{"report_id":"f711ac4d-fb60-4b64-b0f6-862c081c2d55","version":6,"status":"done","tags":[],"date":"2026-03-03T13:07:40Z","url":{"schema":"http","addr":"winvidplay.com/ip129jk?id=397a6738756a6e776e636833","fqdn":"winvidplay.com","domain":"winvidplay.com","tld":"com"},"ip":{"addr":"172.67.189.140","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"winvidplay.com/ip129jk?id=397a6738756a6e776e636833","fqdn":"winvidplay.com","domain":"winvidplay.com","tld":"com"},"title":"Liviaa. Sii Cakep jago goyang, sayang bangett cowoknya kek curut","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"winvidplay.com/ip129jk?id=397a6738756a6e776e636833","fqdn":"winvidplay.com","domain":"winvidplay.com","tld":"com"},"ip":{"addr":"172.67.189.140","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-07T13:07:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-03T13:07:18Z","timestamp":1772543238,"ip_dst":{"addr":"108.157.229.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":48782,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed FingerprintJS Domain (openfpcdn .io in TLS SNI)","source":"{\"timestamp\":\"2026-03-03T13:07:18.038055+0000\",\"flow_id\":497416755629637,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.40\",\"src_port\":48782,\"dest_ip\":\"108.157.229.67\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2049251,\"rev\":1,\"signature\":\"ET INFO Observed FingerprintJS Domain (openfpcdn .io in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_11_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_11_17\"]}},\"tls\":{\"sni\":\"openfpcdn.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":914,\"bytes_toclient\":4622,\"start\":\"2026-03-03T13:07:18.020037+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"winvidplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"openfpcdn.io","ip":{"addr":"108.157.229.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-11-10","domain_rank":9255,"first_seen":"2021-11-11T13:02:44Z","last_seen":"2026-02-25T21:08:17.503403Z","alert_count":0,"request_count":1,"received_data":34142,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"winvidplay.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-26","domain_rank":0,"first_seen":"2026-03-03T03:03:48.186383Z","last_seen":"2026-03-03T03:03:48.186383Z","alert_count":4,"request_count":4,"received_data":66464,"sent_data":2427,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"pagead2.googlesyndication.com","ip":{"addr":"142.251.143.130","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2003-01-21","domain_rank":610,"first_seen":"2012-05-21T07:15:40Z","last_seen":"2026-03-02T06:20:18.160293Z","alert_count":0,"request_count":1,"received_data":163936,"sent_data":469,"comment":"","tags":null,"fingerprints":null},{"fqdn":"vidoy.com","ip":{"addr":"195.181.166.158","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2012-03-14","domain_rank":0,"first_seen":"2025-10-29T10:52:39.448577Z","last_seen":"2026-03-03T03:03:48.747848Z","alert_count":0,"request_count":1,"received_data":1853,"sent_data":439,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-01T22:28:03.022415Z","alert_count":0,"request_count":1,"received_data":90492,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"42e59d384c7eb03120ea9b6d0bc10bce","sha1":"8bd39db964b985fb8cf07f34cb6c339b408461d9","sha256":"245c2f3c5818b71f976e7fcaae967417db5237a1f018329add14ae42f4090f8d","sha512":"b3286324c0793907137d6d218602c09b60f4f100091ec453f1449981c8511d125bcd5a7e1ebd3614e5afa3b56e77513f8ff7cb857da8426fceb119d754d5010a","ssdeep":"","tlshash":"e1d023e91d75c532759c014f50b5e3dc656130647712d501c1cdcc2b6e13dd304f559c","size":217,"data":"","first_seen":"2026-03-03T13:07:41.334635Z","last_seen":"2026-03-03T13:07:41.334635Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/fingerprintjs/v3","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"108.157.229.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef5a1ccf6a53cc40021bfd4647f82b4a","sha1":"86eaf1a45275873266f2b85249408c8297a54f61","sha256":"57281521094dd6fe0d1997e31eab51a203b0f338d39e730d260fdfecce621905","sha512":"16923eaa089ee9d2d5a4e7a02cdbd31da35c8ce7d61e0d7e1bc8a6aa0648c358ad5d5f9ce5aaec4c5247475b8192af167e7fa6941d4fe181c5e01f28ff8537d7","ssdeep":"384:fQQYf1KNHRJijKLE6wXegKHqHTBMmwZCKQLFKA5+pCqNFaiE8E0QIQfJJcChs9RW:fR1HRxf6Hc9NwlJJAbc1GPgJN","tlshash":"9be2f6d8b2c3b02a227368b6497f6007b63bbd54241d4843d57bd4c17ca5e9a813bfb9","size":33442,"data":"","first_seen":"2023-07-07T06:15:03Z","last_seen":"2026-04-14T15:31:19.900724Z","times_seen":4398,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winvidplay.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"winvidplay.com","domain":"winvidplay.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"204d302ee9b63dd9ab4ef6e12fa3c755","sha1":"64d574bee972b790b877e5cb5858237cd5b86938","sha256":"cbbe58442735a44eafc535a60924a881efc7d37dada7019561239cc6ce998b0c","sha512":"9749112c88a808f5cbd7853b16f5312d5333a77d3ae16bf750bc2d2a2761dabd3769c13d0512be22b3add6f89ec98f2494fbfe480a147456e6b4716f2a50bbea","ssdeep":"384:iGfE9phIEwTWBm94O3L0HZGwlDh/t53lxBGQT9HAaJYPnVuNLFRJSePJRKM:iGs5g94O3Y5dDh/t53lyoREWVzZ","tlshash":"75d2c5cb7cd9b558c27d70b8043770c776ba6dc17c9c595ac910fca8fc60a4a91a3ea8","size":28870,"data":"","first_seen":"2026-03-03T13:00:52.551799Z","last_seen":"2026-03-03T13:14:41.2007Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winvidplay.com/ip129jk?id=397a6738756a6e776e636833","fqdn":"winvidplay.com","domain":"winvidplay.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad62fdd3427e44fb9689c0d58806470e","sha1":"e59681d144d9d83387a625fec34a88f1b7ba7122","sha256":"e1e92a22284e21d8b1cc40008f9d14fe1eb389f1df7392014f2e6d37b33d8748","sha512":"ea12d5b5c3575c0e0dc2929187cc5ea45dec19719a7f01c19fc90557bca3315478ee2322f93a3484c3bd78d543e2b93652304c467cea450e9c3f8530e88bc9a9","ssdeep":"","tlshash":"0cc02b5d8de331c40db70b5003f9106070be53c761048e0c740cd218cb18628c0b8d8d","size":161,"data":"","first_seen":"2025-12-30T07:31:01.302757Z","last_seen":"2026-04-14T05:02:14.036398Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-15T19:36:27.684874Z","times_seen":223192,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winvidplay.com/ip129jk?id=397a6738756a6e776e636833","fqdn":"winvidplay.com","domain":"winvidplay.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c6edb1eef9db0013042215de036b8558","sha1":"d008a70efb01c3f699b6a8c5025fa1bdd46c7548","sha256":"68689aa148d87015b4c976f78c6684c9aa89cc9c7c4a1eb0d677f335bdbb29b3","sha512":"25ecb4416e0838e7814ad5929703a235b9789084f6953ab723bbb0cdc9eed14144f038c3276d482e1b2a5fa86812ebecefe61ab13606b6980d533bb04d5d86c1","ssdeep":"","tlshash":"b85154bb227114a6495778f69d6b20137033824b2d14b8917e9d13a02f2c76e79f2fbd","size":3018,"data":"","first_seen":"2026-03-03T13:07:41.337791Z","last_seen":"2026-03-03T13:07:41.337791Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winvidplay.com/ip129jk?id=397a6738756a6e776e636833","fqdn":"winvidplay.com","domain":"winvidplay.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"624b049c02a3593d8b672623847e7d2e","sha1":"0f80758d4e325f9c936a3f7ca91127b5a5f16c60","sha256":"209a07fe50346762afa54b9a4de63da3dcff224a7cce3701e9eacc648a3e5b30","sha512":"6e7ccc775cc41bac05530c523f68852b83ed52eb9bef82966acafad76381b84d19c2e048cf9c5e30205c56b0388671acef06cba6b924fdd3f7b733ba9439d5fe","ssdeep":"","tlshash":"3c1100b93b2a5534cac5808b317ee7a93d3260317a02d044c26ccc295d18ec714efcbe","size":902,"data":"","first_seen":"2026-03-03T13:07:41.339567Z","last_seen":"2026-03-03T13:07:41.339567Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"openfpcdn.io/fingerprintjs/v3","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"108.157.229.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winvidplay.com/ip129jk?id=397a6738756a6e776e636833","date":"2026-03-03T13:07:18.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"openfpcdn.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 29 Oct 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7E:88:9B:B1:7C:CB:A7:14:49:10:D6:FC:A3:64:23:03:9F:CC:6A:B0","sha256":"6A:98:96:56:64:4A:39:7A:9F:12:CE:F5:99:D3:C8:24:ED:17:AF:92:3F:E3:AC:C7:7D:1F:2D:74:46:2F:95:D9"}}},"request":{"raw":"GET /fingerprintjs/v3 HTTP/1.1\r\nHost: openfpcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://winvidplay.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winvidplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: CloudFront\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\ndate: Tue, 03 Mar 2026 11:20:43 GMT\r\ncache-control: public, max-age=588927, s-maxage=11019\r\netag: W/\"hurxpFJ1hzJm8rhSSUCMgpelT2E\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 fedd444eadd43dacc7e53f24b46bddf8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 76TWj5IBu0Tgqnj7oWf7d1-XRZQSEkryO9syvw1fU3WDqcL10Qh0jw==\r\nage: 6395\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":33442,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33109)","md5":"ef5a1ccf6a53cc40021bfd4647f82b4a","sha1":"86eaf1a45275873266f2b85249408c8297a54f61","sha256":"57281521094dd6fe0d1997e31eab51a203b0f338d39e730d260fdfecce621905","sha512":"16923eaa089ee9d2d5a4e7a02cdbd31da35c8ce7d61e0d7e1bc8a6aa0648c358ad5d5f9ce5aaec4c5247475b8192af167e7fa6941d4fe181c5e01f28ff8537d7","ssdeep":"384:fQQYf1KNHRJijKLE6wXegKHqHTBMmwZCKQLFKA5+pCqNFaiE8E0QIQfJJcChs9RW:fR1HRxf6Hc9NwlJJAbc1GPgJN","tlshash":"9be2f6d8b2c3b02a227368b6497f6007b63bbd54241d4843d57bd4c17ca5e9a813bfb9","first_seen":"2023-07-07T06:15:03Z","last_seen":"2026-04-14T15:31:19.900724Z","times_seen":4398,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":37,"dns":17,"connect":8,"send":0,"wait":9,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winvidplay.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?","fqdn":"winvidplay.com","domain":"winvidplay.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winvidplay.com/ip129jk?id=397a6738756a6e776e636833","date":"2026-03-03T13:07:18.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winvidplay.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:33:07 GMT","end":"Wed, 27 May 2026 09:33:06 GMT"},"fingerprint":{"sha1":"9D:1B:D5:EB:27:A2:9B:4C:DE:3A:18:C6:59:65:C7:30:DE:13:CF:E2","sha256":"CD:05:1A:2D:1A:F8:16:84:88:50:E3:B8:35:40:7B:07:FA:E7:01:7A:BF:5D:35:60:93:98:6B:5E:23:2D:09:04"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js? HTTP/1.1\r\nHost: winvidplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: vf=3hcnwnju8gz9%7C1772543277%7CIiu5KvUQLVEQ8OLp-tmccbyMu1SeTJkZaNhuduYwzKk.RUoYaynNxXWIx9tnorelSMU_uEcOv6jJdU5N6iqG1kM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 03 Mar 2026 13:07:18 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d68dd05c9a94eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28870,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (28870), with no line terminators","md5":"204d302ee9b63dd9ab4ef6e12fa3c755","sha1":"64d574bee972b790b877e5cb5858237cd5b86938","sha256":"cbbe58442735a44eafc535a60924a881efc7d37dada7019561239cc6ce998b0c","sha512":"9749112c88a808f5cbd7853b16f5312d5333a77d3ae16bf750bc2d2a2761dabd3769c13d0512be22b3add6f89ec98f2494fbfe480a147456e6b4716f2a50bbea","ssdeep":"384:iGfE9phIEwTWBm94O3L0HZGwlDh/t53lxBGQT9HAaJYPnVuNLFRJSePJRKM:iGs5g94O3Y5dDh/t53lyoREWVzZ","tlshash":"75d2c5cb7cd9b558c27d70b8043770c776ba6dc17c9c595ac910fca8fc60a4a91a3ea8","first_seen":"2026-03-03T13:00:52.551799Z","last_seen":"2026-03-03T13:14:41.2007Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"winvidplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winvidplay.com/ip129jk?id=397a6738756a6e776e636833","fqdn":"winvidplay.com","domain":"winvidplay.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-03T13:07:17.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winvidplay.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:33:07 GMT","end":"Wed, 27 May 2026 09:33:06 GMT"},"fingerprint":{"sha1":"9D:1B:D5:EB:27:A2:9B:4C:DE:3A:18:C6:59:65:C7:30:DE:13:CF:E2","sha256":"CD:05:1A:2D:1A:F8:16:84:88:50:E3:B8:35:40:7B:07:FA:E7:01:7A:BF:5D:35:60:93:98:6B:5E:23:2D:09:04"}}},"request":{"raw":"GET /ip129jk?id=397a6738756a6e776e636833 HTTP/1.1\r\nHost: winvidplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 13:07:17 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nset-cookie: vf=3hcnwnju8gz9%7C1772543277%7CIiu5KvUQLVEQ8OLp-tmccbyMu1SeTJkZaNhuduYwzKk.RUoYaynNxXWIx9tnorelSMU_uEcOv6jJdU5N6iqG1kM; Max-Age=120; Path=/; Secure; HttpOnly; SameSite=None\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8hQVtMsezTldWznr%2BIEkBnsZucXDP%2FWnIBF4IbleTiJt%2BfB3be3pa7Mu%2FXaOPPQkiqPouJEVwBjMbUESwUJ0cftV6Ef5o9IsQMsrkO%2Br\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d68dd02c87eeff0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6366,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (930)","md5":"2ed3a71c2eec5a6b60c916e808feeaea","sha1":"98f9b2998bf0b728c54e806cafccb40e4c5e859e","sha256":"f153a80e3bd684386d4375cc50be58d0616f873d0cc9e53b88173917b34a377a","sha512":"9841267a7846d2fc6dd7506af6a9ac88468db9f652a12cde6ad908401e3de069d54954ba672f82b6ceca6d57de37dd93a8384f18b611bb1e9a1bee91f8c1ca50","ssdeep":"96:SuEVRo9x+Ki0TtbZZzfHiPjPtinb0OCFQlHw+JI7uN+akxnx/IZ:SVRo9kKBtZz6jt+01HCN+Xxnx/a","tlshash":"b3d12a7329b21449492394a55eb761093032c1076e009c4876deab789f1dfcd58b7efc","first_seen":"2026-03-03T13:07:41.32421Z","last_seen":"2026-03-03T13:07:41.32421Z","times_seen":1,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":39,"dns":2,"connect":8,"send":0,"wait":185,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"winvidplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winvidplay.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"winvidplay.com","domain":"winvidplay.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winvidplay.com/ip129jk?id=397a6738756a6e776e636833","date":"2026-03-03T13:07:18.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winvidplay.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:33:07 GMT","end":"Wed, 27 May 2026 09:33:06 GMT"},"fingerprint":{"sha1":"9D:1B:D5:EB:27:A2:9B:4C:DE:3A:18:C6:59:65:C7:30:DE:13:CF:E2","sha256":"CD:05:1A:2D:1A:F8:16:84:88:50:E3:B8:35:40:7B:07:FA:E7:01:7A:BF:5D:35:60:93:98:6B:5E:23:2D:09:04"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: winvidplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: vf=3hcnwnju8gz9%7C1772543277%7CIiu5KvUQLVEQ8OLp-tmccbyMu1SeTJkZaNhuduYwzKk.RUoYaynNxXWIx9tnorelSMU_uEcOv6jJdU5N6iqG1kM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Tue, 03 Mar 2026 13:07:18 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d68dd05a9644eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28870,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T19:38:47.034909Z","times_seen":13796182,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"winvidplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pagead2.googlesyndication.com/pagead/js/adsbygoogle.js","fqdn":"pagead2.googlesyndication.com","domain":"googlesyndication.com","tld":"com"},"ip":{"addr":"142.251.143.130","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winvidplay.com/ip129jk?id=397a6738756a6e776e636833","date":"2026-03-03T13:07:18.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.doubleclick.net","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:37 GMT","end":"Mon, 27 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"70:27:EA:DF:2A:3A:5A:35:72:C4:71:9B:4C:E8:EC:20:92:E2:43:CC","sha256":"B0:50:8B:ED:3C:8B:D6:63:89:33:BF:36:1C:CF:65:5F:F4:F2:A6:3D:01:05:40:BB:18:F2:25:F1:3E:93:3F:BA"}}},"request":{"raw":"GET /pagead/js/adsbygoogle.js HTTP/1.1\r\nHost: pagead2.googlesyndication.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winvidplay.com/\r\nOrigin: https://winvidplay.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nlink: \u003chttps://googleads.g.doubleclick.net\u003e; rel=\"preconnect\"; crossorigin\r\nvary: Accept-Encoding\r\ndate: Tue, 03 Mar 2026 13:07:18 GMT\r\nexpires: Tue, 03 Mar 2026 13:07:18 GMT\r\ncache-control: private, max-age=3600, stale-while-revalidate=3600\r\ncontent-type: text/javascript; charset=UTF-8\r\netag: 6352056869341461127\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\nserver: cafe\r\ncontent-length: 55815\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":163146,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4830)","md5":"9e4acc132f65aaddd477a8836e6e612f","sha1":"0cbec8524d7b6a8152f10f79e986d0723d6e3adb","sha256":"d6ba62c7cea366126c2ab09ab71947272b4b50561b941be2a8805e1b9e14c87a","sha512":"33f2853bc6decbd9dedd60b746440ed2055a8d6e0290bb2d9bd32f83c654709181ccfb9eccacec1f77f6a655c593be78ad575ad7fd7228f9543297c189dc78f7","ssdeep":"3072:eLOfiGuk/3815HUdKuWCHIfsP7yEcv/6IIBSdXVwQf7b828bSWx+lWYfUweRtNV0:eLOfijkfU5HUd9nIfsP7yEcv/6IGSdFd","tlshash":"5ff3f8d97192bcb3876389e5006f0107b52da863f40cc8b0f2d8ded97a249665277fad","first_seen":"2026-03-03T13:07:41.328528Z","last_seen":"2026-03-03T13:07:41.328528Z","times_seen":1,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":136,"dns":15,"connect":8,"send":0,"wait":24,"receive":12,"ssl":128},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidoy.com/img/favicon-32x32.png","fqdn":"vidoy.com","domain":"vidoy.com","tld":"com"},"ip":{"addr":"195.181.166.158","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winvidplay.com/ip129jk?id=397a6738756a6e776e636833","date":"2026-03-03T13:07:18.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidoy.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 19:06:51 GMT","end":"Sat, 30 May 2026 19:06:50 GMT"},"fingerprint":{"sha1":"D8:F6:86:82:E7:30:2F:7A:2C:C2:1E:AC:CF:48:80:C9:5E:5A:BE:59","sha256":"CC:AE:4F:8C:02:72:D3:8C:A6:4D:7D:C5:10:DE:68:C6:B3:85:D2:9F:E9:E4:4D:E8:F1:FD:BA:01:2A:CC:F1:17"}}},"request":{"raw":"GET /img/favicon-32x32.png HTTP/1.1\r\nHost: vidoy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winvidplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 13:07:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 856\r\nserver: BunnyCDN-SE1-725\r\ncdn-pullzone: 4839192\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=1200\r\nlast-modified: Tue, 03 Mar 2026 13:07:18 GMT\r\nx-bo-server: DE-233\r\nx-downloadsize: 1960\r\nx-bo-origindownloadtime: 166\r\nx-bo-compressionratio: 56.33%\r\nx-bo-processingtime: 79\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.47\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 03/03/2026 13:07:18\r\ncdn-edgestorageid: 725\r\ncdn-requestid: d5b93c3bbd99cfbd26928506ebeed29e\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":856,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0969aeb86b42684868e7c04778fc0c34","sha1":"5c3ea7c9891e67d22c4f3de59fc8eaa49fec6edc","sha256":"fcb667badab1de7d11083989385551fde2fbc47bb597fa1aedea93366001b246","sha512":"e25867661c543ed5d428f0861e915400bd2b0d966e4d5f745c1130f70900c37b88c90a430ceafeb5e0a1d569bd23694ebef331f8b74bbe5cd17d23b9dd081d57","ssdeep":"","tlshash":"241196d3c9acd5ccc8b8be6b2855f85c21af01f229b0d0710e1648dd69f46814e6e3bc","first_seen":"2026-03-03T03:03:51.131168Z","last_seen":"2026-03-08T23:23:04.483794Z","times_seen":8,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":18,"connect":7,"send":0,"wait":298,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winvidplay.com/cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.20991054843930956:1772539859:vihjuKvzyAstX1bLhki0e2yDdblGM_8HeGqJqY12AQg/9d68dd02c87eeff0","fqdn":"winvidplay.com","domain":"winvidplay.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winvidplay.com/ip129jk?id=397a6738756a6e776e636833","date":"2026-03-03T13:07:18.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winvidplay.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 09:33:07 GMT","end":"Wed, 27 May 2026 09:33:06 GMT"},"fingerprint":{"sha1":"9D:1B:D5:EB:27:A2:9B:4C:DE:3A:18:C6:59:65:C7:30:DE:13:CF:E2","sha256":"CD:05:1A:2D:1A:F8:16:84:88:50:E3:B8:35:40:7B:07:FA:E7:01:7A:BF:5D:35:60:93:98:6B:5E:23:2D:09:04"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.20991054843930956:1772539859:vihjuKvzyAstX1bLhki0e2yDdblGM_8HeGqJqY12AQg/9d68dd02c87eeff0 HTTP/1.1\r\nHost: winvidplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12206\r\nOrigin: https://winvidplay.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winvidplay.com/ip129jk?id=397a6738756a6e776e636833\r\nCookie: vf=3hcnwnju8gz9%7C1772543277%7CIiu5KvUQLVEQ8OLp-tmccbyMu1SeTJkZaNhuduYwzKk.RUoYaynNxXWIx9tnorelSMU_uEcOv6jJdU5N6iqG1kM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12206,"data":"Cdc1za$BPmh--PDP-5j5k5R-5qc5X5n1yTE1PS5W1fDPYD3nGr5H1CDaT35x5II5Sr3l5rpPsY5mDPgD0nkc$ffnuc5ubb55mA5C4TWk5xr1PMyhXUCWW5xiZV6-FKRy5y968SPy+mcIy9fhp5huCTEen11MIvQLyQyhl5ic$CmzccI6adqEJ3qEm5SVnvfflPT15VbadkQcCE00bhCCp5j7i5zp$6JX-5rjUsWw5xN48aEKcbe-utEzp5juc5hFS3gGjVXGD5xLUV8wi6515nb1-pDW55+VFi+W$VAE50M1IWATdVqup56ucD$dVhm9IX6FdGnA5nylbcX1Dp5$gjLm$618SnKSzKy5xA95MeBVy5PzEqSOyIW6y5VWFvc6w7atj8Ij8AVF$660+8JcTYxgJm9q66RepPyGDc51wVbNZY15gSNPis3lsdmnAXNqpImII-Lsm28P3+H+y5BunchE3RXpYPgx6rbRbnRJ66m9I$f81iCNbH89GIxwHzFYYr4frNc5DInPiAiLDkrKOa53zKp87A1uLHMiBUBALiK4NKs5Sprtnr323expjXNfOA8MZn3j1Istw7sIP9me9q5hLHAAjx2OSYhX4hLcLQi6QfFA-OVi5NzUsnWNwAnnFW$JRKSSES4H$R65Z69EXfbaIu-+L8Ni5ZkqShXfi0lwGKFptOgb+XPFbVhbQKta5q5V1$38MYSvwZ1Ypnsab$cbs39DDzKUOuN93KSRqa7Nnaxi1DKtW03a0uWRqJcY3xzTO5Er$ybi5hYuSaPak5JhEWhunFP1NwiPPYavR$1CDOaGCd6dc5xrT8S6egX5dwaw4aLpJmiDgeS5CWsfpVhBHBYPmhFr1e5DrgPCDPEJnEkhlhpW$RSy5WRnpPWByEIFgnEpg1c-iLPmcSWOwc0$1hFiLEalazSJ5qFpsED1F+nr1WS5tJtbcyg52r8jTPaOIqbc9LZS5JggKm1cNcn91lSEr1HzneWCVE-Ab16YhumcfPHbc4+HAnQja6eHukyyd06M11ekCCDXd$I6cISEC$dmaVhnG6rAV+PAqz6egEjynve$6ew7gQn2+ZHANMajar1qnp9a5gFsqMmp9LFDTNX1LEOIez3QkhrqI$OAC5PxC$$j50J9MPJ6PM1n$3$cOhgVF2FppLJmiXLrLunhmCJ-pf5MMIkhW3Er5csDy1-$lG53Xu1z5wuexqqC+$AyEDhE4FfCs$EYsCrpY3AchDPVSuiga+uJVyCzP67OdYJZx6W52yclYayF82jn4G$syuqxzxl5W1mI8m1xA40H5ByEbLpD5MzA2g1yEF7WHm9gc-iVL8U36FjKimbFjaW0vEDe1ytPO+WGMDPWtHmBKLppL7S567wEZY5bIE1J8lpr139Zrad2ZnPw75T+GADrL5dDqc4SOchlpy6Pdf4WhmycOGPO1A9ScDq7SbZtGHX0g-up0z5WhfYh5tpe1S$lPlepiKb4x2X8OY2Cz7Y2A9lDiPiqzyeQ9pxFtAeec5qwBelN0Q8-EuQags5tK62ltrL9F1OlOTQk5550vY$ikby$b5Xvr1cy9h5Sjn51hf8fkZLu+B9g3nTqlx4W$jPE$xqmm52$DPPydCka5Ad5EVg0F-z4V17FjTrEJb+JX55eM1i1j6sM85iCie5LKdhijEV1kPk$AmXYNb9qDz$Ph89kG7LHqdGeiQEwGuggPdLcxw+58BrS30yY3c1D1dS5amjcHjr114qe0cZbpQgY$VjGMrrd$ZYgjbdwYAEULEETJljdi90m45AC+2dvA1uObcLmbdJiaFPaY$HN1jylcisd$a+y337H33c1i+V$98ZqsnM8fcr1XuA31yb+3-1rJbMZhDGKQiznNUrkgh3gcgubaa$jS5DvY-K36S7M1D8AiKheJicyYynmBd6SPMyg6D5Yh5762TK6-uP13aBLI+JW5nhZzm6AKsk$g5SjB4++jzIBPNS-SqHx2VOzF+bwVQi$5Pg6XAK-L6f5+gOzJj-8mfmX1t65yaV-bcK$i1SzRAEQpewVJ9E5KVy5iGbgJnu6ja9qlwpEzisSUITcbHka8+x-PBL8Mpi1Ahy64KYgu+hS3FWEYgn$kJnhYIq2saBkhm06skKrr13EvqW5eyEHq7hMANNAgwYE1+H$659PI554zrTAGrVVsAA8pp9W9uF$KXbnkk+3C7P3yOJ27d3+ET3P1vS9scN5RuuGbVcP6mJwQ7vTI-quZniyEhdYc2ylf9H7e8xq88S5hEqLXnghh6pvG-dVV5sdmiJ6bdSYA1VbXg+fy81ZWN5LZBlBCyu1IJqxBB8pqrpjTVTAs4ID5fUaznja6rqmVsdMChuAElgV$Nk4QI+5b49DWMhGBJdmKk+4C7Sb3EEbsA-9InjXb2Eh6BRkVESpfCjPufkVV+Vt7qE+AsG6CgE1jqp2$a5fdIW0W1$y5BI1SBGU629uxqEkzPg-6-Iqp$a9RNg2Czz$yba1j+9WnB8pNy4$V4Ou+S1p-yDOclaPJTCW74LqTQXpCwC7KayjnEbrCUBPO2-s5KmYR2KaSf+1AZ-bk5XhcznrTLaahU2TGFm5TFGiA0hUptg1E1VOwc8Lb934xNHcdlOCsAK1VVc5c4EFXjx35madJlbLiPRyx7t0A09iacn1p+s9ngrfyHyba$lipvKfmFJlCMJlMk5LipY11K7-nCs7q31l5lskQrVRvaGnOicsYZJl7$Jc$yUHEzeA33m2ZBwOKyWHideVQZ1WhcbxDx64LY5yVcRETnDELh7OqBlcP5Gpzjp+EaSG994gIylk2i-jV0WkaleLVuhRkhc-dicmhDEKe3eh$dH-qbTsE$xY9bpciOk-YIEKI8NaMFKx2wrjQPvy48sVSbJpfuxAGzxpAxBcry1n5BmPxIqUgJZxDrrRRQxgBj5IFMmXsSdUILPnDMw7XEc655amhVRrO1e$JDBlA1i6FGnigGUennK7QewiBObgAJcGzP$TNDypIMiKfBjbs-5pme$WSDM1xvVkNb0zrNIs1hk1Y92l0hvkbuKNeCFZLYuK1tOpeymRCEE75djUk$ykLSzSB6yitDQUGjHXmu8M1DwE780j$DdWZ8Tu6VT1VMPu8m9MUPDXv7inc7FI-Y8J+uGCC0LPyPueVMkMtAT4SQKaTIPJA5ir9czbeznr37LGcR7AL1rb918AZhnJesHfB3pBJV02FmAsXrgkIJh5q$QjvquTSk5wGAfuPss+GAPqNIAtwg21ukrZKc6+c5B-bnAv6Cil8fL$+yVWppnglnVCuukrdrNlvLG0DwTuO23jeT-CTJXL$W5hOxuuBCEURw09xKJt236gxprYW7lwQRffAPDYi+5u4KTW-A8uqIUYz9+PVLO05KGOeiXW8cWuaCs$KXymhu8s9LhSO551AAd8igGQYJayyn-RTN2Lnsq42Cc-2L+2PyRsvN6RDMQ$qshCPIEPFCMRzhG-zsqsDPFbv9pmOCK279XCViw2fwF47aMwAwYC64CsEcLfc$E6P$63nyY3gYV2qCVa+blxlhgNggEGAieR7$$-5QrbC4eaC$JIJ4n6mPCx+ndRq$4bVwfP$Rq$lct2VPZcDY5I5Af2PbdPp6kYSsNs7sahbNb9pwExaYcaO-TSO--yECUnyMd6P6MLk$+49ia1ifp$kyn6pGxN6NgI1Ecuz$5j04EQ5Ew-i9Cwf4ijq$-RmzIfV2irZxGwNsIguPa604cY6hhNyin6UCMNs$jIFxKCM4PymIpPI5TRQRuzQILYxLX4wbA1LNbgv-DskyaCz2fPMIAIf3OwdWHsM-1APgDjEB2yE5iQPcwiANSnyENsM4AWZ2mGK3F$3Cunp5EPmr-i3rwiW9X6dHdWXNdJ5Sp4byiR$wbLJnAJzRDHT6YxlMW4nhpR8glbRYm+th43OPOCpbtI0ISwt2-Y7-RPdwPRmCfgr4f9VCPmpznRunI9MNy19fJLBGx2qmi5kR1HINExIg0-FPY1O9-jqcVgPVg-Sg+fpRD5tIw5Nb4-nRPfUPC1T--PDMy3P31GfIIyMs7+lwpIP6e1T4xiA51zlGtiD5PuC2VSE6dDnmnPCaM4fskbByp5iML$ZaM49wFfV$umBU9ilNPmBDA9+s25bBR3Aw2ncb5HFx5uzzkIVcbJbAE$ExQxlQkRPmAWcnbyPgpNe3c$pIpRkbegbEef3jicPbzynwrabxNnpyp$lSqip3P1bLYzwyEVXbjg6R$w2IpC2-FbCwbwPH7+yIbyyc5+PyMLp4YhI5E$haDmCmcSpgBcR3SjEMqB+IExT3Pz0$u$+iAgp-lnEMwalKCm8rJHCgSjmEP9sE9H$4qnpMEMsHHL79cEbWYR+bWiPnncHYlPH-P6Mskmh5Sj5fNbiMQSXGY1drmLf9JG6$xBTCMa9IpPNa72qx1NPxRwSW-4ynu2QI66XDsaaEaDAnlzInnfGVP2FLijw2yV-2V2LI09sG0LW3cal4lbCsascSXGbD$W1+PPmj5DaxeiD6arEiP5ECt4SwAm1QEQg1$j3HNa5D$uJSp$YPFmqE$Dt-tRWVnzqWOxBgjjhRjr2zjHh1YGKPucDxGwb3HnDyFxKCwwp9DHAVUMHCCSYr$U+R$u-U-gwNQy8akN-QqM6UEzpyD5Kj-17QfPhgCykSPjcU4PZxfwex6MqJwE-C+xcQe6cEUC+CxAJa5nbCEzkbTA5u9apmtN6AhYALm+EMxWaGA-Q9OwLCmgQ2+c2frB1+qKsVi1a$Ny6-BrV1CxsVmwEj-1sETa$3ahrhpcTCNIVcL4qmlP-SDn+aTiJs83tiyCcuXUhgTyrAZyP2nwXYki2nG9ejTRDRTftNTEB1AMWN1MM45YwQP5fRPJisD5BudHP$QzIzSgDV31T4TWs4KGSNsPJ5ynpcF9ib1GsLzbCiCVXIbP-xNzg4ncm+yiA6EbgJhiYBS24$y6fy82UhSJzYIiPJU41CIKVCY-JQQMlcACy-I5E6qVs9CR3fAmp$FBImeEJ9nPe13hFjPjqhQs9Vnj-R6A-E$DAsXB$YIW7UFuubgnyyaQrH+Pf-O$IQu+yJRfeskW4f-9j9JNqBRccfe-njvJHrP$4PmJx5Q3DhhrbIm6TNnU33eLbJnCqGA19PAb93Fr5sMxA-uK6B7HTyeDW9LPl1x9nShEnz3CT$cfnmZ9X-O3EPQwLnTrO9RryAOrdusQ4WE1PSmN0sxDbrHH+6bLag4SFBWrbgnW-WURMiH1icDmYruAmGfi5H64EScnm5-SZDA6W6RHZGKPr3vYKxJV+6fcKG$ETiAx3EFuAKLbpCmj--GU-1TsmP$s$3EmcGj+2sSjmHD6mAO38-0$lnCupiFhOxGERWr-84a37UE+qKC2qR05n43DA$s-$IGgDBLuzRLrbUaQ$HI3eIyhn+EbFaBz4wSHzzgJKjvgcafxPBOKOWlPIjSI0MbNt1DMbiOGq9VAFyuyyWE-Rm9W+I+Y2czgsBM2nuAyZ$4ir6CNOE3x86867QPjPsaf5uEnS4+bZcDMQhyjw1f-3DDK8D5ukmUHlcAj8rj-aBWDbGe1ay8jR4S1tHUR63e2+1J4RjSAP4+jLm-z0fZJHuEeF595NKWHMwPKinE3nCTVb$Nn-1PMI50nGNl5-IIStwfbBVG2Aj0h0LqHaWuxOHcjDCawcdUhEyiBeAe4x+EhhEb9VybR4baHIfh1$jNRPJPrfCqCqMlmwg4$+10QLC1IhSi5yd4NUi$HP$JuP5T49gZEi6P9ZSq-BJ$aJzyRS6iqQJ5PMDFn04cFcxNSkfl4DE3bBz$3HwdDdllSambRUBPVdwfSXjlEmyxj5kLW4WEiA2NuuKS+uDuDkBkB-9+BAyDPDcwgrVksSJc05REGVKCVZatwXivgNgXIXNsrjGh36VhYN$fbCiL-L-DsV493hDv-BQsHGKVSmlDbD5r+9VkLIypMPEFDALJfRE$GVP2nE$H$mxdrfKL$4$DU51PgD+NUcdjDA561U9YgXH3jk$+g0VG9iWF5DQDS+mXQErEypAPCs1E-i$zcfcnrIfTadFSr8A+Vr4YCFmlOrRdmh1$DcG7SQEnCpyDEzEP-0+yNtLWBWEIUDrLcnmInnbiqbc-K6JnLk$-KI21eceB8ihBFmXxrLBc$MHDMT+$WkDuBzKRxRM$GTVGI0u0WuPa8C4qEJ1FDLRScPtVsDf5FEm2DNyK+KKKAFHVr70+H$L7pFA8wE8UQTKY-NCMmq8Ygc104eyDbC38a+UW9fI9vBL98zBW9wr+Eh2rVKRqbCY92mi-9cPmlIAF$IPY4j+AZNLkzeaKw5Q9JkE+4EBRSl$lbpJcTAhFy8r4-KKN+y9AXqmnrUsTU0WSKAA+Hcv+KkKKUGjqbW9Vb9HF-vaqBm7X-sI-d6rhNjuJ54iB3XWSH6A5tL+jZpE04BJtG+-Vsf$uStAKRHbcPDZD6OD1juKc$yn41T39uEP0NTj4RPxXIu4ePp$4LFCETFPl6eugiPPUV2AaxiOsFlnlsM+JJ++Jl4GA7pPdhXujpl3mnyCTcabhQX2dy4jSpJsdVyqTQQ1DzBe1k1FOM10QP6Y7ReisHzIDy-CDfZW+sppJNNDpOYqK2q7wwkDsvRSz+$X+r+bxAOrb-zBccsVu4wcP3s3i2Tz-jC20EzuT+EPl9jqiVb542ThaBK2BIQD90Bd$KjJc+TjQ3XNsdYdwYXgD$+sa3E$c90c-yDtpD79KE8QlBWY7acF-NwFMzvDsKXzgwqCnIKDamBA70D7p1GZGZge2mVGAImelKOCUVdqqTIErKbYbs3Xip-sEu$8DFriNUKHzuLI-iw4kQSqtrWGZIE-Pbf1iz2Vqp3y7I8sLz3nGuH9VfwAw9Pkm7CG863ZAnDPekJWE49AZcGJt3gjCaxM80$Du-u9bk2AF8gQbHGU7RRumNmNj4s7mkJhSJiz29rXnBICMImqP27XJRnhwUSauPBhk6PTWGNUly33+EMBbgnuwiwE$EnAwdPOZ3x2X2381+l5+53fl3rb6Hcv6GGsXjDfpZUmL2T6RSK7yuYMV+bsEDPpFrUWycc8nhd8rscyMLG8s03U3zG0QQP-Oz9N8qC3lagGAkDUHeislSGtLtAaSriHA3+GTgcCEXLHbwJZabFkFe0buvrFu0G7PXaCKFlmp4+jib6AayT6w6zT+INWCp3fHjifiVTg8J$HD02axP+ARqu9GEn-awypjRi+Pcwi+IF5gRR$bdb6Ryyia5fQMYFKX51mTeV+aXHW3bCNXUzy9Dib9jk2zNQ595ySifufTz2BFljTwZZRwlnnVDi1rqBLY9OeE6dBxLefcdiOImilPyGdIWlze3xWGqcgYwGBXKXKY-8F+sXQw9VzPsVxqeyZYgy7SXm9qTfcm-m9YIgBheVhErb+qBuW0O0tU75SLAmP9eTFtLTZqYWGxLnXDE96drfvSN8j1B-DAzq2kd7d2rkBuKsE6i4ZPNCeA4rv-XicqKcJV+yi4WThEUbWyPNOlcjgAEDdxrUvEsmW5rAJUj$dSKmDd-yM85UePxpAm46BEmEEndiP5aCiDn8$bB2DvfCF2P+HzpI8BVaEXSD5zrgDYYEaPpnHjdEEqisd+jzCqkjuqhabq7h$IBSKw-RaAzRK2IfFhFO501n5xyIVhX5bw8meJ+YxfIxTO5miv2z8SDhXPyFnXuzzgi0Ip$O5F1t8m5nBj-$V6T$YpmE6ZPe9iFimP18kLh$K9FyV$lAKEU3$SJ8ED7a1zB-HLqSLFIye1PWzwh-gd5JSdRCEU-yRa+$iJ7$AOsP57LZ6g5NAJaiDygiA1pgJKPcEiPaSEeBEtEjcKzFnp6PqypAScWxhayaTxiBmP3zUPLpxDpEFE0Ha3bbn1IFck51aixscwIh9g5qHI$+3Kn3D0iUE$iGPPKMiPiqj5LXh1x1F117DgTViU-hA5e5p5DpliKCLKS2EhvydBiHY3s6p37-BpslRmny$kAr8EDBiJ1X5gimSb8pqEhwqLWx3RPYpwiKBxlLNh7l9E0cG3zKE6PBgEDP7MTubMA3bEzyAQydIXhQhND2pHdU-yDLP$iGVxP3nqg7gnEficE0Dyu$XuEahPEE7EWJMgMCH0i$g$9RuXBaiLTm8ckiEDAI7dayPack8fqSs8fwJiFcgyWamvaDTQgaA+jScPd4u5bEDprgnHebM11nDWEabb$AuLFEpELcZnCm3nSO5Y3k-PRyyMWw-aY1LvWsnbCI7hD6pyiZL$BnmkclcWy1tL-keGJ1aGDD50DjFIkkXE9DsqSCgxhWnrE77X7K3H+LpylFa71jAcU3SRMsBbEcc1NaBc3hg-bEa1sSn8b-yEa3qriRi$KbhhrENgiDlmJ868WUHO3KEilIE$j$-dT$apv7Ccu5PwLEFqpLmurnFpTaisrE2mUk$z9nLnvDcQnzYnv1ugY5eDXyHm5Bn9yP53cVEMFP9MRPlAeYcdHqfKywhKvG5D4gSm-DD-1pSAPMNgLSy1Lxa4DOHSbc-$AiL7XRV3UjbdhearFAcfqrXILcBEjFsdaBCmSKaOLjFnchBzDJSuZEagt-B2yjCXhwp+7PcmD+-kPrd$BFO3HazAf0WvEiSWEdLcXLnMb5954568zcqBLv-pE1ydPVpyg9TAf1faPBxNyyTuPxq-y0djiPEr$-+5jdilHm3pNVppEZA+bINyXbBwApccnlSchphl5k5zDRM-w7mg7Hpgr1zfxIgWaupB3-S6aSyS-Pid5-Uyq8mL$HE8EC7p1QaU1nqa$5F6c5EdLIJmuIcr6j2+Y6keCdXpg3acV1sApD4-wejrzSA+chrTYdk5UpMqN1Pf8M38D$QximYF4bOCdizyX+mCg$Os50lfpVEMbLwLsqljQ15kyr3$aYrOc+iN5IECEb1glbnPnaQP+-MwEPjE1JizWzm555wQi$75dSx5wGC8cefp$RSew6yZRj51ikyhlcVY$IxsfB3zL7hB1hajFMdC0$3Tt6W7fEuB1WPiPZ$mrCZ1YmKsqy-jL$G+6ps-MO$ZXhUfnN-MbPem1Em1fErwP0p95lJQ1gyhfpRDshH1jGV1feziIjq6pyAN-JmbuJdB1pVePzNZ78MA5u7Miv7gJ$r1W5FWlcbYSsbh$Ru0X5yapbRcwP3iFWMsh7SbxG5aeeiWtP35k5c5lpFWHD7rxZfeE-ZsyOq871778n51yEFej-EYaeT1gtcYi79KZxcFaacEAcH-WxyBLSc3xSdXyApMlLZcarWE2BKihNS2JNc7QJsWJ$6Ncg8r9DKm$wSwbNHT1pAzhwd5-hH$AB3Gb3+dCpcA5XF-MJGSPMd$4EW57iimSmyVnu5b1MivpzA7R5q$M14pBwxPsvNMWe59D6996S4MVFOckpcKWqMgzS7dYfm$JIZ1Dij7gwV-Nhguyihl7JiT3PEK-ephXWuc3lG75rPmgYkVibpbKJyF5$GkIFM1r1znuHNqFcT7wKxJp5Byb5u55ECZar0-1N5-qqBiOCUMusQhfrNaPnCq1dNW7K1HlHxHh5kItriTTZQxKiyDh$7BTNqEHSOzUSgEKFiBwYj0zT9ek$qJA6dL0c7hFpQrNBppMwqhcH7XFG3jYuFMJ7V7N63JH7zaex8Wc0l7lg75PLTTY7z5ABtxWDyCLX50r3X$ECEzl4XELTvbVEW0bfIfE0rGRjvJHebaUklTGRA9c$IhbjFOTK1mGE3M-1H$276lRX+tzyPc1Lrk5c$HIMiFVWQTx2clD5wed9pxTdPiG+5Ytc0klTzynPinN-L75idU-vECvupVFklTaB7t$0bl16w4BU-iE+fb1+m5JvflYgJhniAU$6ivBIgr4L+I3lZ-nAUsyH1A$25k-T-2f9cyErYk1nv$Vbg0mistiXn86Sgjc-Rg5nxn9vrXSc9wkea0rBmqEyZyqbqz1xVS$yfc2EVait7Da25HtzmAXaXDWaLYUwSMLNw-n8iLjhMmrgdbNne15$BE2BjGFjdLa7dCBNLgYztnbBggHkSP+cb2npJ3$BfzPjsDvTRPTx1-slAX6qlkl27y3YPAwbWjvB-D6zxInh5UnqPkiM3YIsUP+5MB5xQSbdgYd-n2BbwEDh+3-5U-3sWE3c9KVz3L3I-BGBs02WEm+nttQxHW7xWEmSIsai9skyZaN7Cm2Jas$D2EVdnXKZJZYQrSnNdyfAkJv75P6GUEDVIP7ZrWq4sAHkVIk-crGEW+I4k45nJtxjEnbhj52cf3QxV+$xJHi8dhPwTK9N$W0klTcc11cA96Fkp4SyEfTuI+V9qbEViAJTjVN-gA$D1PmLYQrhg+DzEizDFQ3a9Ys57K$rPsiMwpYMXWw11GPsCz3T7BzM6RPlnyJ4g$RLW5$bXXuPJ6pNB0rDl$zcN0-aErRiLbTt9MMugXEv1YAEjQRmm1lzQgGbv73fIG1XbpEDBTTWZfy1t$Ycnp7VU0nY+S6lxM3JyQbRvMBWGcacutYaMSS-z+gh3bjGLEIjO$QrF9iD6P2nIs4cT0aIKKK4lVFbySV9a3$sxbDZuZ-w9FsElpCJYab$ED5cMga$JVL2n7fDCU-$b+iepeB-9jE4cmhg4OcI5hXDKYZsY4eTt-aBcswi$$k-TKKZTHmS03ekhVmBFxjswz+bI3TR5zpSj98zP9YcYKkCQj4lge9GV-9IXyNLzjI77enBXRHX4e+Sk8ThKpeK0fQ4h4$qi7FRJxYaVw9WelJsHDx1aVL9m1g7FVrfCUa49rTnm$eVDy+sB6DWT7tID9R6WfkhVgKtRKuPQF76ZeU56n6d-C+NkbnLK8vGYwRVQzhVzlqxcC0QAfkV5Ul3ZD94ei49UVdPYZD925+u4SedPYHr$w1j$bDC0T$$j$21Vha3C9PIZJ--pVw9BnP9seQ1RCJS4JeLK3grc-V+3bWd0hWRHEROjAKTST8N9zcAU+-bqeOPaHDK9dVCHGnXT5W+YJSyX4Fng82LEA53jL4nVqaNKiF43+AKXCaa7IBFwA+N9v-aLHYD99qA8zWFa9tWUns0V-E6m6SpuuKb5XSB4n8B9uJwiuEJA8e-JTFuA9p0GzECYSOFj1ic0GzDnWSOFDgiB0gbACNsqk$$YB0$ziCg9F6VrY-$rbVF08t7PnwZWlLpRJSdwWK4b+U4BIPjaiP8-U+RzrTCsZzA-Y2ArKbDj72KD947e-FhCq7drVY97XS4uIc7TuuKY9qAF6IKKv4JV98+N4LIv7ZzbF-V+RUaRs7ewuXCXAA5eI2jkwAFhKeOzsRT7RCjIRGS-V45Nd2VQchdguhUFJX0un7fFEPb9BQsW1bE4$$j$Y3xX0NP6RX5UgN1Zca3SXwmcE$ApIEWdPA4LVvVOFYXKDnguXhfWv5WtjZR9fTALJPdv$xO-yzqMXEHX4qIzQSwvXpaDeEEWOBaC3qcJvX2bZIKsSl5z6g53555fED8s3uvGpcNf$PUWM1V-ZZIKM652g3yK3UWclPqu9WApJ8PpfR3Ghq8hy53VmC6jkA55PnD5xhz5ygyyLpfDMT53$k34Ei+npieMiLLPeFbcrdhyzAaVJUyGdJ++jzIXd535YpuE$ki55ApE6l55yi$HAY41SquK9w1O5k5hP6ziBn1$JAiY4ixziF09OCHjYl0HExy5BOlEMxql$4i5hBMxl0D1LZq4$5ZMxkjh5hE5i5CHGYLNQvLWgA5mHP5uEbGPue68xHmaKD5r$j5DOi5yGL+DUYt6y5gdAJVmzMRDh3JZ5OX1ccrgX9w1h555jgwPwh6Hu5cpcP40PeOs5hGtiC1y-LC85VIqbqys4i5m5jZO5bPcEEN5MJS$j1vAnKhWJ0TfGrabPMrMQy$WtA9DrACSh4eqEzpdc5nN7-shv97g3ZGc$HmLNkIfyZAGYbshUADO25UEcXm2wlTi1cPViMMjlnAhd8VZRib81B5-$jg41uviPrpaRPK5q5Sx-5pN9ygI12HK5J56in15p5HZEDWsUgN9axE9W9DBn5k2S3+a9WAymyaGJ6n3uD1fvdKcDSD$iMXZY5D7upMM7XgKhM9a9mEHpPX16gK9NKSLfDSw155FnfYp6EEkR6OjsPL2XOi8-HOv2MB9E6eR5mHNsK551$+5bwj555QN-55$GC5PYn1$357p-5C55xn1$c57pYgqEf5hzPa57pK5m-5xhE5X1icbmmEhdgY55$Qnpq55"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 03 Mar 2026 13:07:18 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-chl-out-s: 1CFSeBMgucunctEP0+CY8A==$xCiag8TeQ+k3Fp6YO//HTA==\r\nset-cookie: cf_clearance=hEQD7v5NONFJCCOSX9ATZxzJ_TMbjlZP0EfdRBg3qTc-1772543238-1.2.1.1-PG8tT_gMJ2w0aD0.T1mCwlx9G_lJ2Ff6wHh8uPeO.3DzIbW5a3AZ7QpQr5pqZYH5F.247PV4yM1HJmO_YbFXaZ1uh613gKDsDKVpnvM5dBKHUgzZ3o._0sjwH1LCfmmy8omvAdIbGGY3d6PsApya2fegCL5JRwVw5MNTZn7PTFvb.vx0T3J5LfO1EGQUyXdefs9g10Mogsaa97ohjGDUoOD0JJmkDwkBz7Y3JbJIhxg; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=winvidplay.com; Expires=Wed, 03 Mar 2027 13:07:18 GMT\r\ntiming-allow-origin: https://winvidplay.com\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d68dd06bbc14eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T19:38:47.034909Z","times_seen":13796182,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"winvidplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winvidplay.com/ip129jk?id=397a6738756a6e776e636833","date":"2026-03-03T13:07:17.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://winvidplay.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winvidplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 13:07:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27958\r\ncf-ray: 9d68dd04ebe50daa-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb09ed3-15d84\"\r\nlast-modified: Mon, 04 May 2020 23:01:39 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 331688\r\nexpires: Sun, 21 Feb 2027 13:07:17 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=g1gNLqIVqtwEpHtrslJzb9TEoDtFmrZaSSgGwlqb4oLuepcSD59PKdmXqH8kqBAUuRtK3fVSHsdMNMO0e0l4xLP7NLsuWGV%2F5qRLJX%2B7rHXKghOjcFdoSJmMyGfs8TwE9rKd5Cjh\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89476,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-15T19:36:27.684874Z","times_seen":223192,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":9,"dns":1,"connect":1,"send":0,"wait":26,"receive":1,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}