf97e1f19161b40cbe6b0ce963261458e8776f37a62fff782","ssdeep":"","tlshash":"50f075f1432d95acd7a7c921177d80c46ff6100416f71408274af8a3b57dfa1c6eda82","first_seen":"2026-01-06T07:53:06.854447Z","last_seen":"2026-03-27T16:40:09.25756Z","times_seen":3,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/archive.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/archive.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 429\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"1ad-61082148-5f02bbe;;;\"\r\nlast-modified: Mon, 02 Aug 2021 16:46:00 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a61W4yWXnAQyVGldxrgvDI25quwPwdSunBHPFDdENy%2Bw8g5H2Osz%2F5iFMjVfvuHTrV5pQfWe%2BGqc1%2FoVJCGvV%2BUXKh3OtUSk7S1FQmvxW462BvABicgr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081bd6e5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":429,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced","md5":"e9d91d51e357ac719eef7cd4b2f5c21f","sha1":"28a01db59d8b3ae464322fd9859c05b9ce1c76ca","sha256":"a0839472c816f47651e055ec26a82bc4d3029b5ab1f3c1dc1ef72d0b1f2cf236","sha512":"5a8700cc1050422bd4dd9401bf0c9e28f2809b68fa86cb0fa1d34484431e4b1091519167ff744f7e662d4c8222f5d7c0b004a303a215fdf3298face2f6e0b892","ssdeep":"","tlshash":"2ae0aba29423dc6a9a394b5793f4f10b7731a3ca131a33a998c3e43485de85189c9f11","first_seen":"2026-01-06T07:53:06.873487Z","last_seen":"2026-03-27T16:40:09.265034Z","times_seen":3,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/vendor/font-awesome/6.7.2/webfonts/fa-solid-900.woff2","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/vendor/font-awesome/6.7.2/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/assets/vendor/font-awesome/6.7.2/css/all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 158220\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"26a0c-675c499e-5f03603;;;\"\r\nlast-modified: Fri, 13 Dec 2024 14:50:06 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uOnbfrc3GelalYvmI9kePeWYWbutEJgSEC%2FikL1Q5TB4M4nZ%2FdnF0%2BuUcvx20nCLsEkIktVumdQL%2BkX%2BnW99YP59QcXUQzJGLLlyexAxm45L9MdiDwdg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61208479f85864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":158220,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 158220, version 775.1280","md5":"4a6591ab5460ae5cbff1ecbd6e52193a","sha1":"7cd8afd6501962fda35d66f0e4c3b8815ac471d8","sha256":"aa75998623a391e61c6901794ace832e3ecdd288b56d608f21bea0411acc0b8e","sha512":"96c5d3283b71613b595b6b0420333bef5d64451af05c59dde27ec5b3e7cfe6e9549c604cddfbcb79cbc0fd4cd6f2e22a130c9a220b1b7ef933ac9df8c8e695d6","ssdeep":"3072:RauSB5FANIRLpsBaBrJGNG3ECNQztRvHHqkqLrlF:guSqN6ptrJGo3POh9KT9F","tlshash":"0ef312a710c6b95684a3a51b336adeb52c3ed363fcb6cd73be340114689da9c2e4d190","first_seen":"2024-12-19T10:41:23.153533Z","last_seen":"2026-04-04T12:47:51.329222Z","times_seen":20906,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/gdrive.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/gdrive.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 612\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"264-61082192-5f02be9;;;\"\r\nlast-modified: Mon, 02 Aug 2021 16:47:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Su3ZDRlAGIi8i0MzArQVYEbpbBpUIZ7mBlOO5H0gIagTiRMYFGjx4L7D8uw7yZmzVBD7Ma1N0M1R4nghlPc2r7T6Fj%2BCpdRUSThBpDUXGJltDOfsUd%2FT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081ddab5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":612,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"62b030f33d2a6611035d413af4e5037b","sha1":"949fac9da76169cdb208954c4beb329be8d214d0","sha256":"6789f153a40d851a274e0f341b320666b55f6f3609c7c727c2139261d3146da5","sha512":"babe16a9a87211b6381cee839cab26e10f81b593d78c7fbebf31d123a6aef34922e7ec19be39778324da7a0c3f793046b17fa10fb7c490420a79974cb551847b","ssdeep":"","tlshash":"81f002dd6059ec25d37ae1ba0507f9ddde8606cc20ade569805781f8507e60852b96d0","first_seen":"2025-11-01T18:20:41.42827Z","last_seen":"2026-03-27T16:40:09.254089Z","times_seen":4,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/mstream.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/mstream.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 572\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"23c-6372f3c6-5f02c03;;;\"\r\nlast-modified: Tue, 15 Nov 2022 02:04:54 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5nrq0KSki8ZDKLMXFzEHRuEUUWWgqcH8u3nx8FGN0akuddI10AuTKsLkoVKuYmIrFdYwTpuLs6CWgNBZX5LTxe%2FIBB7%2BaaaLMgtrwNaz89aUJsOBUFWg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081edd65864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":572,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"8a0c4321d6cc6acc814dc07488697e9c","sha1":"ce85f2c9c1c052b01cb157fa21c2002b6630559d","sha256":"87791fbe5cab7075a06a9844cd54083e7c1ec5442ae3e5df474a137c1b0847cf","sha512":"fd503b07c0f3ead3ecbd8d8be679f6e51ef80fc52dd9eaaa5873cf7b3ca439e433b1b12fbedb5d748dca35a02d7609193882a376fdf102e529c69937d655d439","ssdeep":"","tlshash":"0ef026d735a491bcdecf401e80661a21b0b4f3eb1652550fffc84858914999454fffd1","first_seen":"2026-01-06T07:53:06.885253Z","last_seen":"2026-03-27T16:40:09.241086Z","times_seen":3,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/pcloud.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/pcloud.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 304\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"130-61082152-5f02c0f;;;\"\r\nlast-modified: Mon, 02 Aug 2021 16:46:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9aIol4CbQkUlmyz3bHAafNW8jdtT2%2FQvJwGZ9hLKZCbWDd0Dy2Sxq76m8cdFYyaK%2FHK%2FYJXFhH1MkvX0H4X0bPsxLlr3p0hqylst3y0onau3VmWCADCg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d612081fde95864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":304,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"721b734ecc1c3cb24c0237b3bfe0dd49","sha1":"a0df6ef9fdfc85a5c3257563dce34dacf9b5d44e","sha256":"1e0f078b1b13b095bdb79c5372146d8c7abb7de8bd31da0c1d9f62c54d355d3f","sha512":"a545960e4e690ec51fee861011a4d21f9b2b044cc61358061d37adaa2bea2e2c2686566ddf11f406c10dc5aebcaffc76a04faf28d2320b98583284d720206016","ssdeep":"","tlshash":"2be0e78155714c5cd1170956f88ed547fc533510179567c10f1fcda5345565ad874373","first_seen":"2026-01-06T07:53:06.868158Z","last_seen":"2026-03-27T16:40:09.265734Z","times_seen":3,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/img/logo/youtube.png","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/img/logo/youtube.png HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 329\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 14:35:16 GMT\r\netag: \"149-610821b4-5f02c5e;;;\"\r\nlast-modified: Mon, 02 Aug 2021 16:47:48 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6zFWZG9W7%2FzhQEcGL332YMzbWZPYKNRIYzXwkk9f1Kd%2FSWTHLw4eX1igBxiaihX2OYJmh20o4tPn0dOyfNkvsxAvK34Pzg0w2TlXaVOdsTOqcGzYACXq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6120823e7d5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":329,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"04e7096bcaaeb47d84c6730ac4039efc","sha1":"4c78d0e6f8150e2109e5853a7df892238b60465f","sha256":"89edb4b5d63f7f3f422a4bda5d71a5838aa62e12bfbf7b417ec6942550c0a071","sha512":"a521a8681456d49047deda740c0d66b290bbbdb6f7c30fe84cbbf7d3c5ad7f7cef4980f848334068be8d7a6f00c9c13c163d6ae8cf7d2a39c6916c0371314575","ssdeep":"","tlshash":"41e0c0a233817a54c658883086b56944c87dd0e410d3a22e2064816f88293a488f421d","first_seen":"2025-08-02T16:04:27.767372Z","last_seen":"2026-03-27T16:40:09.202212Z","times_seen":5,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vplayer.fairuseonly.xyz/assets/vendor/bootstrap/4.6.2/js/bootstrap.bundle.js","fqdn":"vplayer.fairuseonly.xyz","domain":"fairuseonly.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vplayer.fairuseonly.xyz/","date":"2026-03-02T14:35:16.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fairuseonly.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:47:45 GMT","end":"Thu, 21 May 2026 16:45:24 GMT"},"fingerprint":{"sha1":"55:C5:D6:5F:7B:58:28:48:46:88:DB:02:AF:79:D6:6A:E4:01:19:1F","sha256":"05:3A:06:D8:DF:22:A6:5C:AC:52:95:0E:9D:A6:9A:9D:08:66:BB:B8:6A:0C:38:A4:A0:B9:5F:31:9E:41:96:0E"}}},"request":{"raw":"GET /assets/vendor/bootstrap/4.6.2/js/bootstrap.bundle.js HTTP/1.1\r\nHost: vplayer.fairuseonly.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vplayer.fairuseonly.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:35:16 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 44990\r\netag: \"384c7-62ceead0-5f02d0a;br\"\r\nlast-modified: Wed, 13 Jul 2022 15:54:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HiubyqT2yh74JZA59LuAuInymUphhciNWETHyYkX4wyYHlVXpH%2FN7UIbaY62Or%2FQm0p2zOdK7JVDKfaDFzN9M%2Bos0NXupdxu3kpoqNF3pwmUBxC%2BxOkM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6120823e835864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":230599,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (337)","md5":"5ae532666f4d22a7a52ab1d29f6966a8","sha1":"28fb4ae220d52c24195bbef5c91f62f2ef579b09","sha256":"15a00e75874401991699b80c563adbee4ab8049e3abda514883277b7b3bea13f","sha512":"7b34ddeda9f964ba46dca620a3b7cd3033240411f3bfb0fb3f6dfbda4186108ad8480d19422458b4551d55d59550263d5e08308b78865d28f022ff1e63630d6e","ssdeep":"3072:nXUiN6JsHhcZMJ6ZsqoBGa5fHWv0YAgKbi9vqsG:nb6JsBUMJ6ZvoBGa5fW0YAgD9v0","tlshash":"4c34a30e3dea70a31567606e87ef9149f231545f510df9047ccc96a82fa4e3492eabf8","first_seen":"2023-03-09T14:48:15Z","last_seen":"2026-04-01T03:28:06.42544Z","times_seen":300,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"vplayer.fairuseonly.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"vplayer.fairuseonly.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}