{"report_id":"f4a5ef5c-ed46-4bb7-b51f-7f98a420110d","version":6,"status":"done","tags":[],"date":"2025-09-20T22:48:39Z","url":{"schema":"http","addr":"vidplay.org","fqdn":"vidplay.org","domain":"vidplay.org","tld":"org"},"ip":{"addr":"172.67.133.140","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"vidplay.top/","fqdn":"vidplay.top","domain":"vidplay.top","tld":"top"},"title":"VidPlay - Stream Movies and Series Online Free in HD"},"submit":{"url":{"schema":"http","addr":"vidplay.org","fqdn":"vidplay.org","domain":"vidplay.org","tld":"org"},"ip":{"addr":"172.67.133.140","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-25T22:48:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"vidplay.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"p2yn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"paupsoborofoow.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"p2yn.com","ip":{"addr":"139.45.195.12","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":40878,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":826,"sent_data":595,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"vidplay.org","ip":{"addr":"172.67.133.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":4923393,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":6270,"sent_data":1847,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":283,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":418002,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"vidplay.top","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":220880,"first_seen":"No data","last_seen":"No data","alert_count":11,"request_count":11,"received_data":253077,"sent_data":5491,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"image.tmdb.org","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":53077,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":18,"received_data":464664,"sent_data":8280,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":3691,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":90781,"sent_data":440,"comment":"","tags":null,"fingerprints":null},{"fqdn":"paupsoborofoow.net","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":54853,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":111057,"sent_data":413,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"my.rtmark.net","ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":43911,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":834,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":1222,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":110172,"sent_data":1027,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"vidplay.top/","fqdn":"vidplay.top","domain":"vidplay.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab2215ed349972fc0bd049db1147bef1","sha1":"b2a2186bf13d3765a4343e7d27c9e559ffb563d4","sha256":"1774764bae3cf0957e8a21b3ecb3c2b6bcceabb944edec6395a513348c38ef37","sha512":"967df933232293206d49fe6c509e09056aec3f78a3115186985085489f1fe7fc9ede24262e269f14aaa8d7dc2161ee9f1fb87bb8a40495d530e3ea1f83e1fd51","ssdeep":"","tlshash":"bef0556a597b306f61337236364f82003fb810032019cf063f9c835a0f99b286e72a99","size":519,"data":"","first_seen":"2024-12-05T20:49:37.985952Z","last_seen":"2026-01-03T21:37:00.446996Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidplay.top/","fqdn":"vidplay.top","domain":"vidplay.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9fc1514dcff366d6804c48d8ca197b87","sha1":"a295bb11fd06cbb315fbc41a316946a3a2c3936b","sha256":"6cabf1b24d453386536bc78fd6927097f19f2fe20cbed7ac9714faa3806e9592","sha512":"2e609748ced055d5215dd6af5f02f8d2152408bad5c5cffd7af94555062bdfa9ca861004dafcc8cedc44e5b0b3c6b1c5813d00cef840719dba810a954a408f4f","ssdeep":"","tlshash":"37c02b8c220e0c7155fb2b008f3fb604b102331494d1b931880923444d30e03d754c50","size":153,"data":"","first_seen":"2025-05-09T09:58:27.943023Z","last_seen":"2026-03-08T15:35:34.92407Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-PDCDB1C2NM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"85c0671af2be7904903c9e04d54bd220","sha1":"5a53823548c625b029a208c59936cd994fcc9be4","sha256":"dd091ddae23c92f922f493b2a6b8f542702f9fae90808d9f202b3e464dfbf5e7","sha512":"9e484dccb5db61043fd837bcd90fbf8eb1fe9dc5af8a31ef99319001f7164dc7ab9fd07566473f6fb6c83c2b7e8991b02df1bc0127feba88ab1157eee0fdd6e9","ssdeep":"6144:8ErjVeLQd2sK+iFBbjSytugdH9I2/eTCGs:/PMLQd2l5Fbi2p","tlshash":"0e941ade73c674265396f478903f018ba5bb28a2b45cc899f189cce42d74a9a4137f7c","size":417398,"data":"","first_seen":"2025-09-20T22:49:10.196067Z","last_seen":"2025-09-20T22:49:10.196067Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidplay.top/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"vidplay.top","domain":"vidplay.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"77fe6e2178946e52850b0f7c3c411a26","sha1":"c099878d983d0693e1265ce26baf416b02a197d3","sha256":"f6b1bd7e06fd90c59a16627f43d2d892f22781162d39b6b7fe24059a52706fd1","sha512":"e7d859c38e45643789f493725484a6fc1b7f96eae1aa8d534e1af72c2fe5f507facbadeff944e5b3cd48042958e299e5acbbf94aa64d1ee565a82779c6ff0621","ssdeep":"192:Bpkz71e+t5r7xiYrDf6V9kbGrw3M1a+u0eNK6n:vKe+5Df67gMc70mK6","tlshash":"6d120bcfbe18bc588254169110bb65e620afc92560c5a90787d0b9e83f3f35daf0fe58","size":9902,"data":"","first_seen":"2025-09-20T21:57:31.469365Z","last_seen":"2025-09-20T22:49:10.103888Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"dec9d04043dc5f766a093dc565bfcabc","sha1":"3ccb8c23039ecbf32accfbf68e6ff1a8148cbb0b","sha256":"d221e89a412625e160ba236ba4afb5b88378eec12d34531e47b554b5f998691b","sha512":"d6f0d0860ebd03bbae1d0904607dc6f1e00edf5740b86f58bc4831eaa69cd04d7cb4696c71fa7b8b8a5ef62c5ddb63f3c67ddc37925d1dc533a3df6f2e2bafe9","ssdeep":"","tlshash":"6ed023a918758535a5dd014a60b6d3e8656170617711b344c2eecc6b6e11dd344f155c","size":217,"data":"","first_seen":"2025-09-20T22:49:10.270001Z","last_seen":"2025-09-20T22:49:10.270001Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paupsoborofoow.net/tag.min.js","fqdn":"paupsoborofoow.net","domain":"paupsoborofoow.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"168e9cd54a4bd7a8049a2e94d8502511","sha1":"6c008aafcda67252ce65c632633a4a6145a89565","sha256":"7d6bafded86bf409ccf1147160da3239da42b2126d36b41991ee3e1eb77fef6d","sha512":"17b5aee04f6d2b84578be12a079a08ef50fdabe03a14ae6d4022839da0b1500d4615fa17693b2e3844a2aa310d1bae03e6b952bac4bd1580f79081ca332f35e4","ssdeep":"1536:KO5QiEOxo8EMC9uqkoc+ixHLyR45HjQ7anWn6wTEMtwO2C:KO5XUM/ui1CTanW6GEEwO2C","tlshash":"5db31b9c625334711d7a9129385fc44daeeaef80148e89e4d0daac732653075d3bbfe8","size":109852,"data":"","first_seen":"2025-09-20T16:56:22.323646Z","last_seen":"2025-09-22T07:30:03.193422Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidplay.org/index.html","fqdn":"vidplay.org","domain":"vidplay.org","tld":"org"},"ip":{"addr":"172.67.133.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"98b0207e785d5c6064999e9258ecf1b2","sha1":"6994f14e2f5abb31a10eb794c8d9cdf2fa320d5e","sha256":"2b2e03fceeec830a2d2bb21ba003967895551187e2f988a6869d3f729818ef78","sha512":"d0306c4eb0c5cc248dbcae78ca965aa30f26b79c3a0dfd433982d4850205780539ba51dfed149e669e6fd89c20ed8d77912e65fbcb0b2a2dd457a3b060c069e4","ssdeep":"","tlshash":"ccb012cf9249150823919071883bb28c103b32ee184c6f5a4002054402092de302feda","size":102,"data":"","first_seen":"2025-09-20T22:49:10.279973Z","last_seen":"2025-09-20T22:49:10.279973Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidplay.top/assets/vid.js?v=1.3","fqdn":"vidplay.top","domain":"vidplay.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5da0bde341bc219b8763fcf6def1b7a","sha1":"5836ba66ad348fd938df60bc37dc1971d7337f45","sha256":"045f74d86ac5f8f97116b22b4787e7018625aae7e64a991edec87ed79dc38753","sha512":"ded561b39fdd817aaf19cf7b39729222f264d05c8db734d6b7b4827e26199d23e4cc9b76b072172bfca925b26131c006cf0a5f29e7f335f056538333d34911f6","ssdeep":"","tlshash":"7a71a92d521191b780b723fada9a63c4fe6814e7940052a93ebc968d0fb4cd05772edf","size":3643,"data":"","first_seen":"2025-05-09T09:58:27.939842Z","last_seen":"2026-03-08T15:35:34.885715Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"641dd14370106e992d352166f5a07e99","sha1":"eda46747c71d38a880bee44f9a439c3858bb8f99","sha256":"a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af","sha512":"a6e981b23351186aa43f32879dd64c6801be6e2af7ef8b0e472cccdeeba52d5d7894de4bcb292a364f1e11e525524077534338140a72687ada4fae62849843a5","ssdeep":"1536:IjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvg:IeeIygP3fulzhsz8jlvaDioQ47GKH","tlshash":"d193f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","size":89795,"data":"","first_seen":"2023-03-26T04:59:07Z","last_seen":"2026-05-13T17:02:24.148415Z","times_seen":23527,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidplay.top/","fqdn":"vidplay.top","domain":"vidplay.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"811a6b17e4d8ddf788d59dc30efb56b1","sha1":"c3906af8deb4d9164089dcb9fc92a4383cb52729","sha256":"79b466985bf7c6133756e1399c3f186d24c7bd9eb71a74cafa64ec650b3517b7","sha512":"1f36a77a62c3732fde797c8f8a5942a3235d44202371b6bf538e8d2fca5da0c207bfb13deebeb96cbcee6f568d6d3d7df2a72971916c3a52681d52e0a370d9f3","ssdeep":"","tlshash":"7fd022be34285630088810ad3033d76cacb7302036523d20800dc82cca70ed71c92c85","size":198,"data":"","first_seen":"2025-05-09T09:58:27.94407Z","last_seen":"2025-12-07T09:51:24.08081Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidplay.top/","fqdn":"vidplay.top","domain":"vidplay.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f6c8d1c75d1ef69603e04eef2e2c96e","sha1":"5866e6b6f9ed488be3cd0aa000dccf9c54828dc4","sha256":"94293223fd27287aa62588a9b23efe8f1960de2dfc379041159dbc8811cac4fb","sha512":"b6b1f82a2ea58b6f56001d0f45264d53111c20ffd046a48604323278c53f0877e97ebd95f950ca1ec31e3d2895400f042c348cebfa42716702e3d24894b79a20","ssdeep":"","tlshash":"2c11c0793a2a6534c9d5418b317ee7a93d3260717b02a184c3adcc299d18e8714efdbe","size":902,"data":"","first_seen":"2025-09-20T22:49:10.31023Z","last_seen":"2025-09-20T22:49:10.31023Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"vidplay.top/cdn-cgi/challenge-platform/h/g/jsd/r/0.6162997470986268:1758404809:C35i7RmxwbRBBH7PdLZjd7YuQDcbi2yLKqvq5tRX58A/9824de9f092856c4","fqdn":"vidplay.top","domain":"vidplay.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:20.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidplay.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 19:56:49 GMT","end":"Sat, 29 Nov 2025 20:55:13 GMT"},"fingerprint":{"sha1":"82:BC:8A:D1:4E:D0:62:6F:A5:96:8A:82:41:75:FF:72:30:A0:1B:2E","sha256":"4D:10:E8:5E:75:9A:AF:E0:EA:A7:76:9D:FA:EE:3E:B7:B8:D9:12:BA:A8:1E:33:8B:CF:46:A9:0A:82:F5:37:2A"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/r/0.6162997470986268:1758404809:C35i7RmxwbRBBH7PdLZjd7YuQDcbi2yLKqvq5tRX58A/9824de9f092856c4 HTTP/1.1\r\nHost: vidplay.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12066\r\nOrigin: https://vidplay.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidplay.top/\r\nCookie: PHPSESSID=3f5mcl8s887v5n4oemgbvhpgj4; _ga_PDCDB1C2NM=GS2.1.s1758408499$o1$g0$t1758408499$j60$l0$h0; _ga=GA1.1.1683388782.1758408500\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Sep 2025 22:48:20 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nset-cookie: cf_clearance=gGEu1Zuq3NCTK7xjLlHCQiFch95DzWp2iKXMNAHnPKQ-1758408500-1.2.1.1-Zi5VDZu7OtrYS8IW0OhK5XY3pun4TjOzpazd3paDM1b6JMWRbBUY9vH.9KHXKgvDItHdB9yTLh7r1MUsMMuXoTiypvxwE_huet1mgiZyxf2gDU6.HQlY4ILtDoi27kZx3hvPK0hdwLMc217p1gqCKi_gNPEbC.SVFs7mFbko2JyiNhanUUN5ypxheUko8FshPXmeGyAYqVDF6sAHovL9Ez3xLD079uvge18NmsXj_HI; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=vidplay.top; Expires=Sun, 20 Sep 2026 22:48:20 GMT\r\ncf-ray: 9824dea66f4c0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T17:27:39.929878Z","times_seen":15121638,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"vidplay.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vidplay.top/fav-192.png","fqdn":"vidplay.top","domain":"vidplay.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:19.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidplay.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 19:56:49 GMT","end":"Sat, 29 Nov 2025 20:55:13 GMT"},"fingerprint":{"sha1":"82:BC:8A:D1:4E:D0:62:6F:A5:96:8A:82:41:75:FF:72:30:A0:1B:2E","sha256":"4D:10:E8:5E:75:9A:AF:E0:EA:A7:76:9D:FA:EE:3E:B7:B8:D9:12:BA:A8:1E:33:8B:CF:46:A9:0A:82:F5:37:2A"}}},"request":{"raw":"GET /fav-192.png HTTP/1.1\r\nHost: vidplay.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidplay.top/\r\nCookie: PHPSESSID=3f5mcl8s887v5n4oemgbvhpgj4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Sep 2025 22:48:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 7546\r\nserver: cloudflare\r\nlast-modified: Tue, 28 May 2024 05:23:10 GMT\r\naccept-ranges: bytes\r\nx-frame-options: SAMEORIGIN\r\ncache-control: public, max-age=1209600\r\nage: 739457\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pUPOA3L5DoaV2lSDgJfvDMUA%2Bsj3KomgNcFsS4MXj7yQAz27So6HVGE8K8X99MikX3t6ktXhpiL8OjJ4rQOYCqbP0F4ufvmWkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9824dea38d850b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7546,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"1d5dc0559328cffef4956c2ea0e2f12f","sha1":"a8b7ce3ac5a495f28fa6e277311c48763947efb0","sha256":"f8a9d6d5ed118f8ba163058ca4ff99438e36c2e2e83412929a66520d78689018","sha512":"7e1320d0fd8aa9b7e7cae72df8c432449b5c9c290895526b2c695ce999a3feb078416ee09cbf444b52965fc78d3a415bf6f4365d55c630090567d40dc4778bac","ssdeep":"192:ZROLKupFHypsDaqEvZC//DwlRAmBabboUkTeaWi6JiLsdb1i:ZR7uXypsDavvZ8/AAkabbAtB6JysdBi","tlshash":"d4f1af77920325bb6b43203157a2229174bcb5f8de182959b04eeaf0d5fe8519c03fa9","first_seen":"2024-09-03T23:55:56Z","last_seen":"2026-03-08T15:35:34.914113Z","times_seen":32,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"vidplay.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/aFRDH3P7TX61FVGpaLhKr6QiOC1.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:19.802Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /t/p/w342/aFRDH3P7TX61FVGpaLhKr6QiOC1.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidplay.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T17:27:39.929878Z","times_seen":15121638,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/ombsmhYUqR4qqOLOxAyr5V8hbyv.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"169.150.247.34","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:19.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 19:10:42 GMT","end":"Sat, 08 Nov 2025 19:10:41 GMT"},"fingerprint":{"sha1":"3F:7E:92:16:1B:3D:59:B9:39:74:F1:BD:DA:C6:BA:C4:FA:B8:8B:C8","sha256":"9A:48:B1:0E:F5:4A:36:6E:52:DB:E9:89:CC:31:2C:B0:08:CF:C3:2A:DB:81:5F:8A:6B:7C:61:BA:CF:4D:35:18"}}},"request":{"raw":"GET /t/p/w342/ombsmhYUqR4qqOLOxAyr5V8hbyv.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidplay.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 22:48:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21712\r\nserver: BunnyCDN-DE1-1077\r\ncdn-pullzone: 775336\r\ncdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"6823da0b-54d0\"\r\nlast-modified: Tue, 13 May 2025 23:47:23 GMT\r\ncdn-storageserver: NY-703\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 754\r\nperma-cache: HIT\r\ncdn-proxyver: 1.27\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/14/2025 01:16:20\r\ncdn-edgestorageid: 755\r\ncdn-requestid: a97bed3f398742adeeb7018faf1fcaa5\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":21712,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d995605e8a0d81ec1a6040e3d8efbe9d","sha1":"c07f6db17fe167c67481239f23d2c2196f819edf","sha256":"88c1250e7549a19fd8f071376550786266fad9c1f9573c512b9533ccbe06e640","sha512":"e5e426871a346f8ee5a48b07bbb9dd639a89bca4748bb612af972b455fe163481b17277d99c380b40338c580f042142e74751520d027035ab4b6b6bb96516546","ssdeep":"384:u25iC9CwOT5ZPc4gGac0OxYpItd+WPi4qa1v++yQsyfIQC4:ueswOTnEEacfaQyQsyw/4","tlshash":"1fa2e19c7ce0843c5b67bda103232566d1d4beae38dff0451f2834c9a958563eef2156","first_seen":"2025-05-23T16:59:43.815499Z","last_seen":"2026-03-21T03:27:36.71209Z","times_seen":84,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":67,"dns":12,"connect":31,"send":0,"wait":85,"receive":28,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/6H6p82aWQFEKEuVUiZll6JxV8Ft.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"169.150.247.34","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:19.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 19:10:42 GMT","end":"Sat, 08 Nov 2025 19:10:41 GMT"},"fingerprint":{"sha1":"3F:7E:92:16:1B:3D:59:B9:39:74:F1:BD:DA:C6:BA:C4:FA:B8:8B:C8","sha256":"9A:48:B1:0E:F5:4A:36:6E:52:DB:E9:89:CC:31:2C:B0:08:CF:C3:2A:DB:81:5F:8A:6B:7C:61:BA:CF:4D:35:18"}}},"request":{"raw":"GET /t/p/w342/6H6p82aWQFEKEuVUiZll6JxV8Ft.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidplay.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 22:48:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12684\r\nserver: BunnyCDN-DE1-1077\r\ncdn-pullzone: 775336\r\ncdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"680851a8-318c\"\r\nlast-modified: Wed, 23 Apr 2025 02:34:16 GMT\r\ncdn-storageserver: NY-346\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 918\r\nperma-cache: HIT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/02/2025 18:09:37\r\ncdn-edgestorageid: 1081\r\ncdn-requestid: 66371e48cf89ae15d1e2292355c254df\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":12684,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3a352e57775247345ea3993c3e4e223c","sha1":"2d3510aa3568391d12305616109d8d719acce07d","sha256":"63a143c9b5af02718396028bdda9182e118ac5fb8a2af24664b8b824e38c4137","sha512":"07b9682ba92793c12e54e3cbf10f2022e308e8768f2cece21e4989ec84054956df253394b5e0a28c5f313226030788ac9d8e36abddfe83d58ffac5941c2e9980","ssdeep":"192:4yTvmbgKIz5ZijHwHVpZJUgxri95dUyi5NOny/yWMO97NAGqbi+wzHpFSFlfy:4y6baz5kjYZJUgl3BMcNLwPwzHKlfy","tlshash":"3942bfe6d4f564f6adc857690043be920403f9604169777794af08e3a2249fe9ac3f53","first_seen":"2025-06-29T12:57:25.703411Z","last_seen":"2025-11-12T08:35:46.89094Z","times_seen":8,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/wEgfIrmSUibiXjp9qWLL35g1nNr.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"169.150.247.34","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:19.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 19:10:42 GMT","end":"Sat, 08 Nov 2025 19:10:41 GMT"},"fingerprint":{"sha1":"3F:7E:92:16:1B:3D:59:B9:39:74:F1:BD:DA:C6:BA:C4:FA:B8:8B:C8","sha256":"9A:48:B1:0E:F5:4A:36:6E:52:DB:E9:89:CC:31:2C:B0:08:CF:C3:2A:DB:81:5F:8A:6B:7C:61:BA:CF:4D:35:18"}}},"request":{"raw":"GET /t/p/w342/wEgfIrmSUibiXjp9qWLL35g1nNr.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidplay.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 22:48:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16338\r\nserver: BunnyCDN-DE1-1077\r\ncdn-pullzone: 775336\r\ncdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Thu, 24 Jul 2025 23:04:55 GMT\r\nperma-cache: MISS\r\nx-bo-server: LA-289\r\nx-downloadsize: 27967\r\nx-bo-origindownloadtime: 173\r\nx-bo-compressionratio: 41.58%\r\nx-bo-processingtime: 10\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/24/2025 23:04:55\r\ncdn-edgestorageid: 756\r\ncdn-requestid: 9c1dd59dbd9578288ab712b939495016\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":16338,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2785aa881cde01b25bd2a0870783222c","sha1":"332c48468f042488809a5e8d1537a86136b0e229","sha256":"d137af8db6429b4c535f1fa579838509fb8a9f6d5c6a455f57a8001678a43c51","sha512":"1bb71cb6f33a60231f10485fb16f52f3cedd9de6d59974d4d820650e70c7b818c802834ab1e48b9762cc9f60a25b0ca2203bb67492bda7df44e5ce8f9f2aaf0e","ssdeep":"384:VBEKVbOETIpzIfGaJX6S+A1Q99cw4r4BW7tQsuxGe1c2vVZvOOHURfRJIhs:VBEKVKE8pzIfZJX6S+AwR40BWRDpe1hi","tlshash":"e472d18af3cabd3645302446586c74b7cb79731af092bc06d62b9332677afa7c311952","first_seen":"2025-08-01T14:27:43.969353Z","last_seen":"2025-09-20T22:49:09.952629Z","times_seen":2,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":97,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:19.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /ajax/libs/jquery/3.6.4/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidplay.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31154\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 19 Sep 2025 11:59:59 GMT\r\nexpires: Sat, 19 Sep 2026 11:59:59 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nlast-modified: Tue, 04 Apr 2023 03:27:01 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 125300\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":89795,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"641dd14370106e992d352166f5a07e99","sha1":"eda46747c71d38a880bee44f9a439c3858bb8f99","sha256":"a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af","sha512":"a6e981b23351186aa43f32879dd64c6801be6e2af7ef8b0e472cccdeeba52d5d7894de4bcb292a364f1e11e525524077534338140a72687ada4fae62849843a5","ssdeep":"1536:IjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvg:IeeIygP3fulzhsz8jlvaDioQ47GKH","tlshash":"d193f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-03-26T04:59:07Z","last_seen":"2026-05-13T17:02:24.148415Z","times_seen":23527,"resource_available":true,"data":null}},"time_used":304,"timings":{"blocked":127,"dns":3,"connect":20,"send":0,"wait":22,"receive":21,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidplay.top/assets/vid.js?v=1.3","fqdn":"vidplay.top","domain":"vidplay.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:19.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidplay.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 19:56:49 GMT","end":"Sat, 29 Nov 2025 20:55:13 GMT"},"fingerprint":{"sha1":"82:BC:8A:D1:4E:D0:62:6F:A5:96:8A:82:41:75:FF:72:30:A0:1B:2E","sha256":"4D:10:E8:5E:75:9A:AF:E0:EA:A7:76:9D:FA:EE:3E:B7:B8:D9:12:BA:A8:1E:33:8B:CF:46:A9:0A:82:F5:37:2A"}}},"request":{"raw":"GET /assets/vid.js?v=1.3 HTTP/1.1\r\nHost: vidplay.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidplay.top/\r\nCookie: PHPSESSID=3f5mcl8s887v5n4oemgbvhpgj4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Sep 2025 22:48:19 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 25 Apr 2025 08:53:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nage: 735\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SteROjmuPsE%2B4DmEOLnrWYKOiPXolRLIkdoQ5PbHwrLK9OaUUUpIO7FRsjmRFxhKL8FveS5sZYT6LWoUHU57Q0VgFLsCP7og5w%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9824dea13c260b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3643,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"e5da0bde341bc219b8763fcf6def1b7a","sha1":"5836ba66ad348fd938df60bc37dc1971d7337f45","sha256":"045f74d86ac5f8f97116b22b4787e7018625aae7e64a991edec87ed79dc38753","sha512":"ded561b39fdd817aaf19cf7b39729222f264d05c8db734d6b7b4827e26199d23e4cc9b76b072172bfca925b26131c006cf0a5f29e7f335f056538333d34911f6","ssdeep":"","tlshash":"7a71a92d521191b780b723fada9a63c4fe6814e7940052a93ebc968d0fb4cd05772edf","first_seen":"2025-05-09T09:58:27.939842Z","last_seen":"2026-03-08T15:35:34.885715Z","times_seen":19,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"vidplay.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vidplay.top/","fqdn":"vidplay.top","domain":"vidplay.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-20T22:48:18.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidplay.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 19:56:49 GMT","end":"Sat, 29 Nov 2025 20:55:13 GMT"},"fingerprint":{"sha1":"82:BC:8A:D1:4E:D0:62:6F:A5:96:8A:82:41:75:FF:72:30:A0:1B:2E","sha256":"4D:10:E8:5E:75:9A:AF:E0:EA:A7:76:9D:FA:EE:3E:B7:B8:D9:12:BA:A8:1E:33:8B:CF:46:A9:0A:82:F5:37:2A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: vidplay.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 22:48:19 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XzX1CEuMHvEaz6E%2BkhT22v0rn0GlSmpTyb3wyy4nxiuRgm%2FlaUJP82JkJ0QTBMCznVVCeiWhYVqbXjy2ebnCnDFRMAN5LIVb3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: PHPSESSID=3f5mcl8s887v5n4oemgbvhpgj4; HttpOnly; Secure; Path=/\r\ncf-ray: 9824de9f092856c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72462,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (337), with CRLF line terminators","md5":"61f032641c0cf1b39f9b2d377df9af0a","sha1":"d0449698293904d736b9768b60d8e5614dfe9aab","sha256":"6ec2add42aa07d4f675b6a777f029596134b0908d4433d9c6ae18ec64aeb2bbe","sha512":"38cd30f97530829e25a839b4c1fb0d658b300c1b37563e040da9637b64b5bcd6ecab814184dfd3c69b1d183be81c9c5583ab8e9d760b7e8a6205955a575624c2","ssdeep":"384:ptz/sfwKHcw0OA+RZwWK0L0eSr5ZLnx/w:3zUYQcWP6r5ZDx/w","tlshash":"c9633020868011535837c2c1e962bb9afb64824b931b471476fe6763bfffc74a913396","first_seen":"2025-09-20T22:49:09.991936Z","last_seen":"2025-09-20T22:49:09.991936Z","times_seen":1,"resource_available":false,"data":null}},"time_used":490,"timings":{"blocked":155,"dns":138,"connect":1,"send":0,"wait":179,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"vidplay.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vidplay.top/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"vidplay.top","domain":"vidplay.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:19.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidplay.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 19:56:49 GMT","end":"Sat, 29 Nov 2025 20:55:13 GMT"},"fingerprint":{"sha1":"82:BC:8A:D1:4E:D0:62:6F:A5:96:8A:82:41:75:FF:72:30:A0:1B:2E","sha256":"4D:10:E8:5E:75:9A:AF:E0:EA:A7:76:9D:FA:EE:3E:B7:B8:D9:12:BA:A8:1E:33:8B:CF:46:A9:0A:82:F5:37:2A"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: vidplay.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=3f5mcl8s887v5n4oemgbvhpgj4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sat, 20 Sep 2025 22:48:19 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/f78657f80e4b/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9824dea39d870b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9902,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T17:27:39.929878Z","times_seen":15121638,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"vidplay.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/7SHFZKfd270y47sXN2WsURUO3ml.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"169.150.247.34","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:19.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 19:10:42 GMT","end":"Sat, 08 Nov 2025 19:10:41 GMT"},"fingerprint":{"sha1":"3F:7E:92:16:1B:3D:59:B9:39:74:F1:BD:DA:C6:BA:C4:FA:B8:8B:C8","sha256":"9A:48:B1:0E:F5:4A:36:6E:52:DB:E9:89:CC:31:2C:B0:08:CF:C3:2A:DB:81:5F:8A:6B:7C:61:BA:CF:4D:35:18"}}},"request":{"raw":"GET /t/p/w342/7SHFZKfd270y47sXN2WsURUO3ml.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidplay.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 22:48:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 44574\r\nserver: BunnyCDN-DE1-1077\r\ncdn-pullzone: 775336\r\ncdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Sat, 06 Sep 2025 15:21:28 GMT\r\ncdn-cachedat: 09/10/2025 09:32:10\r\nx-bo-server: LA-293\r\nx-downloadsize: 55578\r\nx-bo-origindownloadtime: 156\r\nx-bo-compressionratio: 19.8%\r\nx-bo-processingtime: 30\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.34\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1053\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: f91478320ca70852565a38ca4db54709\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":44574,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6596bbbcee19f99a653e6e3bc75f8820","sha1":"2d3ba4c88507431bd9a71c1d63efade2025c5a2c","sha256":"a104f7fc3af5ffae8fe542c893053cd39ba1406b807bda607c9c66cf5976317f","sha512":"c1cd64dbaf678a836d3496a98cfc82a71ea007eb2b65053052db7c2e76958e0d21795d07b8e20af57a34ef108f76e6dfb19ccc67e9a3546a95a7c883e8687e11","ssdeep":"768:s2ePC3/Ugsm5jtS4D7sWS4ThQMJgwc53zazthARiGg/rcbjHVMEqpdZ1XqPAXRiw:sXC3MgsCjt3D71NTqMdkDaph3Ggmj1Md","tlshash":"6e13f2010a7ea0374f8f4f7964fceccafa51b78a485f76e2670415d3ed38a9504526e4","first_seen":"2025-09-20T19:23:01.385228Z","last_seen":"2025-10-21T17:05:47.952605Z","times_seen":4,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":99,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p2yn.com/5/9300185/?oo=1\u0026js_build=iclick-v1.1573.0\u0026userId=08024aa2ef3e4f87f4f4294d7fcaf5bb\u0026dmn=paupsoborofoow.net\u0026tt=2\u0026ix=0","fqdn":"p2yn.com","domain":"p2yn.com","tld":"com"},"ip":{"addr":"139.45.195.12","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:20.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"p2yn.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Jul 2025 05:20:50 GMT","end":"Thu, 09 Oct 2025 05:20:49 GMT"},"fingerprint":{"sha1":"E8:3B:A2:4D:EB:4F:0F:D2:79:0E:9C:53:22:0E:70:BA:3A:7F:13:47","sha256":"4E:E4:3D:2E:6A:DC:A6:7C:EC:32:78:17:A8:75:CE:17:7A:E1:2D:F8:98:6F:D3:B4:05:B1:5D:2C:4D:33:75:7B"}}},"request":{"raw":"POST /5/9300185/?oo=1\u0026js_build=iclick-v1.1573.0\u0026userId=08024aa2ef3e4f87f4f4294d7fcaf5bb\u0026dmn=paupsoborofoow.net\u0026tt=2\u0026ix=0 HTTP/1.1\r\nHost: p2yn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2560\r\nOrigin: https://vidplay.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidplay.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 22:48:20 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://vidplay.top\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T17:27:39.929878Z","times_seen":15121638,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":88,"dns":1,"connect":26,"send":0,"wait":28,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"p2yn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vidplay.org/favicon.ico","fqdn":"vidplay.org","domain":"vidplay.org","tld":"org"},"ip":{"addr":"172.67.133.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidplay.org/index.html","date":"2025-09-20T22:48:15.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidplay.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 Aug 2025 06:07:46 GMT","end":"Tue, 25 Nov 2025 07:06:03 GMT"},"fingerprint":{"sha1":"AF:6D:8A:7A:FD:AE:AB:0B:04:E1:C8:78:DF:68:3F:AA:C8:A4:35:88","sha256":"E6:CD:DB:C2:EF:94:03:4C:E9:08:78:E0:62:77:54:C8:98:23:EF:B0:3B:B0:DE:22:C2:AB:8A:85:CE:FE:45:33"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: vidplay.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vidplay.org/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\nlocation: /index.html\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z5Z97yIDLIUCdbUngPKOrSGMGn94CKLugZ5EDrsbjnCCcLSpmJP1JjD32zC6a8SjVEnZUCyz6xNKmuzDk9hzVuDQB0OP%2FBzpoQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 20 Sep 2025 22:48:15 GMT\r\nserver: cloudflare\r\ncf-ray: 9824de8b7e3bb51d-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":899,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T17:27:39.929878Z","times_seen":15121638,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paupsoborofoow.net/tag.min.js","fqdn":"paupsoborofoow.net","domain":"paupsoborofoow.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:19.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paupsoborofoow.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Jul 2025 08:38:08 GMT","end":"Sun, 26 Oct 2025 09:36:33 GMT"},"fingerprint":{"sha1":"BC:CC:40:D1:78:9B:3A:40:A4:82:BA:51:F6:DE:0F:30:AB:F1:68:9F","sha256":"FD:12:67:67:C3:BF:59:D5:E2:B1:37:D3:45:6E:FD:57:1D:99:D4:E6:2C:72:8D:62:A4:43:50:D5:AE:0D:78:80"}}},"request":{"raw":"GET /tag.min.js HTTP/1.1\r\nHost: paupsoborofoow.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidplay.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 22:48:19 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-trace-id: 2e0e16c5ce89565d77f833d2c743f7d9\r\ncache-control: public, max-age=600, s-maxage=1800\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 1408\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 20 Sep 2025 22:24:51 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xHGSgHhW0IQlTUlUtnYRdotnu2%2BxfDzTWZFM3M0gg6Uxa6%2BfwjKxqbguuPP6JXC1MvAGoguva0XGSQatb883VhRKfHcEEb41uvwHfVaI32wtDA%3D%3D\"}]}\r\ncf-ray: 9824dea30d295ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109852,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"168e9cd54a4bd7a8049a2e94d8502511","sha1":"6c008aafcda67252ce65c632633a4a6145a89565","sha256":"7d6bafded86bf409ccf1147160da3239da42b2126d36b41991ee3e1eb77fef6d","sha512":"17b5aee04f6d2b84578be12a079a08ef50fdabe03a14ae6d4022839da0b1500d4615fa17693b2e3844a2aa310d1bae03e6b952bac4bd1580f79081ca332f35e4","ssdeep":"1536:KO5QiEOxo8EMC9uqkoc+ixHLyR45HjQ7anWn6wTEMtwO2C:KO5XUM/ui1CTanW6GEEwO2C","tlshash":"5db31b9c625334711d7a9129385fc44daeeaef80148e89e4d0daac732653075d3bbfe8","first_seen":"2025-09-20T16:56:22.323646Z","last_seen":"2025-09-22T07:30:03.193422Z","times_seen":49,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":20,"dns":1,"connect":1,"send":0,"wait":6,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"paupsoborofoow.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/im9oE8b6yAXNGTVwSYFZ5TmXgkc.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"169.150.247.34","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:19.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 19:10:42 GMT","end":"Sat, 08 Nov 2025 19:10:41 GMT"},"fingerprint":{"sha1":"3F:7E:92:16:1B:3D:59:B9:39:74:F1:BD:DA:C6:BA:C4:FA:B8:8B:C8","sha256":"9A:48:B1:0E:F5:4A:36:6E:52:DB:E9:89:CC:31:2C:B0:08:CF:C3:2A:DB:81:5F:8A:6B:7C:61:BA:CF:4D:35:18"}}},"request":{"raw":"GET /t/p/w342/im9oE8b6yAXNGTVwSYFZ5TmXgkc.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidplay.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 22:48:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29646\r\nserver: BunnyCDN-DE1-1077\r\ncdn-pullzone: 775336\r\ncdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Tue, 02 Sep 2025 07:33:49 GMT\r\ncdn-cachedat: 09/12/2025 12:46:46\r\nx-bo-server: LA-289\r\nx-downloadsize: 40952\r\nx-bo-origindownloadtime: 157\r\nx-bo-compressionratio: 27.61%\r\nx-bo-processingtime: 12\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.34\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 722\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 5a9f8b83ef01006a8fef577b3b0039b4\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":29646,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3b1daf0893be9f34c1e9f6abc5f6a733","sha1":"2f0e904177bbd3181f121d9cfc353b7c02a67e44","sha256":"d862d74bd1896eb1daa1371bda1cb54bc437d133bc3c855faa37b77f25650159","sha512":"d841b08a4a12eb77c6eb9cfe9641f362e775500c70ed6c2f9ab9d8da94c24abed68950295d88a951de8bb7680ae2ac086d9d345d842038cc44f5a9f7773e7847","ssdeep":"768:7Yw6MEsxbsGd8k4D5ZmOhyxgtf6yaKTxhmYgKOXXhs:7YPfs91dC1ZmOftfztTcO","tlshash":"0dd2e111d3f12961458336e8d7bf1e18990dd9873ab86c8a8ac03a23772fd3d768d2d5","first_seen":"2025-09-20T19:23:01.399194Z","last_seen":"2025-09-20T22:49:10.022635Z","times_seen":2,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":88,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidplay.top/themes/placeholder.png","fqdn":"vidplay.top","domain":"vidplay.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:19.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidplay.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 19:56:49 GMT","end":"Sat, 29 Nov 2025 20:55:13 GMT"},"fingerprint":{"sha1":"82:BC:8A:D1:4E:D0:62:6F:A5:96:8A:82:41:75:FF:72:30:A0:1B:2E","sha256":"4D:10:E8:5E:75:9A:AF:E0:EA:A7:76:9D:FA:EE:3E:B7:B8:D9:12:BA:A8:1E:33:8B:CF:46:A9:0A:82:F5:37:2A"}}},"request":{"raw":"GET /themes/placeholder.png HTTP/1.1\r\nHost: vidplay.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidplay.top/\r\nCookie: PHPSESSID=3f5mcl8s887v5n4oemgbvhpgj4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Sep 2025 22:48:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 1606\r\nserver: cloudflare\r\nlast-modified: Mon, 04 Mar 2024 17:09:33 GMT\r\naccept-ranges: bytes\r\nx-frame-options: SAMEORIGIN\r\ncache-control: public, max-age=1209600\r\nage: 612698\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3iYTG1zmJVXRYQ4Bosf3f%2Br%2BDNE7wkodtYBrqJer%2FAf9uY6rzLJOnzM8ZYX9ufDmOfGvhGEin4SUiEC814x106UkrRhqy36peQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9824dea13c250b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1606,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 342 x 513, 8-bit/color RGB, non-interlaced","md5":"c31a2d9165c507eb74f42d9a5bd951eb","sha1":"99f560e3437ca40beb662017470c95285cb4bcea","sha256":"f441b750ba8324b03be2f976dbfdd550a5beac5aa1ba880c2820becdffa63f97","sha512":"10d93eb910ab8f092d5a5bb33abb63f4739715f047c0e7168b4636e7ce90bff299dfe27f8c1356a6e9c38b0d67c5f42cc2f2c5fd77e5f61945e75a57ea124b12","ssdeep":"","tlshash":"5c3147c1756f8ca68f0f80fda35bea10cd91282709399f299c0208171cf42c4a706e4b","first_seen":"2024-05-08T15:35:59Z","last_seen":"2026-02-22T21:56:32.448626Z","times_seen":27,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"vidplay.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vidplay.top/fav-180.png","fqdn":"vidplay.top","domain":"vidplay.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:19.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidplay.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 19:56:49 GMT","end":"Sat, 29 Nov 2025 20:55:13 GMT"},"fingerprint":{"sha1":"82:BC:8A:D1:4E:D0:62:6F:A5:96:8A:82:41:75:FF:72:30:A0:1B:2E","sha256":"4D:10:E8:5E:75:9A:AF:E0:EA:A7:76:9D:FA:EE:3E:B7:B8:D9:12:BA:A8:1E:33:8B:CF:46:A9:0A:82:F5:37:2A"}}},"request":{"raw":"GET /fav-180.png HTTP/1.1\r\nHost: vidplay.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidplay.top/\r\nCookie: PHPSESSID=3f5mcl8s887v5n4oemgbvhpgj4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Sep 2025 22:48:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 7102\r\nserver: cloudflare\r\nlast-modified: Tue, 28 May 2024 05:20:34 GMT\r\naccept-ranges: bytes\r\nx-frame-options: SAMEORIGIN\r\ncache-control: public, max-age=1209600\r\nage: 376477\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v7VuMIQOXLkL6e3MdxX1Gd1OoUxiPai8nSas%2F4NX%2FzuiOKWtH5WpDmJ9UbpMMbY%2FZ5cpDnmHgjp3On2IZFi0jmKIdo2gJvtRVQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9824dea38d840b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7102,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"ea36a6924325f9c8b9e258743e9ec42a","sha1":"89ac16b8f8b52590952269f1ce00a77827db22b5","sha256":"fe656fb73c5be843f64dc291bab91378b463d76e52cd92702e37ae1f1735202f","sha512":"d10b6fa1070cf5c480eb1197e8bc8bf83647aeb74e91b7c177902bf0c6a24d9183dc54cff5f5d6210cfed39abae0fa7eabb9f6fdbd9a87f379e9a1c578bded78","ssdeep":"192:T3g9XBAMI3R2T97MhAW8xrFBJtKSmPeY//oJXSk:k9XBAW91xKbPe4iXSk","tlshash":"04e17eb88818b03891e9966c1ad877b1d9e838dd1733187e290a3b6cd47fc09786ded4","first_seen":"2024-09-03T23:55:56Z","last_seen":"2026-03-08T15:35:34.902761Z","times_seen":32,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"vidplay.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/ezkzULav0JxvLS5JOnQcjbUmfWO.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"169.150.247.34","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:19.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 19:10:42 GMT","end":"Sat, 08 Nov 2025 19:10:41 GMT"},"fingerprint":{"sha1":"3F:7E:92:16:1B:3D:59:B9:39:74:F1:BD:DA:C6:BA:C4:FA:B8:8B:C8","sha256":"9A:48:B1:0E:F5:4A:36:6E:52:DB:E9:89:CC:31:2C:B0:08:CF:C3:2A:DB:81:5F:8A:6B:7C:61:BA:CF:4D:35:18"}}},"request":{"raw":"GET /t/p/w342/ezkzULav0JxvLS5JOnQcjbUmfWO.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidplay.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 22:48:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23044\r\nserver: BunnyCDN-DE1-1077\r\ncdn-pullzone: 775336\r\ncdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"67f998c3-5a04\"\r\nlast-modified: Fri, 11 Apr 2025 22:33:39 GMT\r\ncdn-storageserver: NY-703\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 919\r\nperma-cache: HIT\r\ncdn-proxyver: 1.22\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/12/2025 10:29:21\r\ncdn-edgestorageid: 752\r\ncdn-requestid: 939bda083fd760f4e0cf66074ddd6929\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":23044,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"94525a941b01df4dc1666fa326e305c6","sha1":"3c34fc3f6033b141e511580f13b1dd35a4ea0325","sha256":"317d8577bc43af9f6915a7a8c08c4eb422d385fa79149d74a0133284f1ce57ed","sha512":"2124595a634339d89336fb7432be3f43bd0ede26d7fd552174b5964df5e1c41d46b2b9add0998e8b4ec9c5d0e68c9c56ac8bd6f6a7d51372c45d3e09e740cbf2","ssdeep":"384:/R2G3g3rAjTq3bgo9S2eDjhP3HqV5I4mxfKSkXVwHOYd2nna61R4ma05VjQF9u9N:/RUCQ8o98D5e5oxxkls2nna61taCI9u/","tlshash":"a8a2e0d94384df0abb9b24c3a095bde1199d08f08d245b5ca1aa71eef72d0e76c30749","first_seen":"2025-09-20T19:23:01.382943Z","last_seen":"2025-09-20T22:49:10.054128Z","times_seen":2,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":97,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidplay.org/index.html","fqdn":"vidplay.org","domain":"vidplay.org","tld":"org"},"ip":{"addr":"172.67.133.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-20T22:48:15.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidplay.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 Aug 2025 06:07:46 GMT","end":"Tue, 25 Nov 2025 07:06:03 GMT"},"fingerprint":{"sha1":"AF:6D:8A:7A:FD:AE:AB:0B:04:E1:C8:78:DF:68:3F:AA:C8:A4:35:88","sha256":"E6:CD:DB:C2:EF:94:03:4C:E9:08:78:E0:62:77:54:C8:98:23:EF:B0:3B:B0:DE:22:C2:AB:8A:85:CE:FE:45:33"}}},"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: vidplay.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 22:48:15 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 05 May 2025 14:08:32 GMT\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=twxf8nxJZh2ms0xiwf9qAtV9m0BlGOSS8sV7XZUmUgHZ4KHWXCqnQ5I59rDSEJf3POVJ5hnnK%2BdNBagbRQECDRwkvsCFdfOKMw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: 9824de89795cb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":899,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"0693a765ad4bd9004a910f999a6ec7aa","sha1":"ddd5a9d61867d008f112b8b6cbdd7f0d1432f247","sha256":"47210126d33cb617f1c314aac866255b5871c17d738313237546d26ca944c3e5","sha512":"1cabbcba1eaf12737f6e46fc5e354780e8689e2b80a681f6cccff2efdcd709199bce66a88561e76add98c69ccd59c11e38335d04794821b1c8536548c9fcce5c","ssdeep":"","tlshash":"ea110057b88e180c32a2c2b55073f11c893edcd9535d636ab08615bb9dc1248fb5b2c9","first_seen":"2025-09-20T22:49:10.06585Z","last_seen":"2025-09-20T22:49:10.06585Z","times_seen":1,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidplay.top/favicon.png","fqdn":"vidplay.top","domain":"vidplay.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:19.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidplay.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 19:56:49 GMT","end":"Sat, 29 Nov 2025 20:55:13 GMT"},"fingerprint":{"sha1":"82:BC:8A:D1:4E:D0:62:6F:A5:96:8A:82:41:75:FF:72:30:A0:1B:2E","sha256":"4D:10:E8:5E:75:9A:AF:E0:EA:A7:76:9D:FA:EE:3E:B7:B8:D9:12:BA:A8:1E:33:8B:CF:46:A9:0A:82:F5:37:2A"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: vidplay.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidplay.top/\r\nCookie: PHPSESSID=3f5mcl8s887v5n4oemgbvhpgj4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Sep 2025 22:48:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 29438\r\nserver: cloudflare\r\nlast-modified: Sun, 26 May 2024 20:18:48 GMT\r\naccept-ranges: bytes\r\nx-frame-options: SAMEORIGIN\r\ncache-control: public, max-age=1209600\r\nage: 958139\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lESgzcJtS0o%2B3QssDCXc4fmFZhmKHNXj%2Br0A0UDYsx8gmQtHdzSg2NMNafkDoErDdgNIdPOWCjglsXEwth9AyKBQijPpheWwKA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9824dea13c220b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29438,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"22e3a830dffc343cd1d742084fccc1fa","sha1":"093accc02edf6d0536bc32564514d950f35fdb16","sha256":"2768a0cd83c95a3f2bdcacba1217e67cc297cdceabbf763410ff3d57fe6a1a54","sha512":"6a5024e51d0798419da56549e167f2dfc572180c73fa5866f578c8b8924ff908e4d21c9b8e3749178eabe69101307f13ec6793fdaec66ae7fcc497e1806cff5f","ssdeep":"768:c4nZDLAmAfhca5UFavjNzA8c0CBEPEqRP6m:cGLArya5VRz9BPGm","tlshash":"dfd2e180de66cdf46bda823972b789d6113f558c999038c4e7ef73af601e10a050a1cf","first_seen":"2024-09-03T23:55:55Z","last_seen":"2026-03-08T15:35:34.912432Z","times_seen":32,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"vidplay.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/cpf7vsRZ0MYRQcnLWteD5jK9ymT.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"169.150.247.34","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:19.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 19:10:42 GMT","end":"Sat, 08 Nov 2025 19:10:41 GMT"},"fingerprint":{"sha1":"3F:7E:92:16:1B:3D:59:B9:39:74:F1:BD:DA:C6:BA:C4:FA:B8:8B:C8","sha256":"9A:48:B1:0E:F5:4A:36:6E:52:DB:E9:89:CC:31:2C:B0:08:CF:C3:2A:DB:81:5F:8A:6B:7C:61:BA:CF:4D:35:18"}}},"request":{"raw":"GET /t/p/w342/cpf7vsRZ0MYRQcnLWteD5jK9ymT.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidplay.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 22:48:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11444\r\nserver: BunnyCDN-DE1-1077\r\ncdn-pullzone: 775336\r\ncdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"6810dcd0-2cb4\"\r\nlast-modified: Tue, 29 Apr 2025 14:06:08 GMT\r\ncdn-storageserver: NY-346\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 793\r\nperma-cache: HIT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/02/2025 18:10:13\r\ncdn-edgestorageid: 1080\r\ncdn-requestid: 4de8c0472d268c3de5470007d122d655\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":11444,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"87ca4311ed260487e864d15d81d6b022","sha1":"6f3ffb96cdf4e496f1ee8a8bf8e96441aeb34e83","sha256":"48fc887987d34a36d506d2f76bb471e72f478004fe25daefe0d483bd4f390397","sha512":"de7203a50d782e12498a19755c9f20f6f5285cb4eab07c357a2525981060877d8fcc7a4726c7905e76f13f8b2c00580cdf7bf0111b56d7eceac7a498a6188e5a","ssdeep":"192:+7E1OibrhR+1od90hsgwJMGL4XWGDON3v2radSZ0rdBsLE4W:+sOONdu6gBFXWGaN/Jke4E4W","tlshash":"fb32d08afa3e3f49a1bf0330739c7d7b7524597802f1a2a504f7078b147924b76a90a0","first_seen":"2025-08-01T14:27:44.01868Z","last_seen":"2026-03-16T12:11:01.476203Z","times_seen":81,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":64,"dns":13,"connect":31,"send":0,"wait":89,"receive":22,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidplay.top/cdn-cgi/challenge-platform/h/g/scripts/jsd/f78657f80e4b/main.js?","fqdn":"vidplay.top","domain":"vidplay.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:19.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidplay.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 19:56:49 GMT","end":"Sat, 29 Nov 2025 20:55:13 GMT"},"fingerprint":{"sha1":"82:BC:8A:D1:4E:D0:62:6F:A5:96:8A:82:41:75:FF:72:30:A0:1B:2E","sha256":"4D:10:E8:5E:75:9A:AF:E0:EA:A7:76:9D:FA:EE:3E:B7:B8:D9:12:BA:A8:1E:33:8B:CF:46:A9:0A:82:F5:37:2A"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/f78657f80e4b/main.js? HTTP/1.1\r\nHost: vidplay.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=3f5mcl8s887v5n4oemgbvhpgj4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Sep 2025 22:48:19 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9824dea42e020b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9902,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9902), with no line terminators","md5":"77fe6e2178946e52850b0f7c3c411a26","sha1":"c099878d983d0693e1265ce26baf416b02a197d3","sha256":"f6b1bd7e06fd90c59a16627f43d2d892f22781162d39b6b7fe24059a52706fd1","sha512":"e7d859c38e45643789f493725484a6fc1b7f96eae1aa8d534e1af72c2fe5f507facbadeff944e5b3cd48042958e299e5acbbf94aa64d1ee565a82779c6ff0621","ssdeep":"192:Bpkz71e+t5r7xiYrDf6V9kbGrw3M1a+u0eNK6n:vKe+5Df67gMc70mK6","tlshash":"6d120bcfbe18bc588254169110bb65e620afc92560c5a90787d0b9e83f3f35daf0fe58","first_seen":"2025-09-20T21:57:31.469365Z","last_seen":"2025-09-20T22:49:10.103888Z","times_seen":3,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"vidplay.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vidplay.top/assets/old.css","fqdn":"vidplay.top","domain":"vidplay.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:19.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidplay.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 19:56:49 GMT","end":"Sat, 29 Nov 2025 20:55:13 GMT"},"fingerprint":{"sha1":"82:BC:8A:D1:4E:D0:62:6F:A5:96:8A:82:41:75:FF:72:30:A0:1B:2E","sha256":"4D:10:E8:5E:75:9A:AF:E0:EA:A7:76:9D:FA:EE:3E:B7:B8:D9:12:BA:A8:1E:33:8B:CF:46:A9:0A:82:F5:37:2A"}}},"request":{"raw":"GET /assets/old.css HTTP/1.1\r\nHost: vidplay.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidplay.top/\r\nCookie: PHPSESSID=3f5mcl8s887v5n4oemgbvhpgj4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Sep 2025 22:48:19 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 26 Feb 2024 15:01:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nage: 735\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B9cbklY%2B89C%2Bm%2BRENJimCUFSq57Tr0MgVAajlCk9g0UKSmljusAz%2BtgreZJhtuzp%2FdeDmRc0OIEVz1gFdQVpfGGZj21S6%2F6%2BKg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9824dea12c1b0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98311,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65308), with CRLF line terminators","md5":"e366ad4733d952d96d422bebe2e80c1a","sha1":"de141a84cd9af48e93a25654a5506ed6ea0f6c53","sha256":"5e5937b2ceed6be25a8db4efad440b4fdb05a36c245f8a32addfe882d1853c77","sha512":"91c908e1a5f44f8b123ec6687fb492f646e5c36793f505aa2509f8029f75d0a41c8d5be06549bb0ef225a309c8d8b16e411a60cfd4cc3ecb2b9a01baecb51846","ssdeep":"1536:gbNAIzFEq+pG+KVmD2dZP3IguCPxXPo9Y9h:kjVmmZP3IguCPxXPo23","tlshash":"32a3a7b1f51034a97333c10b71c0fe9f265aa152ea178e77f22b699c4f891ca0662f17","first_seen":"2024-09-03T23:55:56Z","last_seen":"2026-04-05T20:49:38.56841Z","times_seen":97,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"vidplay.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/xeEw3eLeSFmJgXZzmF2Efww0q3s.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"169.150.247.34","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:19.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 19:10:42 GMT","end":"Sat, 08 Nov 2025 19:10:41 GMT"},"fingerprint":{"sha1":"3F:7E:92:16:1B:3D:59:B9:39:74:F1:BD:DA:C6:BA:C4:FA:B8:8B:C8","sha256":"9A:48:B1:0E:F5:4A:36:6E:52:DB:E9:89:CC:31:2C:B0:08:CF:C3:2A:DB:81:5F:8A:6B:7C:61:BA:CF:4D:35:18"}}},"request":{"raw":"GET /t/p/w342/xeEw3eLeSFmJgXZzmF2Efww0q3s.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidplay.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 22:48:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14182\r\nserver: BunnyCDN-DE1-1077\r\ncdn-pullzone: 775336\r\ncdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"67ee7af3-3766\"\r\nlast-modified: Thu, 03 Apr 2025 12:11:31 GMT\r\ncdn-storageserver: NY-753\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 859\r\nperma-cache: HIT\r\ncdn-proxyver: 1.23\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2025 16:48:27\r\ncdn-edgestorageid: 860\r\ncdn-requestid: e8409f79fa5ee55bdac4b2c6fae8caa0\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":14182,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fcc844d9c76a4575237b32275d459cf0","sha1":"4e03e0067f6f09f79dc859c0ddf4749a4a4310ea","sha256":"c32a4a19cb23783a53e30f2e664824f01176ecc82ab0cf9dbed06a8b8fac200f","sha512":"42754c423d65ac7baecc5ef6d5aca6e6a9104a42e3711821ba67eb92353d7c41430834ff06b8b150de8f9a4dfd97dcab9333b0462ce871883fe69adc1fe44c17","ssdeep":"384:lxGL1SM2lmxEJojz7JImEFcOBSx29fyjghDob:2MM0mxEGjz7JREFcOBSs9Kkob","tlshash":"6352d0438b8496e7db5b32e4dba338c4768c27c529602e2e0165118b05a7bef5cee24c","first_seen":"2025-05-18T19:35:22.536978Z","last_seen":"2026-05-02T20:18:51.691269Z","times_seen":71,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":76,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/joALXjCQCKTSDREQEJxn83U4ORK.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"169.150.247.34","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:19.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 19:10:42 GMT","end":"Sat, 08 Nov 2025 19:10:41 GMT"},"fingerprint":{"sha1":"3F:7E:92:16:1B:3D:59:B9:39:74:F1:BD:DA:C6:BA:C4:FA:B8:8B:C8","sha256":"9A:48:B1:0E:F5:4A:36:6E:52:DB:E9:89:CC:31:2C:B0:08:CF:C3:2A:DB:81:5F:8A:6B:7C:61:BA:CF:4D:35:18"}}},"request":{"raw":"GET /t/p/w342/joALXjCQCKTSDREQEJxn83U4ORK.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidplay.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 22:48:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23896\r\nserver: BunnyCDN-DE1-1077\r\ncdn-pullzone: 775336\r\ncdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"6800e062-5d58\"\r\nlast-modified: Thu, 17 Apr 2025 11:05:06 GMT\r\ncdn-storageserver: NY-346\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 917\r\nperma-cache: HIT\r\ncdn-proxyver: 1.28\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/07/2025 18:35:53\r\ncdn-edgestorageid: 1053\r\ncdn-requestid: 05a82944133a872b4c1e6a292e0cbecb\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":23896,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4fe65cd97af990379f76885ea557337c","sha1":"d30ba4a87e9ac248f745990f6ee667b3b5cbf673","sha256":"dc2b279e1f111b201c091843fde612bfd3c8f2de8b45d304e8c910b6f538df08","sha512":"f06c99b2cbd4eb8f72ea91cf6a0b2b16384ba8b7d4b674aa6a7ab27e9096bac89b0b26a2c7c0ef8757115a7b7eddbdc6cbff9b958ca5151081f0a9eac9678cd4","ssdeep":"384:gFlt2Idtkc//u0sywbAXsB+xeTHKniMtEfGtTBqGRJZM1LceBXdYOw:gFltx//ujxB1THKiM1PR/Udtw","tlshash":"dfb2e1d5b5b13aaaf1f63468346238bdf1c0a53ef72cfd42f2181182176ae12d95284c","first_seen":"2025-09-20T19:23:01.391279Z","last_seen":"2025-09-20T22:49:10.133318Z","times_seen":2,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":99,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/sMGevssYsHJG8omlL26rPZFWgRY.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"169.150.247.34","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:19.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 19:10:42 GMT","end":"Sat, 08 Nov 2025 19:10:41 GMT"},"fingerprint":{"sha1":"3F:7E:92:16:1B:3D:59:B9:39:74:F1:BD:DA:C6:BA:C4:FA:B8:8B:C8","sha256":"9A:48:B1:0E:F5:4A:36:6E:52:DB:E9:89:CC:31:2C:B0:08:CF:C3:2A:DB:81:5F:8A:6B:7C:61:BA:CF:4D:35:18"}}},"request":{"raw":"GET /t/p/w342/sMGevssYsHJG8omlL26rPZFWgRY.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidplay.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 22:48:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 33992\r\nserver: BunnyCDN-DE1-1077\r\ncdn-pullzone: 775336\r\ncdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Wed, 10 Sep 2025 08:28:19 GMT\r\ncdn-cachedat: 09/18/2025 21:48:24\r\nx-bo-server: LA-294\r\nx-downloadsize: 44716\r\nx-bo-origindownloadtime: 235\r\nx-bo-compressionratio: 23.98%\r\nx-bo-processingtime: 12\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.34\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1053\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 8573976be9c746aca8c2ed112d4bedab\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":33992,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2f002c979897bb3ddb22b7f42d5dbcbd","sha1":"054ed6ab93a5600fdc25d26636067f3a579978fb","sha256":"37a90e5e97605d0d47a8dc7959874e45b8b201e4f16c7e43075e3cb1c8592033","sha512":"42374c8e8f64a476649576f4491c99e713a8f69431325b1a6966b918524e1b54c6d8284b95019d1a6b0ba21b84949cae961c8b8df21d86d6a0e2c06651c0600c","ssdeep":"768:O3JYJ7a7GYG0HGDvjEPLQxbL3OqiSmt2zp4C8lxQTwDeaq8:1hYGQGDvjETw+7Smt2zp49QTX2","tlshash":"49e2d139e9457fe28b9fe40b46f185d6ae33262d61152850c4789fc76bf1422ee40f68","first_seen":"2025-09-20T19:23:01.393617Z","last_seen":"2025-09-20T22:49:10.163615Z","times_seen":2,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":97,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:19.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 13:14:02 GMT","end":"Wed, 26 Nov 2025 14:13:48 GMT"},"fingerprint":{"sha1":"7A:B2:21:7F:72:E3:39:3E:95:5D:FB:ED:BB:1C:7E:88:C4:7A:B1:B3","sha256":"FB:1D:6D:AF:DA:57:8D:9A:8B:B2:CC:FF:A2:55:C8:F3:71:3D:49:77:06:FC:4D:6F:16:91:61:6F:89:1C:A3:CB"}}},"request":{"raw":"GET /gid.js HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vidplay.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidplay.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 22:48:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://vidplay.top\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=08024aa2ef3e4f87f4f4294d7fcaf5bb; expires=Sun, 20 Sep 2026 22:48:19 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9824dea45a6c569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9bada9266f8308c3b05aa1cbc49c9287","sha1":"fd3fd813a3cb42a8faf05f4313161183d1df8332","sha256":"8b89c8a4f870cbfe7f50ce719a612d5ca8b3c84716a166476ab2d94206ff408f","sha512":"9790b4dec54f4e8d60c2e243cf13e71b2373cbd824686cb37b49cba0600de82641eecaa6d4e0c5d19a56223eb2362a91f508912bc186669b2d82abb68b5b3bed","ssdeep":"","tlshash":"6fa022e3080caac0220000c22c02cea008003002b08cf30300c8c082f0bf28c8800308","first_seen":"2025-09-20T22:49:10.173594Z","last_seen":"2025-09-20T22:49:10.173594Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":32,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/z53D72EAOxGRqdr7KXXWp9dJiDe.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"169.150.247.34","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:19.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 19:10:42 GMT","end":"Sat, 08 Nov 2025 19:10:41 GMT"},"fingerprint":{"sha1":"3F:7E:92:16:1B:3D:59:B9:39:74:F1:BD:DA:C6:BA:C4:FA:B8:8B:C8","sha256":"9A:48:B1:0E:F5:4A:36:6E:52:DB:E9:89:CC:31:2C:B0:08:CF:C3:2A:DB:81:5F:8A:6B:7C:61:BA:CF:4D:35:18"}}},"request":{"raw":"GET /t/p/w342/z53D72EAOxGRqdr7KXXWp9dJiDe.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidplay.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 22:48:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24104\r\nserver: BunnyCDN-DE1-1077\r\ncdn-pullzone: 775336\r\ncdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"67f68857-5e28\"\r\nlast-modified: Wed, 09 Apr 2025 14:46:47 GMT\r\ncdn-storageserver: NY-346\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 912\r\nperma-cache: HIT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/02/2025 18:10:19\r\ncdn-edgestorageid: 1081\r\ncdn-requestid: 08125369bcd993738600078a52e81af0\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":24104,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9104f886e92c67a10a3395b89e99a91f","sha1":"399e64fe3ace0f4afe4d5f44336199c2be2ef7f5","sha256":"d34ba80878f27d236ad110fcda383eeed9522bba386c2d02bb2c3b8ea8823617","sha512":"b431d3cb533ef8e4c4e537030e8a76ab6c34e9bf29812eae318f174f0fb417915badb3a1ba75ac1b6b7b962b69a535559f20d715ae70b14f4e9b1c7a0fd92124","ssdeep":"384:KNpVQINiq66EkF/YrX1iNcomfFPEOvZ2d1S8mF0nUHsAghvInOQ+uFJlA3WK:miRjLxoUjS08q08iNcO2E3WK","tlshash":"59b2f1556cc86fe63fb6eedd3d819347022a6f1d43f217ac8093884c393a491d29b683","first_seen":"2025-04-20T19:48:28.4718Z","last_seen":"2026-03-21T03:27:36.716215Z","times_seen":91,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":81,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/5Z9tkiIDZ6u49VUeY9Fm3PuSxKT.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"169.150.247.34","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:19.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 19:10:42 GMT","end":"Sat, 08 Nov 2025 19:10:41 GMT"},"fingerprint":{"sha1":"3F:7E:92:16:1B:3D:59:B9:39:74:F1:BD:DA:C6:BA:C4:FA:B8:8B:C8","sha256":"9A:48:B1:0E:F5:4A:36:6E:52:DB:E9:89:CC:31:2C:B0:08:CF:C3:2A:DB:81:5F:8A:6B:7C:61:BA:CF:4D:35:18"}}},"request":{"raw":"GET /t/p/w342/5Z9tkiIDZ6u49VUeY9Fm3PuSxKT.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidplay.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 22:48:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30590\r\nserver: BunnyCDN-DE1-1077\r\ncdn-pullzone: 775336\r\ncdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"684f9434-777e\"\r\nlast-modified: Mon, 16 Jun 2025 03:49:08 GMT\r\ncdn-storageserver: NY-703\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 675\r\nperma-cache: HIT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/02/2025 18:09:19\r\ncdn-edgestorageid: 1081\r\ncdn-requestid: ad3837a6c7abae08349287d21db05e6a\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":30590,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b2e6d5e7daab7290021e0a0a8d2398d8","sha1":"85d06059087dee0f38c09d7d419b1bf56ccaa853","sha256":"cfe85c19d2778d2b4937f2464cf28f1d63cf5129be182d4b53b2b9aa5aa853c1","sha512":"e2b851b52363c1992679dddd9e35f5b8e5187bf4d10b3b18a7cd5f3c31027e98710eb3d817d614d679829ede896475cbe451dfad6080d9ee5e1b5140076fe357","ssdeep":"768:2P7Z3ETniFtAB4/AWE4pWABmYVtzoShSR8B1:IB8BR3kjlsDGB1","tlshash":"47d2f17936b1e1687e38ca3d45d428cb24fcaa67f2ee07558bbb220685c372091c78d0","first_seen":"2025-08-01T14:27:43.911785Z","last_seen":"2025-09-20T22:49:10.188762Z","times_seen":4,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":58,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidplay.org/index.html","fqdn":"vidplay.org","domain":"vidplay.org","tld":"org"},"ip":{"addr":"172.67.133.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidplay.org/index.html","date":"2025-09-20T22:48:15.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidplay.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 Aug 2025 06:07:46 GMT","end":"Tue, 25 Nov 2025 07:06:03 GMT"},"fingerprint":{"sha1":"AF:6D:8A:7A:FD:AE:AB:0B:04:E1:C8:78:DF:68:3F:AA:C8:A4:35:88","sha256":"E6:CD:DB:C2:EF:94:03:4C:E9:08:78:E0:62:77:54:C8:98:23:EF:B0:3B:B0:DE:22:C2:AB:8A:85:CE:FE:45:33"}}},"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: vidplay.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vidplay.org/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Sep 2025 22:48:15 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 05 May 2025 14:08:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JWyWkKkMpJiat4Ah72f6k%2BszZ%2Bd47EWSERcUuq7CfqRB0bfaYok6kl2tC9AlXPRNkdpNIb3t0iLePldKyp9uYllIts2GyiJM3Q%3D%3D\"}]}\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html\r\ncf-cache-status: DYNAMIC\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nexpect-ct: max-age=86400, enforce\r\ncf-ray: 9824de8b9e40b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":899,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"0693a765ad4bd9004a910f999a6ec7aa","sha1":"ddd5a9d61867d008f112b8b6cbdd7f0d1432f247","sha256":"47210126d33cb617f1c314aac866255b5871c17d738313237546d26ca944c3e5","sha512":"1cabbcba1eaf12737f6e46fc5e354780e8689e2b80a681f6cccff2efdcd709199bce66a88561e76add98c69ccd59c11e38335d04794821b1c8536548c9fcce5c","ssdeep":"","tlshash":"ea110057b88e180c32a2c2b55073f11c893edcd9535d636ab08615bb9dc1248fb5b2c9","first_seen":"2025-09-20T22:49:10.06585Z","last_seen":"2025-09-20T22:49:10.06585Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-PDCDB1C2NM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:19.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /gtag/js?id=G-PDCDB1C2NM HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidplay.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 20 Sep 2025 22:48:19 GMT\r\nexpires: Sat, 20 Sep 2025 22:48:19 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 139098\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":417398,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"85c0671af2be7904903c9e04d54bd220","sha1":"5a53823548c625b029a208c59936cd994fcc9be4","sha256":"dd091ddae23c92f922f493b2a6b8f542702f9fae90808d9f202b3e464dfbf5e7","sha512":"9e484dccb5db61043fd837bcd90fbf8eb1fe9dc5af8a31ef99319001f7164dc7ab9fd07566473f6fb6c83c2b7e8991b02df1bc0127feba88ab1157eee0fdd6e9","ssdeep":"6144:8ErjVeLQd2sK+iFBbjSytugdH9I2/eTCGs:/PMLQd2l5Fbi2p","tlshash":"0e941ade73c674265396f478903f018ba5bb28a2b45cc899f189cce42d74a9a4137f7c","first_seen":"2025-09-20T22:49:10.196067Z","last_seen":"2025-09-20T22:49:10.196067Z","times_seen":1,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":95,"dns":1,"connect":8,"send":0,"wait":29,"receive":25,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/aFRDH3P7TX61FVGpaLhKr6QiOC1.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"169.150.247.34","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:19.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 19:10:42 GMT","end":"Sat, 08 Nov 2025 19:10:41 GMT"},"fingerprint":{"sha1":"3F:7E:92:16:1B:3D:59:B9:39:74:F1:BD:DA:C6:BA:C4:FA:B8:8B:C8","sha256":"9A:48:B1:0E:F5:4A:36:6E:52:DB:E9:89:CC:31:2C:B0:08:CF:C3:2A:DB:81:5F:8A:6B:7C:61:BA:CF:4D:35:18"}}},"request":{"raw":"GET /t/p/w342/aFRDH3P7TX61FVGpaLhKr6QiOC1.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidplay.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 22:48:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 43378\r\nserver: BunnyCDN-DE1-1077\r\ncdn-pullzone: 775336\r\ncdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"680ef0e0-a972\"\r\nlast-modified: Mon, 28 Apr 2025 03:07:12 GMT\r\ncdn-storageserver: NY-753\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 793\r\nperma-cache: HIT\r\ncdn-proxyver: 1.23\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/28/2025 05:23:09\r\ncdn-edgestorageid: 864\r\ncdn-requestid: ee9143630b7852923f691ba0ce4dcccb\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":43378,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e19b15c505a69fa29edac2f521810d2c","sha1":"6513685e21dac6c6f587f925884e210edaa4f866","sha256":"5e50ff8241cf043244b59be6a46693a9f1066e398c685c342fe26d3460c8da6a","sha512":"e96bbffb77f6551162ce1e806f7708ae6ff3b6540c07afb87362e27ef38aa8b338aaec468875f06fb15b6b6e7f26732928f51d8af997cf7a2d3e3c2287722cb7","ssdeep":"768:R1za9PLpjKG2GgJesmngVAFIGejNWyb/7TM3MmuvoR:axz5NgVuINNjkMRvoR","tlshash":"421302b6d539a8440d32177e8115cb79622ea1e8a54a7ffc68be158f7630c7c20d4f4a","first_seen":"2025-07-18T20:00:34.911758Z","last_seen":"2026-01-07T11:48:28.045095Z","times_seen":89,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":59,"dns":17,"connect":22,"send":0,"wait":95,"receive":19,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/iyxwxDZCpIm0vIORaHpmgJv2BGF.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"169.150.247.34","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:19.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 19:10:42 GMT","end":"Sat, 08 Nov 2025 19:10:41 GMT"},"fingerprint":{"sha1":"3F:7E:92:16:1B:3D:59:B9:39:74:F1:BD:DA:C6:BA:C4:FA:B8:8B:C8","sha256":"9A:48:B1:0E:F5:4A:36:6E:52:DB:E9:89:CC:31:2C:B0:08:CF:C3:2A:DB:81:5F:8A:6B:7C:61:BA:CF:4D:35:18"}}},"request":{"raw":"GET /t/p/w342/iyxwxDZCpIm0vIORaHpmgJv2BGF.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidplay.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 22:48:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 34730\r\nserver: BunnyCDN-DE1-1077\r\ncdn-pullzone: 775336\r\ncdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"6823bf90-87aa\"\r\nlast-modified: Tue, 13 May 2025 21:54:24 GMT\r\ncdn-storageserver: NY-673\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 918\r\nperma-cache: HIT\r\ncdn-proxyver: 1.29\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/14/2025 10:35:29\r\ncdn-edgestorageid: 860\r\ncdn-requestid: c8a8542cddf3b63116664dc642483bb2\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":34730,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"17bf87bec82c3f1bc5b4e88ee94f98a9","sha1":"8f4301014351b7a11993f0d3d0c0414cef52627c","sha256":"a75abcdce6152d6ead2a6b069ba0e697eca46a3e838af8fbd85ddb7259f5182a","sha512":"664099e9351d434178f77a120ab2a24f374432fef6891e1684dc0ca2ef6f510ac3e87265946dd825dd93b9caf573d07248b3befb48bbf018e18fd46e7a4b4f1c","ssdeep":"768:N1G98CxVuOa5cKbp7OCFh8ELopIzLPLMU5iBfaL:NgcOa5cKp/84zLjMU4A","tlshash":"fff2e1fb2b803507cc2860462119daced73005bbe23f11a23d47db9ead9e3d2790e656","first_seen":"2025-08-13T11:15:44.620634Z","last_seen":"2026-01-25T13:17:08.15987Z","times_seen":7,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":67,"dns":15,"connect":31,"send":0,"wait":85,"receive":27,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidplay.top/assets/vplay.css?v=2.3","fqdn":"vidplay.top","domain":"vidplay.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:19.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidplay.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 19:56:49 GMT","end":"Sat, 29 Nov 2025 20:55:13 GMT"},"fingerprint":{"sha1":"82:BC:8A:D1:4E:D0:62:6F:A5:96:8A:82:41:75:FF:72:30:A0:1B:2E","sha256":"4D:10:E8:5E:75:9A:AF:E0:EA:A7:76:9D:FA:EE:3E:B7:B8:D9:12:BA:A8:1E:33:8B:CF:46:A9:0A:82:F5:37:2A"}}},"request":{"raw":"GET /assets/vplay.css?v=2.3 HTTP/1.1\r\nHost: vidplay.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidplay.top/\r\nCookie: PHPSESSID=3f5mcl8s887v5n4oemgbvhpgj4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Sep 2025 22:48:19 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Oct 2024 00:12:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nage: 735\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BtcwCL%2Bl%2FgQSJR6wsQEsOtLhLvoKztWv9O368sKPYr2Bi2geQm71b0CulQGu7QTJcYb1XgnehXeCt9w4GHuH75agouD6mfhiwg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9824dea12c1a0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6042,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (599)","md5":"5ea9007e19f3eb06d2f1cea880d0b310","sha1":"e48c586c3036897b1de0514277046591c3623e6d","sha256":"e270d347f1a22dde3021a3c8c1843a1ef90e8df735789974754456a09abecd0b","sha512":"bd25b6d7f4c6d59ad0940621c01245b0ac21b586b7c1f3c517ebcbf5f8d04d485c8d1f839c7ac3ec2da20c3d1821f45069c37b556a7b79906483a2a7801b2580","ssdeep":"96:j0llHioMNhfbYXGY6A8TQ2TLFbviV3PvPFiFgmlDXyrrTeHF/2FaKWWoFTRWQZzm:ol6NhfbYWu6Q2TLFbviV3PFiFg0DXyrT","tlshash":"f3c132969f632940b817e1bcafe7a34a23358003c74edbac3e4d7150cf8d5a45536b96","first_seen":"2025-02-01T20:58:12.980833Z","last_seen":"2026-01-03T21:37:00.386515Z","times_seen":10,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"vidplay.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/wobVTa99eW0ht6c1rNNzLkazPtR.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"169.150.247.34","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:19.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 19:10:42 GMT","end":"Sat, 08 Nov 2025 19:10:41 GMT"},"fingerprint":{"sha1":"3F:7E:92:16:1B:3D:59:B9:39:74:F1:BD:DA:C6:BA:C4:FA:B8:8B:C8","sha256":"9A:48:B1:0E:F5:4A:36:6E:52:DB:E9:89:CC:31:2C:B0:08:CF:C3:2A:DB:81:5F:8A:6B:7C:61:BA:CF:4D:35:18"}}},"request":{"raw":"GET /t/p/w342/wobVTa99eW0ht6c1rNNzLkazPtR.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidplay.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 22:48:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29522\r\nserver: BunnyCDN-DE1-1077\r\ncdn-pullzone: 775336\r\ncdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"681b91ed-7352\"\r\nlast-modified: Wed, 07 May 2025 17:01:33 GMT\r\ncdn-storageserver: NY-753\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 919\r\nperma-cache: HIT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/01/2025 15:39:47\r\ncdn-edgestorageid: 1078\r\ncdn-requestid: d8728e7b84802d6967044b8421d666c1\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":29522,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1f86db059235feef6f2225d916c59df7","sha1":"6d70d40c921de021bceec0903a5f65b026a55abd","sha256":"6548be702c3efa255c4161268593a3cfdfccd9c49062ad76a02e513969bc025b","sha512":"4a0521840dc948c07d37612f965e89cc8ed5b38785a78d9d9d145894ca512756b53a052d5976a9a0eddc59d83e9f8261e8f20b13e5268660a20792928746cb1c","ssdeep":"768:TENvYQwZUO/MGLo89D83SN40eghi3tzjEfRzXH3DFH6CJKgqFLT9:TENvK4Gc8Z+Sqtg4VEfR7XDFDnqVT9","tlshash":"6ad2e110cd4990de3201451ab7ebb82ddfd889b926b8c3bc6367193da31f64d2ed4a1c","first_seen":"2025-09-19T20:57:41.034198Z","last_seen":"2026-03-17T23:46:01.031478Z","times_seen":21,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":56,"dns":16,"connect":22,"send":0,"wait":23,"receive":28,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/8XfIKOPmuCZLh5ooK13SPKeybWF.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"169.150.247.34","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:19.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 19:10:42 GMT","end":"Sat, 08 Nov 2025 19:10:41 GMT"},"fingerprint":{"sha1":"3F:7E:92:16:1B:3D:59:B9:39:74:F1:BD:DA:C6:BA:C4:FA:B8:8B:C8","sha256":"9A:48:B1:0E:F5:4A:36:6E:52:DB:E9:89:CC:31:2C:B0:08:CF:C3:2A:DB:81:5F:8A:6B:7C:61:BA:CF:4D:35:18"}}},"request":{"raw":"GET /t/p/w342/8XfIKOPmuCZLh5ooK13SPKeybWF.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidplay.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 22:48:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26154\r\nserver: BunnyCDN-DE1-1077\r\ncdn-pullzone: 775336\r\ncdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Sat, 30 Aug 2025 16:34:28 GMT\r\ncdn-cachedat: 09/01/2025 19:06:12\r\nx-bo-server: LA-296\r\nx-downloadsize: 39481\r\nx-bo-origindownloadtime: 190\r\nx-bo-compressionratio: 33.76%\r\nx-bo-processingtime: 20\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.34\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1080\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 0f646517b7254dd6277f8c4fde17c82e\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":26154,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b650607b9258d91ea68ca57e5747d6e3","sha1":"6e0b2ed1d5bbae9bea823b49406df645f3bec2d8","sha256":"d63aed05651762efa958422139d9ce7c06809efbc97e6c45031df030cb2b120b","sha512":"135cca325ba6ee9dadd8ab6c06dc69948a11e006ba5994edb5c7399af86fe406e214131dc5372ef204d9d2ae1e29d0ec9e0cc8bc0d1cf0b97795b8ee00943c27","ssdeep":"384:/eznPOUM1b4fC7UCnxWnjFB7aa0ESPDjoA5+enCH9IKQuSyehKNcX2at2dnuCd:MaaykjFB7fYHoI2+KQvyDTiad","tlshash":"24c2e1e0b563c11c396249bdd1918a6560f23f89898d7f337171a28a0c66686e3fd978","first_seen":"2025-09-01T20:58:45.154226Z","last_seen":"2025-12-24T22:20:16.668282Z","times_seen":15,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":58,"dns":18,"connect":22,"send":0,"wait":95,"receive":15,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:19.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vidplay.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 22:48:19 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 5631\r\ncf-ray: 9824dea149a77129-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03e5f-7918\"\r\nlast-modified: Mon, 04 May 2020 16:10:07 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 970176\r\nexpires: Thu, 10 Sep 2026 22:48:19 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rgPM0v5hkQLpvho19%2B6aHoQw1ViBZkjr7w5vT7ICsIP4SO5UdfBtNtH2nopO1uRy7kUSquIuEZHd94mhRrzdAxZ9Mf9TLcXx%2FlVgS%2F%2FH5A%2ByNW6%2FswOEZOQ5V2H%2FWbJVYtbrCK%2Be\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-05-13T17:13:38.914778Z","times_seen":269168,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":10,"dns":1,"connect":1,"send":0,"wait":11,"receive":1,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:19.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vidplay.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 22:48:19 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 77160\r\ncf-ray: 9824dea33a947129-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"5eb03e5f-12d68\"\r\nlast-modified: Mon, 04 May 2020 16:10:07 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 797306\r\nexpires: Thu, 10 Sep 2026 22:48:19 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ZqtLk8cGiN51QW9OtqIsxwT%2FkFUG4ZOTRSnqC%2BDoTJgraKbiUQZrlqTYRH3EfxJPZpJ0S2zFEL4vOob%2Fbg%2Fzkt0ZAnxFEGC95POn8QhT3UgW8I9uAVpO1Fy81p3bYQSqhpfYw7fl\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-05-13T17:12:01.46634Z","times_seen":465727,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":9,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w342/A0KRoR842OgNByCfw9iFHbWoeR9.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"169.150.247.34","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidplay.top/","date":"2025-09-20T22:48:19.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 19:10:42 GMT","end":"Sat, 08 Nov 2025 19:10:41 GMT"},"fingerprint":{"sha1":"3F:7E:92:16:1B:3D:59:B9:39:74:F1:BD:DA:C6:BA:C4:FA:B8:8B:C8","sha256":"9A:48:B1:0E:F5:4A:36:6E:52:DB:E9:89:CC:31:2C:B0:08:CF:C3:2A:DB:81:5F:8A:6B:7C:61:BA:CF:4D:35:18"}}},"request":{"raw":"GET /t/p/w342/A0KRoR842OgNByCfw9iFHbWoeR9.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidplay.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 22:48:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 32806\r\nserver: BunnyCDN-DE1-1077\r\ncdn-pullzone: 775336\r\ncdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Fri, 12 Sep 2025 09:47:10 GMT\r\ncdn-cachedat: 09/12/2025 09:47:10\r\nx-bo-server: LA-295\r\nx-downloadsize: 46082\r\nx-bo-origindownloadtime: 161\r\nx-bo-compressionratio: 28.81%\r\nx-bo-processingtime: 12\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.34\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1334\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 8b073e82b769059dacb9a38a14f641c7\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":32806,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6d0d95e33a64951433e92b4f8c561d29","sha1":"4609f8b9fc16e34c4e9ef54c1abfb6e33b1aad51","sha256":"8eec54146269c60055fd4bdfc5860b1fd4e11ee542dce986717a7e6388622728","sha512":"53c443524f46958dee378da38f3e0cbaf22ef5e69c92ff53cdd79187f69a06886913526c858a763bbc28fe7a615987a9e2d984eff9b0222170598161ebe0e4f8","ssdeep":"768:CgbcDNEeXDRUigFApGD0GKGAi4Au2b9IRsBWC43DfhVQ5:CgbCWUDROFCISGAPA19AsgVQ5","tlshash":"01e2e1ebe3509ec47c16a886e690cf26e644d83cb02a9ed75d94c9dc6b6b45d2b33c40","first_seen":"2025-09-15T21:18:26.755388Z","last_seen":"2025-09-20T22:49:10.251954Z","times_seen":4,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":94,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidplay.org/","fqdn":"vidplay.org","domain":"vidplay.org","tld":"org"},"ip":{"addr":"172.67.133.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-20T22:48:15.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidplay.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 Aug 2025 06:07:46 GMT","end":"Tue, 25 Nov 2025 07:06:03 GMT"},"fingerprint":{"sha1":"AF:6D:8A:7A:FD:AE:AB:0B:04:E1:C8:78:DF:68:3F:AA:C8:A4:35:88","sha256":"E6:CD:DB:C2:EF:94:03:4C:E9:08:78:E0:62:77:54:C8:98:23:EF:B0:3B:B0:DE:22:C2:AB:8A:85:CE:FE:45:33"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: vidplay.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 20 Sep 2025 22:48:15 GMT\r\nlocation: /index.html\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pRNJ0jSSAttFW9hRb92YS1Xwkqgs53VTmMg5YdktdmkUIzgUk3WRwCp3QzUBhBt68ryaf0jWKZ9rmohyB2uSD%2FNrPLGxDv64aw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9824de89693db518-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":899,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T17:27:39.929878Z","times_seen":15121638,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":20,"dns":2,"connect":1,"send":0,"wait":4,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
