download file from jfc.org.il

[gurmurad]

I'm a registered user in the jfc.org.il and i've paid for this one film, can't download it with ffmpeg or yt-dlp

https://jfc.org.il/movie/37041-2/

i succeed to get to the MPD file thourgh the inspector, but don't know what to do next - how to decrypt it successfully?

https://d2148dkxdf27z.cloudfront.net/media/WbTRbAB2nVQKV/7460d7df/stream.mpd

any help?

[gwe202]

Do you have license for this?

[NBA456017]

It should be vdocipher

[gurmurad]

Do you have license for this?

of course! i've paid for it
but i need it as a file on my computer

[gurmurad]

It should be vdocipher

what is it?

[justnerd]

It should be vdocipher

what is it?

Lic

https://license.vdocipher.com/auth

[swappyison]

read the forum, you'll get the answer

[gwe202]

It should be vdocipher

what is it?

Lic

https://license.vdocipher.com/auth

Ok, try reading this bro
https://forum.videohelp.com/threads/407099-Vdocipher-decryption-key-retrieval

[gurmurad]

Hi everyone,

First, I would like to apologize for the long delay in responding. Life got in the way, but I am now back at it and still trying to solve this.

I’m trying to get the decryption keys for a video on jfc.org.il (VdoCipher). I have a valid L3 WVD file from my OnePlus device, and I've been trying to use several scripts (including versions of pywidevine and vdocipher-dl).

Here is what I’ve done so far:

I have extracted the PSSH from the MPD and the License URL (https://license.vdocipher.com/auth).

I am grabbing the Token from the Network tab (the one from the first /auth POST request).

I’ve tried to mimic the browser headers exactly, including the Origin and Referer (https://jfc.org.il/).

The Problem:
Despite using a fresh token (tried both regular and Incognito mode to prevent the browser from "spending" the OTP), I keep getting the following errors:

403 Forbidden: {"code":2014,"message":"Domain not allowed"} - even when the Referer header is set.

403 Forbidden: {"code":2111,"message":"Authentication failed"} - usually when I try to re-run with the same or a slightly older token.

My setup:

CDM: L3 WVD (OnePlus).

Tools: Python 3.x, pywidevine, requests.

I suspect that either my CDM is being rejected specifically by VdoCipher or I am missing a specific header (like a session cookie or an additional x-vdo-token) that is required for the authentication to pass.

Has anyone successfully bypassed the "Domain not allowed" error on this specific site recently? Any advice on how to capture the token/headers more effectively before the browser uses them would be greatly appreciated.

Thank you for your patience and help!