{"report_id":"00110304-e424-4670-af8e-2dcc41d86e9b","version":6,"status":"done","tags":[],"date":"2025-10-14T04:43:25Z","url":{"schema":"http","addr":"xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"title":"JUR-186 | [UNCENSORED] \"This might be the last erection of my life - xhdfriday"},"submit":{"url":{"schema":"http","addr":"xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-18T04:43:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":13}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"relishsubsequentlytank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"t2.gstatic.com","ip":{"addr":"142.250.178.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2013-05-07T00:09:56Z","last_seen":"2025-10-07T08:41:12.930174Z","alert_count":0,"request_count":1,"received_data":1022,"sent_data":538,"comment":"","tags":null,"fingerprints":null},{"fqdn":"p16-tiktok-ads-sg.tiktokcdn.com","ip":{"addr":"23.36.76.210","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2017-09-20","domain_rank":274094,"first_seen":"2024-10-30T11:51:31Z","last_seen":"2025-10-07T04:51:47.200906Z","alert_count":0,"request_count":2,"received_data":1989148,"sent_data":986,"comment":"","tags":null,"fingerprints":null},{"fqdn":"memojav.com","ip":{"addr":"207.148.118.22","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"domain_registered":"2019-08-28","domain_rank":218179,"first_seen":"2020-11-04T17:09:25Z","last_seen":"2025-09-08T12:26:41.710346Z","alert_count":0,"request_count":4,"received_data":938487,"sent_data":1856,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.29.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pics.dmm.co.jp","ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2006-07-10","domain_rank":409090,"first_seen":"2012-08-01T07:09:25Z","last_seen":"2025-10-13T06:53:20.27101Z","alert_count":0,"request_count":10,"received_data":703573,"sent_data":4638,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2025-10-08T05:41:48.061731Z","alert_count":3,"request_count":1,"received_data":85963,"sent_data":412,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"rashcolonizeexpand.com","ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"2024-09-01","domain_rank":31106,"first_seen":"2025-06-27T17:12:36.133274Z","last_seen":"2025-10-13T03:04:24.143059Z","alert_count":6,"request_count":2,"received_data":7627,"sent_data":956,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"image.tmdb.org","ip":{"addr":"138.199.36.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"domain_registered":"2009-09-15","domain_rank":53077,"first_seen":"2021-01-09T06:43:03Z","last_seen":"2025-10-13T03:47:54.240792Z","alert_count":0,"request_count":2,"received_data":1264,"sent_data":860,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"stbhg.click","ip":{"addr":"104.21.12.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-13","domain_rank":376060,"first_seen":"2024-12-13T22:04:19.166153Z","last_seen":"2025-10-13T15:55:58.427845Z","alert_count":0,"request_count":15,"received_data":1425489,"sent_data":6896,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-12T22:12:10.358486Z","alert_count":0,"request_count":3,"received_data":1270615,"sent_data":1299,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn001.imggle.net","ip":{"addr":"172.67.74.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-01-17","domain_rank":1959944,"first_seen":"2024-01-21T13:18:08Z","last_seen":"2025-10-14T02:45:13.827049Z","alert_count":0,"request_count":3,"received_data":238419,"sent_data":1386,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"flushpersist.com","ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2025-10-08T01:17:43.238436Z","alert_count":2,"request_count":1,"received_data":530,"sent_data":765,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-12T22:12:24.910527Z","alert_count":0,"request_count":1,"received_data":22234,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"weirdopt.com","ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":37519,"first_seen":"2025-07-08T12:55:47.272157Z","last_seen":"2025-10-08T11:21:31.763121Z","alert_count":2,"request_count":1,"received_data":377,"sent_data":417,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-12T22:12:25.402635Z","alert_count":0,"request_count":4,"received_data":163848,"sent_data":2196,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s2.googleusercontent.com","ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":185201,"first_seen":"2012-07-08T11:51:25Z","last_seen":"2025-10-11T14:44:54.515429Z","alert_count":0,"request_count":2,"received_data":2470,"sent_data":978,"comment":"","tags":null,"fingerprints":null},{"fqdn":"relishsubsequentlytank.com","ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-02-06","domain_rank":5445233,"first_seen":"2025-03-15T18:14:46.825163Z","last_seen":"2025-10-11T19:51:12.363475Z","alert_count":1,"request_count":1,"received_data":107457,"sent_data":458,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"xhdfriday.site","ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-29","domain_rank":0,"first_seen":"2025-10-14T02:45:13.205404Z","last_seen":"2025-10-14T02:45:13.205404Z","alert_count":62,"request_count":31,"received_data":1094413,"sent_data":20836,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Yoast SEO:25.8","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Draftpress HFCM","description":"Header Footer Code Manager by Draftpress is a easy interface to add snippets to the header or footer or above or below the content of your page.","website":"https://draftpress.com/products/header-footer-code-manager-pro/","common_platform_enumeration":"","icon":"Draftpress.png","categories":["WordPress plugins"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"professionaltrafficmonitor.com","ip":{"addr":"18.198.152.110","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-01-23","domain_rank":16376,"first_seen":"2025-01-25T08:56:07.448138Z","last_seen":"2025-10-12T22:34:05.876953Z","alert_count":0,"request_count":1,"received_data":423,"sent_data":451,"comment":"","tags":null,"fingerprints":null},{"fqdn":"t3.gstatic.com","ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2013-05-06T20:15:36Z","last_seen":"2025-10-14T01:52:40.74196Z","alert_count":0,"request_count":1,"received_data":1022,"sent_data":536,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"stbhg.click/js/jquery.min.js","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"104.21.12.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-04T10:47:17.230001Z","times_seen":444780,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/js/xupload.js","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"104.21.12.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ef44e11ddf37c97750431e5284e4d77","sha1":"59ed0438edbda256e8258ce41729e89e7a9f0b66","sha256":"9be83627d9e3f905d1bf43b83445f1874a98ba283e79a944acff7db7c47b2cf6","sha512":"3812f64c724a2200a8a32568e793b444748a4def13c49e78815b2608106990b813649f37a36944d19da388b759f50559635fedc8b488183d9738ecbd3b5a584f","ssdeep":"192:7IKE9YGs1axsrl6XsZWnrbll621w+4UWdRebMQ4WdReDyYQaQv7OsaaFg+BnqGQZ:EGy+qBlV9GRebVReDyYS7OsaaF10fq3u","tlshash":"0522674abaa339a12a7730350bbf52043b398407114aca54bd5cd6c4af8452897ffbfd","size":10740,"data":"","first_seen":"2024-10-19T23:08:50.51898Z","last_seen":"2026-03-11T22:57:21.208385Z","times_seen":347,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/e/dfl69ejg86fa","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"104.21.12.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b26d6f86c4345f37c33c9b3b6dc9338b","sha1":"b92b66a7dadcc3acefe2c4cbd34f36c525ef4a24","sha256":"5b3474edb6863ae89e1cfe842fb92e8ffdb6d4084a837040d36d497c4a864216","sha512":"4a761629227e8640b5401c3d20d4c21820fde23b975ac94da139912a7a4ef592f86ae1117eaa52a510b7155e9ac3c1b8413c75d429e95ff473b0b9333946382e","ssdeep":"","tlshash":"1dc02b8c720a0cb041fb27408b3fbb00b002321495d56931494923048d30e03db54c14","size":153,"data":"","first_seen":"2023-05-25T01:59:38Z","last_seen":"2026-04-02T13:28:52.639295Z","times_seen":604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/js/localstorage-slim.js","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"104.21.12.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba6facacb00551830393d637195804cf","sha1":"77d2d2802ee44767b33a2d679945cc3efa3619cc","sha256":"41bb37c8133d8e5c128820cfbe03bcbf63ce256bcbd60a1a76143472d8668e38","sha512":"90aa07250eb414ec22765ab6922f593ed3186faecc02008f0331c3e3807cace76861e01028142015308341e955f151b609d08b7d354ff2d27e0ff04ebfde81f9","ssdeep":"","tlshash":"ea41118275e1d9904be004e728b0c002e638992e705d62d0f7b7dd827c9909bcfb57fa","size":2064,"data":"","first_seen":"2023-03-07T15:52:27Z","last_seen":"2026-04-04T05:48:04.622157Z","times_seen":1478,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/idtabs.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3665ff6f8d2bf5a2af3de5d6e333a7c0","sha1":"db9f6a2b874f7c24a5827f0f1d679ed3c7d7b7e5","sha256":"2eb9d605c096771e0669e09ac60207d6171bd255b20416d07a4f14aca62a5df6","sha512":"eecce0b86b15eb438071ce1db21f49762634be3740451943ba95338939af20f18a06d5be4875bd114aaa42ee23a274279c926c625485316b3b6fa6894f624507","ssdeep":"","tlshash":"303115803241342b4a9eb1e7551b23d191be44a8980c40dcba71fe904cad7ce94f3e67","size":1543,"data":"","first_seen":"2023-03-07T01:03:54Z","last_seen":"2026-04-04T00:38:59.803684Z","times_seen":1781,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/starstruck.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4279a70d8fc5018f1a4dd4328ba56d0e","sha1":"6aec001b3bd94f107f49e62c817048b1dd5ebe27","sha256":"2914ebe7e0b33da6d390b3f42a784210f285402cf57588b90d917193f773e9aa","sha512":"025d6310ec864f81a8f0afc8f33a0e8acaf08e79250f78ab5e1c8fdd87b99c9790c4ebe17cb35fa21d9765e9817bad7db90759bce5862fbfdebccb689f03f0a2","ssdeep":"","tlshash":"34219e5c309b61ae67f2a1f4287f17015332ae14b507ca3b742900b69f9d94da63a968","size":1311,"data":"","first_seen":"2023-03-07T01:06:58Z","last_seen":"2026-04-04T00:38:59.81321Z","times_seen":877,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/isrepeater.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ceeb6d8b500945a6aaea27f52f6f5e6","sha1":"4647a4865cb5ba5dce1057b3765044ec9559eec6","sha256":"477f24a8aa73997ef9d469763c99d51a9a0e94826db0525b45542d9d7219e214","sha512":"08bcacdd9fd2e1f2c30b50fd1f9d6ab57ca431a61c3d152e4b700537f264459ec76b31bba225752f00cd434d73f6f567aaadbaceb5865136eb6c9f551435758e","ssdeep":"192:OHLiBsVoJ1jrQN+U+PZeX8+eo3MmYXRHLHoZq3Ho7:NsO/jrQNjvleo3HCW6I7","tlshash":"8722a9997691b5229267b830117f010fb23b98d6f94d5804e2ce99e6bfbd80c4227f9d","size":10380,"data":"","first_seen":"2023-03-07T01:03:55Z","last_seen":"2026-04-04T00:38:59.82646Z","times_seen":1817,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-includes/js/comment-reply.min.js?ver=6.8.3","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4a49df71f8b98c1d9f9d8fce74d89e8","sha1":"b95fcda0c8c26305ad94e80343d0cfca8a048a10","sha256":"9d4687a19cab8f7442a3bda40c45be4d10e42488e091ddd706c3caed83c3ee1f","sha512":"42cd5f854779886f24c43ed14617380110c946d1b430b454060c3b391de6fbae6d0ed8ab7cdd7cfdc9726b2d6142a4e01c4448e36088dfcee7fdd00b60909f89","ssdeep":"","tlshash":"5051a7d437c95d762a83b3395efe930271712709a50805608826c86931bcfea63b67fe","size":3026,"data":"","first_seen":"2024-11-13T06:33:24.856382Z","last_seen":"2026-04-04T10:46:31.849515Z","times_seen":56962,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7e7bc662eae0d2d5b254d3c48c0ab105","sha1":"2f5bedb5116d13fc045788d10acda9a9a0f4a4a1","sha256":"393cbbfe7832e2b2e38720ce4fd5a44323f5cd1f9906e7f38c4f1699dd988fbc","sha512":"21985eedcd090c489e87277480249b09c5af7928d6f06fe2f4a2da0d9891d2195cd82d4cf1bd9fcee667c0dd75b20a45e2fb213555c5bfc2b5ba95ffcb89b284","ssdeep":"","tlshash":"de01103f13411dbd4bd4a1c9ee52b11395e443a6e241058da19ce75c00fde36f128936","size":727,"data":"","first_seen":"2025-10-14T02:45:26.890825Z","last_seen":"2025-10-14T04:43:33.658811Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/player/jw8/jwplayer.core.controls.js?v=42","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"104.21.12.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc91b5efc8f4bb2482c2d7d5d8d9b691","sha1":"5db922c4c6caf3a7d22f57a21670281d5c31994b","sha256":"f061c139ad68d7ed1360ab6a2c8842466d2913582468c48eb2d1ee2a651fb495","sha512":"f1e175f4658e4cb1c603875c81f3b96caaab74346c78d9b320e564f0a09a8518b11123509351bfa5229ac9d867d56c6afc1118ce7c368ff1ce729de877c7d694","ssdeep":"3072:+jY7nFuuslX/Na3u6NxIeLSJhy1yiSS64pOknRBb9Wsr9BbrC3YLrmYRJ:2Yx5U/Na3JpLSJhyJOaRBRtBHzLrmYRJ","tlshash":"e9640932214252359aea82da66514604b3398085f516cfacff2ceddd4c6e9c731fabb4","size":331116,"data":"","first_seen":"2024-12-01T14:07:01.698179Z","last_seen":"2026-04-02T13:28:52.627773Z","times_seen":668,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relishsubsequentlytank.com/e5/74/0c/e5740c7b80abc2329366e06d2dc81dff.js","fqdn":"relishsubsequentlytank.com","domain":"relishsubsequentlytank.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e98223846fca2fe6b3e97400df0744f0","sha1":"4c77eb91cb0cc025a4fd33178748efb5b442b92e","sha256":"296fce823750041c89b1da12e8ffaeb47cc36cbdd2691a57b62000184e5b015d","sha512":"9d5b176a0b0188e4c8ac0d50ca29d1ad8f4e11b90aa69d4a9055f03716f143de0d82014b29bb454c07b85a15e421579e922894ffcc7a6ce55ae1a465034b1560","ssdeep":"1536:89IDYewEZykUTzY67ytOUS5VlIXga6kSFf02mdBV4mCzCgiA0eQpE0I9N0rvQ:Bn+T9RCgZ0eQp29N0rvQ","tlshash":"baa3a4883f40f17d0796b47a323fa61af0791a01509cd69cf107f1a8ae6674ab43fe65","size":106605,"data":"","first_seen":"2025-10-14T04:43:33.499193Z","last_seen":"2025-10-14T04:43:33.632387Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/e/dfl69ejg86fa","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"104.21.12.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb3a2f747e90c553769c2155d20f3ebf","sha1":"d10496bb17cb31e6c493f1429655fd723dfa3cfb","sha256":"79ac617398535f8ab3b7a4ec458a94ef2156acd847ff57111afef826d82d3742","sha512":"a1bc1a88e5a27e3270f872097bde105a03e1f7c2281f4067f2c81dee984a6be21d5e207d3237314315b7153d39c9805701b3c0486ac74137ff83230fff68540d","ssdeep":"","tlshash":"8cc09b8c251e5cb195f72740db7fb604b4423214d4d56a314d5d63845d30f17db55954","size":153,"data":"","first_seen":"2025-05-19T10:11:33.51975Z","last_seen":"2026-04-02T13:28:52.640293Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/lazyload.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3acbd4a87d123bc6b7e4ef753e63570","sha1":"3042ebd6ace02f8a053f22c5eb76c0aaec870065","sha256":"10b8714eb5a412ab0bece0bef0fcd9553a38cd0bead58a752e346d6779051373","sha512":"f536faeb35dcef8366758837b35b1547d181f425b664106e8fdbd2592928b405ff50f0114d4db6ffe445f0f732efd73172ea2ade5693dbe2f73794bf877f6432","ssdeep":"192:OO4602wGWi72hBQa0cDTrTx46C4gq4q4oFPHK818owTZ6RtA:OO460o72hVDnTxcdq4q4oFPHKI8VTIR2","tlshash":"8de1e5deb266b077a99738b4512f210f91337063bd0a9805a17ac0c25b3ca9d5237e3e","size":7238,"data":"","first_seen":"2023-03-07T01:03:55Z","last_seen":"2026-04-04T00:38:59.786815Z","times_seen":1508,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ebd34a88e1927d68a2aae4e2078ddc13","sha1":"24b2e25920a7bc5d855bb5e50b577c322441ab26","sha256":"0d0a9a41be6465ad256f15b09ab0b08c18f51c8a3bd0a5bf638b5bae0b946794","sha512":"893ba2e632e27f0509af45cd1285bf2f1c28184f4d3653a4ab18028edcf436b36a79dab619370211e838313a5409e1e45a15dea05edaa5075425c3e04d27d21a","ssdeep":"","tlshash":"9cd0233c4c1e2d078683d4ec0038f14342cd47b044064a1856148c6a07d7815878fd84","size":199,"data":"","first_seen":"2025-10-14T02:45:26.896788Z","last_seen":"2025-10-14T04:43:33.673756Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a5cbaf72ecabff49d12ac7fe346dc75","sha1":"33ec845f07bb97bb5eca31aeb64d1c3bda4af136","sha256":"5b5cda759fde40d77bceabab02c1826b496c0d6db0ce571addd5cc5136821f79","sha512":"b6d002758ab0c4f6928250cef2c9fd769bcd670c026ee3103509b0fd2aaa0cc5d36d2d06c0e057e956b76b854c3f5e8a8c1099e1a4312d6dcb520ac2de1a9877","ssdeep":"","tlshash":"ebc02b8c25035cb001db17400b1fb500b0023111e4f01c31090233045520c97b765c10","size":139,"data":"","first_seen":"2025-09-08T12:26:50.766468Z","last_seen":"2026-03-29T19:50:06.983804Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/e/dfl69ejg86fa","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"104.21.12.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"17b8318ac8c4c66d7d9e8a82d605b771","sha1":"da94fcdae646dd50749accd7c1a5cbd0abf52540","sha256":"6abe6165dbe7eeca7d2519aedef11469c5233908fa665041ed5e0d4f531d57c5","sha512":"12179712d518406e51bd53cd738745032cc3fd5cdcabc35c1287405decb1714835278f1c0ef6c13d5f74eec340075a68e86b85cafe437836b6d3d2911ef68c20","ssdeep":"","tlshash":"d8f09ea93ccd8035e335126762afa15ab45a69382c4abc16c44c48853a95dba08af54c","size":506,"data":"","first_seen":"2025-06-22T04:35:10.483003Z","last_seen":"2026-03-11T22:57:21.236081Z","times_seen":239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-2TL7NH453R","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2167e25edd11c8164edf78c946fe5a14","sha1":"1bcfb7e9085f87ab5163212af21c5c8b2691318e","sha256":"e46a5d61a55f6b4b39686288cb2015bbfaeeeeaf4e0dca7ecedcf63bdc42e54d","sha512":"777d5e88cb34a5cb6e49acd70d321b6d537f40a37dad0e0778000a0f9211372ccb4aa7ac1bb44166523cc12b72cf8bf9e2e7d392c0bc56cbbc2473b2827bc033","ssdeep":"6144:nBPb/yp2a4tM0uwbWZJT+Nju5204O0NsYXdXAQY:BWYJy0KZJu0O8","tlshash":"099419de73d674225396f078503f018ba57b28a2b44cc89af189cde42e74a9a4177f7c","size":425137,"data":"","first_seen":"2025-10-14T02:45:26.864333Z","last_seen":"2025-10-14T04:43:33.37941Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-04T10:48:36.161692Z","times_seen":685103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/front.ajax.min.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"01688e7db55bb122da5ecf1ecd76dc19","sha1":"127abb99dda567124ed64e89357caafdb672b528","sha256":"ebc7ea4f07c0230971ae1fbf81c235b1b20b8cff373f76d86dce9d10350b335b","sha512":"93ce636f46aaea47b3191fbbe42c33e57cb7c54ac956d33c32ccdc92db477955788d15d7fbfeb11e3a2881c08518859381dfb2c5aca35003677cba9909ed4b62","ssdeep":"384:1WJ5xYXJ0yfMS103o3Y93U3k3A69uDxMJxtvpWF1x1mUgspVYopnpTI6I3MIk47S:UGXfM5MigwA69uDxMJxtvpwVNRpTpxIE","tlshash":"f662635778869cca027761a1306fd50ab2b33e51d9124a06f1b9a1ec5ffdec66033b1e","size":15025,"data":"","first_seen":"2023-03-07T01:03:54Z","last_seen":"2026-04-04T00:38:59.786112Z","times_seen":1529,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/front.scripts.min.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2731772e163f205b1c9e24a5c6c7b470","sha1":"81bdbbc6fcb56e622ddfd6a6d28e72493e3f2329","sha256":"55974bc676581db39c8e596c87ebd046b4439fdb6c381e4270b43f6065393623","sha512":"4622fa5cf1c9120c4bb5439ac1f8b97ba81df1ae3b2a0093ae9f00e6a13e223e535ead27cf999d7621d8c3ea057591c9f379dab920e38877fd6caf338ddb6787","ssdeep":"48:gqhZsZGRO2NQ5XM9gMy5U8aG0vxBOCOo7JMcvTNqfQNuJoH+p58DPJEpE751KhZD:gUTn8aGExBULEen851FEBE7NPbWqi/","tlshash":"2aa1542b3222b0dd10bf2371752fa45416276d59da05498ab8b8c8da0d3fcc621a7f3f","size":4786,"data":"","first_seen":"2023-03-07T01:03:55Z","last_seen":"2026-04-04T00:38:59.800621Z","times_seen":1666,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-E2BG6CPV2J","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"643146e3d5f556d296f91be8cc06c2f4","sha1":"dcbb451e94123d0a75c8f37df28dbb108c93ca89","sha256":"2224fba180e9f060f07f5896055ac7e9ad7ade5cbe9d995bece3812c99a2195a","sha512":"136c97e24c5870eab1917047753841dd46eb04a5e4aec80208be0d708adf2219efc7d741f553153cc99e88f4c418c06bb2335c7a3e0455af6ec4f30670c34ba9","ssdeep":"6144:qBDd/yp2W4tM0uwbWZJT+Nju5204O0NsYXdXAQY:k4Y9y0KZJu0O8","tlshash":"de941ade73d674225396f078503f018ba57b28a2b44cc89af189cde42e74a9a4177f7c","size":424881,"data":"","first_seen":"2025-10-14T04:43:33.293404Z","last_seen":"2025-10-14T04:43:33.293404Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/player/jw8/provider.hlsjs.js?v=42","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"104.21.12.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b88ce761b9ebc2a7859a2e03b33ce1ed","sha1":"70d94f3c48460af13fc14eea9e5969f8f28d1a3a","sha256":"0b009d01bf513b1059d8ee15e1a8b57faeb5f8066c0f47d2cf8e1dd2454e5b28","sha512":"0bf83a6b3d8d20918df3ecfd29f7016549a8d8c8cc4aa439018295d55ebf7e136397e0fca72ae0e4bc9eebcd3384261c9a4a492b6e4d43e1fc1acd3ce872c24a","ssdeep":"6144:Fy9gZtOSTvzXBukG/xu08Q9Eu961Q3/nqJxgEMLew9rrqwZk6:MyvvG/xu0pU1cqJxgEIZF","tlshash":"aca43bdd77a5a42642c2a1a5903f4607633b7d0a340dc1acfa2be9d75db8849b03bf74","size":461504,"data":"","first_seen":"2025-04-01T21:32:19.721472Z","last_seen":"2026-04-02T13:28:52.612627Z","times_seen":602,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"04310cf79011cebea3fb86da6f8899ee","sha1":"520edb1c3b8cf22b346c3b8b120e4b1a163771fd","sha256":"e8da77a33828f2b4837adc6f2cf91a7ed9c3240f1679a195c51d19ac2ebda4a1","sha512":"912ca1f36ac191aa7d1d953ead1e503fbf5ab37b3ea71efc1734fb89bc33d20a1c21d8586435b3d7d6ed160b42d45a2635e359dd75a7fc9fbcbb4042a6de82dd","ssdeep":"","tlshash":"c3d02b8c611cb1595bef2254d87b8700d616b4135204198140dd2a705d54230431659c","size":251,"data":"","first_seen":"2023-03-07T01:03:08Z","last_seen":"2026-04-04T00:38:59.836299Z","times_seen":2074,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d36d789b4a5b12745e791c075bede5b9","sha1":"12b8335d1bff8a02f01b084d2b020f37fb06bb2d","sha256":"43c51b7934a07bf860380439d0302a2f92158dc8a17534ef7ecb878b77e0eaad","sha512":"ff7f579fca19d1bc73484b1fe6ee6d24935e0d666f987bc78648fdeff2217b9ac013921f109fcac0fdc7db3b91c9da27eb53db5810f7b4024db9745c0ac24092","ssdeep":"","tlshash":"86119b2b940413680dbe333cce1f5c453671288ae405fc675a9a6ce21e60d231271928","size":884,"data":"","first_seen":"2023-03-07T12:03:19Z","last_seen":"2026-03-28T17:33:32.646592Z","times_seen":357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rashcolonizeexpand.com/8d/e9/ae/8de9ae4b0e4b914d604a7e4b56139ffe.js","fqdn":"rashcolonizeexpand.com","domain":"rashcolonizeexpand.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"introduction_type":"scriptElement","is_inline":false,"md5":"6062294451a7a581dc74178c7c5a1332","sha1":"c8e09f671561b72bdae9fd3cfeea799629430105","sha256":"c556ffdcc50d996a51234a1dec5ae85925ffa13c788b800be900dc5eb1344d79","sha512":"5b4bcb7d6530bfa8d33d4c769d0934938af4e7842a518556021ed900fad8a06bc39c2d35494586adf34e4d6fe19095b2d41c726b8214746527e04cec9e910594","ssdeep":"192:M/H3P83adOwGuABXfKOBPpzbo3j3rFuuV6:MP/83adOwWp0j3Buz","tlshash":"fbd1a8dc768070800be7e97f776f651ab06a58501c4fe491f003a9e83d6872ed63eac1","size":6293,"data":"","first_seen":"2025-09-26T11:10:49.483616Z","last_seen":"2025-10-14T12:32:44.197235Z","times_seen":1614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/e/dfl69ejg86fa","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"104.21.12.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"891124898a1bdc600b135774fd5788b1","sha1":"5a1a3cb212396bd27348087236d6d6d67b02540c","sha256":"7b769cb06a45387d562545031963985866d6e5c1c1c6999c09b3be40684ea900","sha512":"4098191946e19321800bbccfc8fdf38da24f9d3894b041736f398822381084c1a5915f342d5bb7f78bb5d3e6aa411535506f7eee81568ef91fab2229f86822bf","ssdeep":"192:OapmM07do4gpWKyDZHwpyE65zs24XB47Uy5A9Jrzo4gE0n11CW01XUjEXS1NvCWO:Oaph07doWZHwgFmR5y5krzo66cSPQF1l","tlshash":"8f221b3989904c34c19617e8b8bba368b13a1c10b914f58efd7fe558573869378a7ac4","size":9941,"data":"","first_seen":"2025-10-14T04:43:33.545506Z","last_seen":"2025-10-14T04:43:33.545506Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/e/dfl69ejg86fa","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"104.21.12.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"efe5797253063527cab3760aaf69052a","sha1":"1de7cd6d34bdcf0ecebf74626f828efeda3f8fb7","sha256":"426f67c1733e6d41c01a3cba8a9569ef4a48c271775ed3913ff6bb13be303076","sha512":"87b4314b7a452cf677e0df2114f615a938709e05c2908aea8ce0975e210c0cff4db03aad49f80dd0c7d78a4ca755d355cab70485a127edf40e36b9728bdc5219","ssdeep":"","tlshash":"4711ce26f7ac5220d23a3167d936f2c7b43d00319415ec4efe4cd69c66a188b297a8a5","size":888,"data":"","first_seen":"2025-10-14T04:43:33.552658Z","last_seen":"2025-10-14T04:43:33.670773Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/e/dfl69ejg86fa","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"104.21.12.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76cc6a7775b7b653ba5a7d7f9cea4eb4","sha1":"6484c7b286038e9a60c38f4adc61e6ba30062c91","sha256":"a00f1ced7d3bab63e82c08fdb0b05b0e9659805756c15b085c2b9804671302c9","sha512":"38c92e616452c2021d351efc393e49b83c1405721bcab7c63eb809eb040a9cb77d87e2f9bac91373a0853d198f76616ed1759e7024a8b5b0d3d0398da48738db","ssdeep":"","tlshash":"aaa022000300b80280000cccb000c8a820ec330380c20200f223fa0eea38282c03300e","size":60,"data":"","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-04-02T13:28:52.644231Z","times_seen":1027,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-04T10:48:36.112829Z","times_seen":638528,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/owlcarousel.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"56e770f95a9cb2ce06d6b044f93c24fa","sha1":"003bdb37bbd8cfd296bcffff38ce601b6b7df8dd","sha256":"ecc9ea285df7f95f79c647d1cfaca566239d68fcb183aa274fda98f33fce813e","sha512":"7e36ac1b0cbd3835d431fca68efd11fe05c7cb52a654cb9ef4bd3adb83f465ff890116c09b9ac1935308e0a1f94dd5d1ca12813a8af9ba67f4d39327e1053800","ssdeep":"384:7Ket0QK/Q52Cgwm0PQtiRX55DzNvYUyzLsxVxRbH:dK/Q4ptuXNQUyzLI5","tlshash":"12b2a54bb2202385469372b9419b110d713bfb78fc42855c70b6dadfaa4b84e9277b3d","size":23938,"data":"","first_seen":"2023-03-07T01:03:55Z","last_seen":"2026-04-04T00:38:59.799235Z","times_seen":1762,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/starstruck.raty.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d967735d0c4a36d039142d01d02ee257","sha1":"e79738152720eef153774d3a6806d03861623f2f","sha256":"310589cc35c17dc5e369b35b45423ac830bb0a0b65f7f720a1c3b089254bd152","sha512":"ffa0ed7ed3788cb34ba92c8c94fd7c0cc4ecee293e17ab73e762b46ad604efa543dd3abc96680786632c9af5f93d374facf2daf260194f76e1787d5889017c0d","ssdeep":"192:4r1zqoHYKx2zznWhn5KsPYxUDAh8QGrCafGULhcX5LlXF/OfIpoqt:4rJxc3WwmCoKmyoqt","tlshash":"242211ccb3827146eea3337059ab270ee232be49e54a401d787dc7d1ef6990d2066e75","size":10364,"data":"","first_seen":"2023-03-07T01:06:58Z","last_seen":"2026-04-04T00:38:59.811815Z","times_seen":876,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b998fc5e0773a0d92e42295860912717","sha1":"bc5ff0d9b5b001f78338c32477e353a165b0f763","sha256":"f0bbfa7d07dafb4a9c767a649a8b65d22d20c2a91507451924574d7d0272d05f","sha512":"d9e2d9f060fe1dfe2c7a346d1e002806ee0597d4b0297fbf461bf3f268f5c3f147f05d6098bfd4db369c45b43f7cbe3c0bc0babcec8c3f2563129dda866959ef","ssdeep":"","tlshash":"6bf08b6af1030d9c0b1d83c96dbd3c8235b91527860077d6eaa9f29c05edabc7048036","size":550,"data":"","first_seen":"2025-10-14T02:45:26.932556Z","last_seen":"2025-10-14T04:43:33.692381Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-RTM6XRXKXM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"39cf32fd5f271784c91a777ab8150f73","sha1":"8e31b7e8d04dc98b9a959a73b3cfb13889b26ed6","sha256":"809dccb13a049dc2048a4a5465af5cae9e9a9a9900fe0031facc9dd59df45b26","sha512":"49e15ca15579f141ab297d83b01ec8f40c4cdc5c498340004fde528b8aaf16e42485ffab64691d58ca6c665311a56246450c32180ee1cfadfe5cbf99fe835a91","ssdeep":"6144:ZCO/yp2j4tM0uwbWZJT+Nju5204O0NsYXdXAQY:ZOY8y0KZJu0O8","tlshash":"729418de73d674225396f078503f018ba57b28a2b44cc899f189cde52e74a9a4237f7c","size":418825,"data":"","first_seen":"2025-10-14T02:45:26.588445Z","last_seen":"2025-10-14T04:43:33.18985Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/front.livesearch.min.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0eea0408655c01545c25f142ecd898fd","sha1":"1bb9d98a7fee41318007652d0723141704a658e6","sha256":"5991b17b41002817f208207448eb82392a618a9b6bf9f4ca2c8e84815769a722","sha512":"da2f11b1a3b21b0d9d5bf0da0dd692adeb76910cd115264ffdfde7b4b61bc2526f3849b8f77f9e85537acd000cd14a25068715b5281bfd9267d6e180a482a63f","ssdeep":"48:TajZ6/nJN73IMTGnJNfqdaX6DlJB/KvjFd43payvh6Y2OnJNAPn2DjL/6vtnooO:T+Z+J1YMYJZqdk67B4d45nHJa2n6ne","tlshash":"4aa1564170815dd7023b23601e3bb60ba2937faad70a9401717ed1e50fa6d8a353671f","size":4741,"data":"","first_seen":"2023-03-07T01:03:55Z","last_seen":"2026-04-04T00:38:59.815889Z","times_seen":1668,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85386,"data":"","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/e/dfl69ejg86fa","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"104.21.12.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cfa0ed354758033a4eb5f203f79c3099","sha1":"891c0faa6700537e69260aa15dd5e86eaafcb360","sha256":"39c4cbdb7b92ac92c7f48844ca466171bac0606a5da89aa457a7424957121487","sha512":"96981fde52ac154639537ff2df6c005b8fbe14212d63da1a56b0b340994be86b63975a90447d18078239127e0c327f0691025ed238e4730549e329fe0484d8f0","ssdeep":"192:0sHkOxraDE4cQXWCgO/uqwqsaSDE9EzHcGTG:0sHkOx2DE4PtWq9SsEzHrK","tlshash":"74125cbbd19108b34ad042ac780f1a287ff53cd1b831f061d69d8ccab5d0a4692f35c8","size":9018,"data":"","first_seen":"2025-10-14T04:43:33.586647Z","last_seen":"2025-10-14T04:43:33.586647Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/e/dfl69ejg86fa","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"104.21.12.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a6051ba30f29c3e96123c936393d2a64","sha1":"72e84d5c9a5c00bf06bd3a13f993bc0042c4e588","sha256":"901053724f7acbf7f9625f53d18089a232a763737f396bd1403805f59156f401","sha512":"d361d4edd33d1b9db785ec49b8d3ce4abf1f331a976adc777a3d5145ce8bf1f208404fe8b1f53f56dfb30994d34751291ae517abe33542f79807813fcffd33c3","ssdeep":"","tlshash":"f73153b63128347882f6166f7cbb624df07b55512e1e9084a01ce4643828fb9f6338ce","size":1526,"data":"","first_seen":"2024-12-13T22:04:23.912578Z","last_seen":"2026-03-11T22:57:21.257626Z","times_seen":324,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/player/jw8/jwplayer.js?v=7","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"104.21.12.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"581ff912c413cd78a30f5c212f42271a","sha1":"79af689432d0f20cd1d951eb9436711da07decd4","sha256":"c708d26c24b48c3343e8cc7879d07e8ca6f23d1cc1e5df165a9f8e24a7c5830e","sha512":"c6185ea9db6db8786aa1636537595a5f061745caf287602beafc2dca984b1eceafeb3651109cad8cf45be3dba2a76a201758c6aaa7d7fb1adc8e07e95a39f41b","ssdeep":"1536:ELyl/ByW1iqxGJaGB2lAqU6ePRtwoIWz0Bk+5cm3wUn+yUi3LAalYqlkcRPUeJaQ:L4pknUi3LAbdhHwSm","tlshash":"99e339a631c2f4a613e264c7e47a4005f1790988744de8a4faacecd67956907b1b3ffc","size":148052,"data":"","first_seen":"2025-04-01T21:32:19.723959Z","last_seen":"2026-04-02T13:28:52.626488Z","times_seen":603,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/player/jw8/vast.js?v=32","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"104.21.12.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b3eb53abc624a51f5e226d08758ddf3","sha1":"6cca061ec7c41313ec2027eaaca76fa9dfad750b","sha256":"73788e3233d5113578082f78869724925d3e4dd2c9d02fdc0bf84d6aed3a768e","sha512":"c6c7bbc31213d98134d98087ad912f1244b2dc7c7914247baac80d534663ab75135c004bf5473044db9e082302477b9d812b0a0db4c5f21b3e27508c26c265c5","ssdeep":"1536:twVnle2Qmbe005pkZ/gbxRYpYItN6X6ud7srzIjpitB39BsLIYOONMQHMkBxLNwO:tEnPRIN1D2zXkIYdN7Hnf","tlshash":"acb308872399d52247e484e960344212b335060f780a83acf67dfdef1d5ea4b76bab74","size":112211,"data":"","first_seen":"2025-04-01T21:32:19.700252Z","last_seen":"2026-04-02T13:28:52.634565Z","times_seen":561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/pwsscrollbar.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"971c9dba00bafafbbefeec7e58dfc432","sha1":"ea7fbe2e8c2725baccf3aa09fc52244708218620","sha256":"8d66e5d985349af924510cf978564a7d84164741de08f173d1fa61f0b1c2960c","sha512":"9705ffd9da0e788542d1df3542789ed38dbf2ca3eb99a609b1271dc24c2d81b4c748591f12a3114771017be0d0c8662771231b58da93ee2c775fb8b7196914e6","ssdeep":"768:J8WQosXc7u8/fP2WRHBDQXBJhoJWR/e4NKMTul/x31JuouLdL4jS:J8ZXc7dfPtHBDaoktTsx31Juo4z","tlshash":"db1329f4370534f712eb6f5e442b020923365896670788b1707d9cb82fa1de612a7f6e","size":45008,"data":"","first_seen":"2023-03-07T01:03:54Z","last_seen":"2026-04-04T00:38:59.825876Z","times_seen":1571,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/blueimp.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c33d55a46db8350f57388504aec281f","sha1":"3701799975093b4d67e3baeea453ef6202a66fba","sha256":"833047db5433fc30adfc5f85c19e600dbb6f56d462510663208a5354a984dada","sha512":"3015128555513da131cc3ee2248dfd8a44ced924b9818b7350fa3f532dac10e8e59a369c700412c20572edcd394331bbf90651256fe85e31b8dfd379c44ee341","ssdeep":"768:4u5b2Nl3O/NAHCxxw5cJ+NIdRWg2FskcQf9wJskDhY/LXeaSa4yj75H:JJQdO/N6C7w5cJ+NIdRWHFvN9wqD/LXF","tlshash":"a0e2f85db250662241d3a2ed705f690ab232d22da411918c3a7cdbdaac70d4f717bff8","size":32964,"data":"","first_seen":"2023-03-07T01:06:58Z","last_seen":"2026-04-04T00:38:59.799933Z","times_seen":837,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/js/jquery.cookie.js","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"104.21.12.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae0c2c5d8f01f7d35bb698bb618a62f7","sha1":"63556a22ddea1c5f23a5cf7d0b6d35c7aab54e20","sha256":"75aef2e95ea7f3a70999396fba0c2ab866f4ff06313cf1b07780d800a5fc1ebc","sha512":"eac94ca9d884692af8bdf12aa6e902a3be4eed0772ad8f2932ac1c3328b83a7351cdf743a409bbc0a3cd385956c08d3203d51c572bb1680489e37330fe27a2bb","ssdeep":"96:L4BZxb64Ng7V8cNwpGylRCsKZcj1JXulL6M/aGByLskPSP4lBCClf1wgCyC:LQnb6eg7DgCsk8fgZJkPSPa+gCyC","tlshash":"2e91fd293a0d231d149353f57aee10c8a930d632216ad46c744cb6b06f00c63ddfbbea","size":4331,"data":"","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-04-04T06:19:11.113197Z","times_seen":4345,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"memojav.com/image/preview/1dldss00320/1dldss00320jp-5.jpg","fqdn":"memojav.com","domain":"memojav.com","tld":"com"},"ip":{"addr":"207.148.118.22","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:04.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"memojav.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 13:04:19 GMT","end":"Wed, 24 Dec 2025 13:04:18 GMT"},"fingerprint":{"sha1":"AB:FE:13:26:95:37:7F:65:AB:78:21:EB:5E:DF:D7:EF:E7:63:D7:5E","sha256":"00:94:CD:27:13:BD:9E:FE:96:C8:EF:E5:C0:EF:0F:05:7E:B0:CC:97:67:61:2A:DC:F8:23:C4:5F:65:7D:00:94"}}},"request":{"raw":"GET /image/preview/1dldss00320/1dldss00320jp-5.jpg HTTP/1.1\r\nHost: memojav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.29.0\r\ndate: Tue, 14 Oct 2025 04:43:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 228602\r\nlast-modified: Sun, 28 Jul 2024 13:00:14 GMT\r\nvary: Accept-Encoding\r\netag: \"66a640de-37cfa\"\r\ncache-control: public, max-age=300\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":228602,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 100\", baseline, precision 8, 600x800, components 3","md5":"34ba59c76667ca92306ebcd9016302c1","sha1":"8687c105263cbc72b01d165b04dd71d6c35c5d48","sha256":"e5621d6ee2ccfed15ae261d1cdc8974f2be7f1dfa32eed8b38136c0b735fce75","sha512":"9a2dc9a5b7ed46052c7c8324b8dabc1d043d338290806151f8249da15d468469075bd1c11804b254fbe2eeabe095657d1fe40491b681ef60327378360ed60ce6","ssdeep":"6144:bpH1sTcZwa57nbW9yf3xN9ley7v5c0ulIIc6R3AvbhAsJ1iS1W:1ugZxbW943xNH1BfIcyw1rbW","tlshash":"e2241263a3b384d7914a72fcfb9657a94bd34f95279422150cec6268dc24c1e139b33b","first_seen":"2025-10-14T04:43:33.169289Z","last_seen":"2025-10-14T04:43:33.169289Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1494,"timings":{"blocked":288,"dns":0,"connect":0,"send":0,"wait":783,"receive":423,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/1start00272/1start00272jp-12.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:04.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/1start00272/1start00272jp-12.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 65768\r\nserver: openresty\r\ndate: Tue, 14 Oct 2025 04:43:04 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Mon, 03 Feb 2025 06:30:31 GMT\r\netag: \"67a06287-100e8\"\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nvia: 1.1 fe26baab4cd7f8f73bb7f560a1b08cb6.cloudfront.net (CloudFront), 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT57-P5, OSL50-P1\r\nx-amz-cf-id: eqgHYob9uw7RFN8m5F77GUCsNjOVRGfQC0eVIK_qAZM5CivIuf3KvA==\r\nage: 561437\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":65768,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 533x800, components 3","md5":"3703a17b7ac9f29c2014bf919d3e5ceb","sha1":"3d029bc7a04a3e9292c190e62cdeed90fa3d27c6","sha256":"8c448baac12f2642629fcfb164e21df5370150264e0580cd95aed4691c513c1b","sha512":"2c11c5ec3eb1347fe05b12851f7dd53cdc43be9534b43d56a0e83df8a6eb8dbf00330e798cba4c8d132c69227a8ccec0dee49f7bf3b5916c36aac9699b788700","ssdeep":"1536:K5qQjOzkAvBd8PNoUTjkH4KIZ2H8rdOdEsxrhW0O0Zsu4uKU:NQSHWkYKDH8ROex0O4mU","tlshash":"e35302fe4af34d68b42eac530e364caca713609ccfe5b45ea40e7c861bd5054b1e4359","first_seen":"2025-10-14T04:43:33.176377Z","last_seen":"2025-10-14T04:43:33.176377Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1294,"receive":261,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/front.livesearch.min.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:04.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/front.livesearch.min.js?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=32cfe22f85a58d5525edded83a29d66b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:04 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i3sDKbc%2ByBeW0JQzHNVeXXzOEyjYe9%2Fv85cIekfNjCzbues%2FeXE7AoaO7spPl9Ms6anYpGYLE%2BKIy8JlkraGbyt0HO64sNgfn2Dbhg%3D%3D\"}]}\r\ncontent-type: text/javascript\r\nage: 7094\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 98e469e6ad36b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4741,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4739), with CRLF line terminators","md5":"0eea0408655c01545c25f142ecd898fd","sha1":"1bb9d98a7fee41318007652d0723141704a658e6","sha256":"5991b17b41002817f208207448eb82392a618a9b6bf9f4ca2c8e84815769a722","sha512":"da2f11b1a3b21b0d9d5bf0da0dd692adeb76910cd115264ffdfde7b4b61bc2526f3849b8f77f9e85537acd000cd14a25068715b5281bfd9267d6e180a482a63f","ssdeep":"48:TajZ6/nJN73IMTGnJNfqdaX6DlJB/KvjFd43payvh6Y2OnJNAPn2DjL/6vtnooO:T+Z+J1YMYJZqdk67B4d45nHJa2n6ne","tlshash":"4aa1564170815dd7023b23601e3bb60ba2937faad70a9401717ed1e50fa6d8a353671f","first_seen":"2023-03-07T01:03:55Z","last_seen":"2026-04-04T00:38:59.815889Z","times_seen":1668,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/css/main.css","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"104.21.12.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stbhg.click/e/dfl69ejg86fa","date":"2025-10-14T04:43:06.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /css/main.css HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/dfl69ejg86fa\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:06 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Nov 2022 15:05:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"636fb61c-c11b\"\r\nexpires: Wed, 15 Oct 2025 05:56:06 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 514020\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mKReiEqGVPTRwPba1phD%2FH5wndHs1HJ1CeXJ0SV4mtyiD6VYAaIBaPeOxkxeHrILCIH1%2FmC5NzPVtNm0EgXGQm%2Fh5TjjnoBmuowa\"}]}\r\ncf-ray: 98e469f618ac783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49435,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text","md5":"51d559d2f974e61e564a5f8120a23a9a","sha1":"9eab84e6bf40cfca88aac7f6d849df54f27ac12d","sha256":"a01ef8569a9021b0315bf38d5d518a928d98efce576f56ac012c30f2b63e1cb6","sha512":"5a4a10a2083c3375306ea83736eb2f991cca894dd2f78582c18886609ba1ac725877abdee3ecbcb368d5bb3c57fe0b418e3d0a87bcca015d0fb8de5f51e8fdc8","ssdeep":"1536:AQV8FxnYgpery2vYsRwq9AOOGvC4DONaYi3Rz:AQVMxnYTy2v/AOOkdRz","tlshash":"c8239522a7812c0cf06bd1b67d6197d6233e4053d92b1f7c7ab93578c28e4e85173b9a","first_seen":"2023-04-09T22:09:53Z","last_seen":"2026-04-01T19:35:17.258141Z","times_seen":632,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/idtabs.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:03.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/idtabs.js?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=32cfe22f85a58d5525edded83a29d66b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:03 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d2Nxgyi9Oqk0zf%2FCOtfkWveWV2EOKz2Rlieq5mM0cM%2FW8Qzfl1NuCvTu5TKEei%2BGWxxBzpukdEgpJbwl2FpVM1eHbQx%2FVa7Pw%2BI3ug%3D%3D\"}]}\r\ncontent-type: text/javascript\r\nage: 7094\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e469e53d2bb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1543,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1541), with CRLF line terminators","md5":"3665ff6f8d2bf5a2af3de5d6e333a7c0","sha1":"db9f6a2b874f7c24a5827f0f1d679ed3c7d7b7e5","sha256":"2eb9d605c096771e0669e09ac60207d6171bd255b20416d07a4f14aca62a5df6","sha512":"eecce0b86b15eb438071ce1db21f49762634be3740451943ba95338939af20f18a06d5be4875bd114aaa42ee23a274279c926c625485316b3b6fa6894f624507","ssdeep":"","tlshash":"303115803241342b4a9eb1e7551b23d191be44a8980c40dcba71fe904cad7ce94f3e67","first_seen":"2023-03-07T01:03:54Z","last_seen":"2026-04-04T00:38:59.803684Z","times_seen":1781,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-RTM6XRXKXM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:03.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"GET /gtag/js?id=G-RTM6XRXKXM HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 14 Oct 2025 04:43:04 GMT\r\nexpires: Tue, 14 Oct 2025 04:43:04 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 139666\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":418825,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"39cf32fd5f271784c91a777ab8150f73","sha1":"8e31b7e8d04dc98b9a959a73b3cfb13889b26ed6","sha256":"809dccb13a049dc2048a4a5465af5cae9e9a9a9900fe0031facc9dd59df45b26","sha512":"49e15ca15579f141ab297d83b01ec8f40c4cdc5c498340004fde528b8aaf16e42485ffab64691d58ca6c665311a56246450c32180ee1cfadfe5cbf99fe835a91","ssdeep":"6144:ZCO/yp2j4tM0uwbWZJT+Nju5204O0NsYXdXAQY:ZOY8y0KZJu0O8","tlshash":"729418de73d674225396f078503f018ba57b28a2b44cc899f189cde52e74a9a4237f7c","first_seen":"2025-10-14T02:45:26.588445Z","last_seen":"2025-10-14T04:43:33.18985Z","times_seen":2,"resource_available":true,"data":null}},"time_used":792,"timings":{"blocked":313,"dns":1,"connect":22,"send":0,"wait":51,"receive":58,"ssl":339},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:04.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 23:05:43 GMT","end":"Fri, 28 Nov 2025 23:05:42 GMT"},"fingerprint":{"sha1":"B9:51:95:1F:A8:75:17:3A:9B:B1:75:96:F4:7D:7A:CF:3D:52:C9:71","sha256":"36:D1:B1:18:05:03:10:B2:46:BC:6C:71:A5:E7:BE:07:32:66:88:16:04:1E:5F:96:0F:10:B6:4B:BF:01:D1:42"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 14 Oct 2025 04:43:04 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32182\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 48aecf455b59cb53c9539bfaf8b78ea3\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85386,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":68,"dns":4,"connect":17,"send":0,"wait":24,"receive":18,"ssl":44},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"18.198.152.110","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:04.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xhdfriday.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://xhdfriday.site\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=92ae32a5-269b-450c-87af-70327331e6d1:1:1; expires=Fri, 12 Oct 2035 04:43:04 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"b6aa844ff8fc24822a951892547b0ee8","sha1":"8b293d7aa72f8a7cbb941ef8621fe57c83419017","sha256":"f5198ce08f678313a8921f1af8f1d4259896d0fb873f37b694d94063e86a6099","sha512":"718238129c25d5c60143211632e08d1768e38474ed2437d948cacbe2c83e0633ef88cf0f06f477eca22514f553861e2bcb929bd985f48d918ca2dc9ca80a0977","ssdeep":"","tlshash":"1390045d550c70c01ff0cf40044400001701d7d04717c0d400d74351431fc01d57d4c4","first_seen":"2025-10-14T04:43:33.196177Z","last_seen":"2025-10-14T04:43:33.196177Z","times_seen":1,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":128,"dns":3,"connect":20,"send":0,"wait":21,"receive":1,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:04.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xhdfriday.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 13 Oct 2025 23:17:37 GMT\r\nexpires: Tue, 13 Oct 2026 23:17:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 19527\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-04T10:49:10.931346Z","times_seen":714307,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":226,"dns":1,"connect":27,"send":0,"wait":24,"receive":5,"ssl":201},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t3.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=https://wtsmovies.com/torrent/movie/\u0026size=16","fqdn":"t3.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:05.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=https://wtsmovies.com/torrent/movie/\u0026size=16 HTTP/1.1\r\nHost: t3.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xhdfriday.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: image/png\r\nx-content-type-options: nosniff\r\ndate: Tue, 14 Oct 2025 04:43:06 GMT\r\nserver: sffe\r\ncontent-length: 726\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":726,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"b8a0bf372c762e966cc99ede8682bc71","sha1":"2d7c9b60d1e2b4f4726141de2e4ab738110b9287","sha256":"59bfe9bc385ad69f50793ce4a53397316d7a875a7148a63c16df9b674c6cda64","sha512":"6883c7a3f702fb3df5e698333c8a05705970fcb476a31a2008444a02122b6870de158176c86a1f6605a0783b88d3523646b4d288696e777b37cc02d5d95266ca","ssdeep":"","tlshash":"fe0165e3a34595286b870a62f4b87082162a6ae560c3c09964e4ec6e1f05168e4e5e9c","first_seen":"2023-04-05T05:54:43Z","last_seen":"2026-04-04T07:11:06.665186Z","times_seen":6576,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":85,"dns":1,"connect":29,"send":0,"wait":39,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/player/jw8/vast.js?v=32","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"104.21.12.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stbhg.click/e/dfl69ejg86fa","date":"2025-10-14T04:43:06.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /player/jw8/vast.js?v=32 HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/dfl69ejg86fa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 10 Dec 2024 07:24:43 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HWDB8kIrjNEVQysGgsREFb5GC1mRURtrghb3nyoICldVyL8SUN8rBI1AX9EOoO9CrlBmzEH8X2PXQ0EAkdFdiVxgvxdrUu1nDgU3\"}]}\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 167\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"1b653-628e55ff864c0\"\r\ncontent-encoding: br\r\ncf-ray: 98e469f72a4c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112211,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1b3eb53abc624a51f5e226d08758ddf3","sha1":"6cca061ec7c41313ec2027eaaca76fa9dfad750b","sha256":"73788e3233d5113578082f78869724925d3e4dd2c9d02fdc0bf84d6aed3a768e","sha512":"c6c7bbc31213d98134d98087ad912f1244b2dc7c7914247baac80d534663ab75135c004bf5473044db9e082302477b9d812b0a0db4c5f21b3e27508c26c265c5","ssdeep":"1536:twVnle2Qmbe005pkZ/gbxRYpYItN6X6ud7srzIjpitB39BsLIYOONMQHMkBxLNwO:tEnPRIN1D2zXkIYdN7Hnf","tlshash":"acb308872399d52247e484e960344212b335060f780a83acf67dfdef1d5ea4b76bab74","first_seen":"2025-04-01T21:32:19.700252Z","last_seen":"2026-04-02T13:28:52.634565Z","times_seen":561,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/stream/RGo4h75iirxcNZ2Y0QdDxg/kjhhiuahiuhgihdf/1760460186/45094825/index-f1-v1-a1.m3u8","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"104.21.12.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://stbhg.click/e/dfl69ejg86fa","date":"2025-10-14T04:43:07.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /stream/RGo4h75iirxcNZ2Y0QdDxg/kjhhiuahiuhgihdf/1760460186/45094825/index-f1-v1-a1.m3u8 HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/dfl69ejg86fa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 04:43:07 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZiKRTIL6zjdtdL%2F4HQCB3555sAvltVPdaG1byWy3lYzKKraTckKIbZS0EhzT4hpBX6zWrJghsinOM8g9om7CwYQzUjMEhMTmHCom\"}]}\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncf-ray: 98e469fadca723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90605,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"7aaa25e8c687d6dd83266c54c6a472bf","sha1":"82d0bb370d5dfa4b9a742ae0b17c62fde84d9c98","sha256":"e77315dfe8cae85b35b9e1c18a2dc5a571b289a9c6e7712274f70a84471bb90b","sha512":"bb19403a22fc10ddb613fb0aa85c8c662045ba0b65f8e36bba6bd2a9244a893e3d2f5d3a53c99dd8d7ddfe624b11bc26c9339ebb0edd435a67bbfcf5e860b18d","ssdeep":"384:T+UljDx/04ICom8yYU59MkMvbdaiDjuhDd3fiqfnter7VIu0lQWD39KaiIb+Kx2q:T+Ur/VZX8yYo0pammZt+6gaVbt5","tlshash":"9293b97aeb41d2881a5c4c84f675f5a4bb96cbb5fcb8538db04c52fa0cb0cab5960d0d","first_seen":"2025-10-14T04:43:33.209868Z","last_seen":"2025-10-14T04:43:33.53166Z","times_seen":2,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/front.gallery.min.css?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:03.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/front.gallery.min.css?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=32cfe22f85a58d5525edded83a29d66b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:03 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AyPeCodQV%2FTwJIaV2zkzaztlta6d4f35xHYLLu295UKSkstKbbXgnmPi7tfOTCnck%2FT%2F7crItG64nCqbSGOuslWMrlwqiAauvlmq0g%3D%3D\"}]}\r\ncontent-type: text/css\r\nage: 7095\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e469e51d25b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4256,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4255)","md5":"ec45c80bb5df55dbd19490461fa26ddd","sha1":"26e7429b1a724c22d3cabbe45df0518573d34075","sha256":"4a91d5332083b65f0d8e88dcdb513e7b08497c47b454a84ad30b29cb34d09426","sha512":"eb51181a86913dd06539b6a85365290d659a4e3b37e1ff851e429de486a71ba21458e4122da24d024ed9aa53ece47309b1752ac78ec0c2b414f22a1bbc9c687b","ssdeep":"48:bEXpufnFfNT4oJK02SjHkYQ/v8s/e2p7EYipR5aPc5nT:b8uvlF42XRs+2p7EYiB5T","tlshash":"72911e78ed38202562ffd36bb6b8a5b713bca502fa73767df164f141c68694b20121c4","first_seen":"2023-04-09T14:43:48Z","last_seen":"2026-04-04T00:38:59.795938Z","times_seen":516,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/owlcarousel.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:03.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/owlcarousel.js?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=32cfe22f85a58d5525edded83a29d66b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:03 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jcAJhjXzGhm%2FyI1cYFIoVw2r3%2FcrHo707fxoD2XsM%2BvP5Wny5zkj9rzADfQT%2FKycbTU70zU%2FCrG3BXg9ztwndCNdVu09tnNTfLx4Hw%3D%3D\"}]}\r\ncontent-type: text/javascript\r\nage: 7094\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e469e52d2ab51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23938,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (635), with CRLF line terminators","md5":"56e770f95a9cb2ce06d6b044f93c24fa","sha1":"003bdb37bbd8cfd296bcffff38ce601b6b7df8dd","sha256":"ecc9ea285df7f95f79c647d1cfaca566239d68fcb183aa274fda98f33fce813e","sha512":"7e36ac1b0cbd3835d431fca68efd11fe05c7cb52a654cb9ef4bd3adb83f465ff890116c09b9ac1935308e0a1f94dd5d1ca12813a8af9ba67f4d39327e1053800","ssdeep":"384:7Ket0QK/Q52Cgwm0PQtiRX55DzNvYUyzLsxVxRbH:dK/Q4ptuXNQUyzLI5","tlshash":"12b2a54bb2202385469372b9419b110d713bfb78fc42855c70b6dadfaa4b84e9277b3d","first_seen":"2023-03-07T01:03:55Z","last_seen":"2026-04-04T00:38:59.799235Z","times_seen":1762,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/fontawesome/webfonts/fa-brands-400.woff2","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:04.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/fontawesome/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/fontawesome/css/all.min.css?ver=5.15.1\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=32cfe22f85a58d5525edded83a29d66b\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:04 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:13 GMT\r\naccept-ranges: bytes\r\ncontent-length: 78464\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5b%2B5BmyTlX5%2B%2BLtPkXdRknc6PWovoh7YySc1sKYYUEEdk4YX6WXa7%2FL8IYIMhD8JgjxNKx00Jc12NFA0HorFn%2BvV%2FG3dPf1KxU7t%2BQ%3D%3D\"}]}\r\ncontent-type: font/woff2\r\nage: 7094\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 98e469e92d48b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78464,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78464, version 331.-31392","md5":"ff496de99efc36ce4f6f1e611ada7e65","sha1":"f6b96b15619d6c70e152ccc6901f5872b58b08be","sha256":"59beb1f8f4ea7e16c50ae0652005e6f7a39f58f9deb0e155d8c8981ea99544b0","sha512":"dde3bfcae5ba38ce8ccb853caa044a72fe126d93c87daeb1dd692723d8800a9acaaa1661ccf9bdaa91c3b9de123a0c74ddeac8525ef7bfacf6c425fb90df0323","ssdeep":"1536:7vEqiwE+StKqlFawjLAf3tMlM7qH2M++uzYQlBJGYdD:7vEbwE+StdfZPAf3tSiqVEbl","tlshash":"41731209d6241bdb50757de10de35a7dea2f98027ea4aa058f86842abc0f04cc52b5bf","first_seen":"2023-04-05T13:28:44Z","last_seen":"2026-04-03T09:23:03.081598Z","times_seen":2565,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":6,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/js/localstorage-slim.js","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"104.21.12.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stbhg.click/e/dfl69ejg86fa","date":"2025-10-14T04:43:06.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /js/localstorage-slim.js HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/dfl69ejg86fa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Nov 2021 13:32:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6193b2d0-810\"\r\nexpires: Fri, 17 Oct 2025 08:06:18 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 333408\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s6ZCDX3BJjjdu%2FTdazCLEPEnmxc32I8B7ol8j61mG6HK43V2PIcNcEcB0ZNXJDAmDUDPn1oRav6zJaA%2BzrJD2M7hzapeSzOCPOez\"}]}\r\ncf-ray: 98e469f638e9783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2064,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2063)","md5":"ba6facacb00551830393d637195804cf","sha1":"77d2d2802ee44767b33a2d679945cc3efa3619cc","sha256":"41bb37c8133d8e5c128820cfbe03bcbf63ce256bcbd60a1a76143472d8668e38","sha512":"90aa07250eb414ec22765ab6922f593ed3186faecc02008f0331c3e3807cace76861e01028142015308341e955f151b609d08b7d354ff2d27e0ff04ebfde81f9","ssdeep":"","tlshash":"ea41118275e1d9904be004e728b0c002e638992e705d62d0f7b7dd827c9909bcfb57fa","first_seen":"2023-03-07T15:52:27Z","last_seen":"2026-04-04T05:48:04.622157Z","times_seen":1478,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/lazyload.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:03.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/lazyload.js?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=32cfe22f85a58d5525edded83a29d66b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:03 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L%2FDZixslPcxOnin6jb8i8k2p1V89Sh%2F%2BWwOmK8MTvVHSCYeqh1gkbhQyH1NhP0JwXsU7cCJRfQOM%2B290VUV5zkMUQx9wiRy5HNYhbg%3D%3D\"}]}\r\ncontent-type: text/javascript\r\nage: 7095\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e469e52d28b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7238,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7209), with CRLF line terminators","md5":"c3acbd4a87d123bc6b7e4ef753e63570","sha1":"3042ebd6ace02f8a053f22c5eb76c0aaec870065","sha256":"10b8714eb5a412ab0bece0bef0fcd9553a38cd0bead58a752e346d6779051373","sha512":"f536faeb35dcef8366758837b35b1547d181f425b664106e8fdbd2592928b405ff50f0114d4db6ffe445f0f732efd73172ea2ade5693dbe2f73794bf877f6432","ssdeep":"192:OO4602wGWi72hBQa0cDTrTx46C4gq4q4oFPHK818owTZ6RtA:OO460o72hVDnTxcdq4q4oFPHKI8VTIR2","tlshash":"8de1e5deb266b077a99738b4512f210f91337063bd0a9805a17ac0c25b3ca9d5237e3e","first_seen":"2023-03-07T01:03:55Z","last_seen":"2026-04-04T00:38:59.786815Z","times_seen":1508,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/blueimp.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:03.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/blueimp.js?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=32cfe22f85a58d5525edded83a29d66b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:03 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ILKfI1ISgJX%2FraUz9vreLQfnoc85UNCwVNSIw%2Bo%2FzraPYPiSH7Y4OpONurCxCd%2F6WqTJ7c1kcUVG257Ski3LIc57E3u33nMJ6T%2FioQ%3D%3D\"}]}\r\ncontent-type: text/javascript\r\nage: 7095\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e469e53d2eb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32964,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32032), with CRLF line terminators","md5":"0c33d55a46db8350f57388504aec281f","sha1":"3701799975093b4d67e3baeea453ef6202a66fba","sha256":"833047db5433fc30adfc5f85c19e600dbb6f56d462510663208a5354a984dada","sha512":"3015128555513da131cc3ee2248dfd8a44ced924b9818b7350fa3f532dac10e8e59a369c700412c20572edcd394331bbf90651256fe85e31b8dfd379c44ee341","ssdeep":"768:4u5b2Nl3O/NAHCxxw5cJ+NIdRWg2FskcQf9wJskDhY/LXeaSa4yj75H:JJQdO/N6C7w5cJ+NIdRWHFvN9wqD/LXF","tlshash":"a0e2f85db250662241d3a2ed705f690ab232d22da411918c3a7cdbdaac70d4f717bff8","first_seen":"2023-03-07T01:06:58Z","last_seen":"2026-04-04T00:38:59.799933Z","times_seen":837,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rashcolonizeexpand.com/8d/e9/ae/8de9ae4b0e4b914d604a7e4b56139ffe.js","fqdn":"rashcolonizeexpand.com","domain":"rashcolonizeexpand.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:04.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rashcolonizeexpand.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 21:51:30 GMT","end":"Tue, 25 Nov 2025 21:51:29 GMT"},"fingerprint":{"sha1":"1E:45:CB:7E:7C:E7:1E:08:73:0A:D3:08:B4:74:21:2F:CA:B6:15:9B","sha256":"54:F3:5A:C9:08:4C:76:26:F7:0E:BF:E0:3F:5B:38:DD:53:CF:95:81:0B:FC:C7:F9:6A:3E:9C:1A:6E:33:92:E0"}}},"request":{"raw":"GET /8d/e9/ae/8de9ae4b0e4b914d604a7e4b56139ffe.js HTTP/1.1\r\nHost: rashcolonizeexpand.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Tue, 14 Oct 2025 04:43:04 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3430\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: rashcolonizeexpand.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 669d4dd0a0943b9ef436210b928b9439\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6293,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6293), with no line terminators","md5":"6062294451a7a581dc74178c7c5a1332","sha1":"c8e09f671561b72bdae9fd3cfeea799629430105","sha256":"c556ffdcc50d996a51234a1dec5ae85925ffa13c788b800be900dc5eb1344d79","sha512":"5b4bcb7d6530bfa8d33d4c769d0934938af4e7842a518556021ed900fad8a06bc39c2d35494586adf34e4d6fe19095b2d41c726b8214746527e04cec9e910594","ssdeep":"192:M/H3P83adOwGuABXfKOBPpzbo3j3rFuuV6:MP/83adOwWp0j3Buz","tlshash":"fbd1a8dc768070800be7e97f776f651ab06a58501c4fe491f003a9e83d6872ed63eac1","first_seen":"2025-09-26T11:10:49.483616Z","last_seen":"2025-10-14T12:32:44.197235Z","times_seen":1614,"resource_available":true,"data":null}},"time_used":658,"timings":{"blocked":280,"dns":1,"connect":92,"send":0,"wait":93,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t2.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=https://wtsmovies.com/subtitles/movie/\u0026size=16","fqdn":"t2.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:05.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=https://wtsmovies.com/subtitles/movie/\u0026size=16 HTTP/1.1\r\nHost: t2.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xhdfriday.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: image/png\r\nx-content-type-options: nosniff\r\ndate: Tue, 14 Oct 2025 04:43:06 GMT\r\nserver: sffe\r\ncontent-length: 726\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":726,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"b8a0bf372c762e966cc99ede8682bc71","sha1":"2d7c9b60d1e2b4f4726141de2e4ab738110b9287","sha256":"59bfe9bc385ad69f50793ce4a53397316d7a875a7148a63c16df9b674c6cda64","sha512":"6883c7a3f702fb3df5e698333c8a05705970fcb476a31a2008444a02122b6870de158176c86a1f6605a0783b88d3523646b4d288696e777b37cc02d5d95266ca","ssdeep":"","tlshash":"fe0165e3a34595286b870a62f4b87082162a6ae560c3c09964e4ec6e1f05168e4e5e9c","first_seen":"2023-04-05T05:54:43Z","last_seen":"2026-04-04T07:11:06.665186Z","times_seen":6576,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":81,"dns":1,"connect":28,"send":0,"wait":39,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/js/xupload.js","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"104.21.12.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stbhg.click/e/dfl69ejg86fa","date":"2025-10-14T04:43:06.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /js/xupload.js HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/dfl69ejg86fa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Fri, 18 Oct 2024 06:42:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6712033e-29f4\"\r\nexpires: Fri, 17 Oct 2025 08:06:18 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 333408\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eDPolJi%2BxA5fBaKSFTZxgUz4jZNQufbQUgaBBoE5v3xxOfBqrmjDUfoFgYtDoumQ%2Bx36n6Dl5XqNVY8oPCCyCmUKKwIqolWZOPMc\"}]}\r\ncf-ray: 98e469f618b4783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10740,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"7ef44e11ddf37c97750431e5284e4d77","sha1":"59ed0438edbda256e8258ce41729e89e7a9f0b66","sha256":"9be83627d9e3f905d1bf43b83445f1874a98ba283e79a944acff7db7c47b2cf6","sha512":"3812f64c724a2200a8a32568e793b444748a4def13c49e78815b2608106990b813649f37a36944d19da388b759f50559635fedc8b488183d9738ecbd3b5a584f","ssdeep":"192:7IKE9YGs1axsrl6XsZWnrbll621w+4UWdRebMQ4WdReDyYQaQv7OsaaFg+BnqGQZ:EGy+qBlV9GRebVReDyYS7OsaaF10fq3u","tlshash":"0522674abaa339a12a7730350bbf52043b398407114aca54bd5cd6c4af8452897ffbfd","first_seen":"2024-10-19T23:08:50.51898Z","last_seen":"2026-03-11T22:57:21.208385Z","times_seen":347,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/juq00982/juq00982jp-8.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:04.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/juq00982/juq00982jp-8.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 54018\r\nserver: openresty\r\ndate: Tue, 14 Oct 2025 04:43:04 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Mon, 25 Nov 2024 10:30:43 GMT\r\netag: \"674451d3-d302\"\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nvia: 1.1 fe26baab4cd7f8f73bb7f560a1b08cb6.cloudfront.net (CloudFront), 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT57-P5, OSL50-P1\r\nx-amz-cf-id: 21_ZA1S3froQYET67nb0DU3bM8vRuujTX0__lVBGsiLrh6c3b5DZng==\r\nage: 593421\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54018,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 534x800, components 3","md5":"bf61cae5dc57e185124e804f75dfac05","sha1":"66bddfdeaef2594f59bfdee9dd56423361c08bc8","sha256":"c2bbf785f4871302c294da402cf11f640e916e5330561b515481c4b43d11d1c8","sha512":"d04b82e5a05a6ed29c6823826406c5c3ebc0f469536d4ecd706fb0202147a6df1e1e3e085cf6598efe7efb950116dccb86e0765c8c872ec52f44a1db0e2eb4ce","ssdeep":"1536:+G+q7KjzpXCzKKXQqovMbzSOhPgBUV/Pgk8ExeP7Jjul:+G+q7KjzpSz9QqEMCu/omxKdjq","tlshash":"f23302c759dd541f48cd7fae1319e0a9015d339340797a68a83737981b88e90ecbe19d","first_seen":"2025-10-14T04:43:33.246246Z","last_seen":"2025-10-14T04:43:33.246246Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1048,"receive":263,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:03.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=32cfe22f85a58d5525edded83a29d66b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:03 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 09 Jun 2023 02:49:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OXc0oJqGCE6YnGFYVdafsNTMs6Or2MwihDaK10U1Ny6HnIevejnVFa%2BBhAMKFTUskNAvKzIwEm%2BPo6p5Psu7c3XRtPNJPcyoms6ksQ%3D%3D\"}]}\r\ncontent-type: text/javascript\r\nage: 7094\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e469e52d27b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-04T10:48:36.112829Z","times_seen":638528,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/pwsscrollbar.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:03.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/pwsscrollbar.js?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=32cfe22f85a58d5525edded83a29d66b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:03 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o8rVJp2N%2BuY%2B3CSP9anaEspVx%2Bg1byODEj%2FqsLtzj8pMjJlhubpquL3zLSLPtU%2BQR2uohXwIPSNHRfveai6Uy2mWxnjAv00RI49nNQ%3D%3D\"}]}\r\ncontent-type: text/javascript\r\nage: 7095\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e469e52d29b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45008,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (45007)","md5":"971c9dba00bafafbbefeec7e58dfc432","sha1":"ea7fbe2e8c2725baccf3aa09fc52244708218620","sha256":"8d66e5d985349af924510cf978564a7d84164741de08f173d1fa61f0b1c2960c","sha512":"9705ffd9da0e788542d1df3542789ed38dbf2ca3eb99a609b1271dc24c2d81b4c748591f12a3114771017be0d0c8662771231b58da93ee2c775fb8b7196914e6","ssdeep":"768:J8WQosXc7u8/fP2WRHBDQXBJhoJWR/e4NKMTul/x31JuouLdL4jS:J8ZXc7dfPtHBDaoktTsx31Juo4z","tlshash":"db1329f4370534f712eb6f5e442b020923365896670788b1707d9cb82fa1de612a7f6e","first_seen":"2023-03-07T01:03:54Z","last_seen":"2026-04-04T00:38:59.825876Z","times_seen":1571,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/uploads/2025/08/FotoJetview-1.png","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:03.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/FotoJetview-1.png HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=32cfe22f85a58d5525edded83a29d66b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:03 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 13:48:51 GMT\r\naccept-ranges: bytes\r\ncontent-length: 33727\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F3Iq07oXKqoa637q4429WuDzy1Lyrs%2BEvZHo6iYHZdYMmqj5jhH7mht7bHByFLJ9ETfC6H4UvzmWT9p8A8QQu1tK9O9Qbje9saRXWQ%3D%3D\"}]}\r\ncontent-type: image/png\r\nage: 7094\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 98e469e54d31b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33727,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 277 x 70, 8-bit/color RGBA, non-interlaced","md5":"49b45e263432403af0f84c91d4b094bc","sha1":"0e010afdccc71d96551bfe04e8ebab7bb8213631","sha256":"5d982934d511764165ea0557916624acaf0db13efee2b60e1a468d7437cde090","sha512":"56499d56acda2c5b4af44250aa8813ee1c3d3c612d2f0f34a973bf93e5f91ab411da7d47ee9568f5dc118639e48ad58082e17849f90f38db42c8664bf92822f3","ssdeep":"768:61w1HYKesVX7Fq52TsTSr48NK/FpB8GrOTdsUfKEBu:61CYCVXE5ZTc3Q/FpaGqTi7","tlshash":"43e2f28280708774943db5f67341732888935c9d072cf7fdeaec6ab9a381da548a7846","first_seen":"2025-08-16T13:25:24.519859Z","last_seen":"2026-03-29T19:50:06.964801Z","times_seen":9,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/jur00186/jur00186jp-9.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:03.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/jur00186/jur00186jp-9.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 103690\r\nserver: openresty\r\ndate: Tue, 14 Oct 2025 04:43:04 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Fri, 10 Jan 2025 09:54:34 GMT\r\netag: \"6780ee5a-1950a\"\r\nx-cache-status: HIT\r\nvia: 1.1 a9cd221873fc4319ad193b0ec9d1167a.cloudfront.net (CloudFront), 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT20-P6, OSL50-P1\r\nx-amz-cf-id: 6uYGfl7Q_oHSD1cR2OY3UK6BSTIRfNEt2Sd8lVqRoYjdohWyZRfc0w==\r\nage: 270618\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":103690,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x534, components 3","md5":"effd111959e264c79527e7e593aa3ae6","sha1":"470c058f4163dca9448b619be9037c36f852266a","sha256":"ba7eef69b9954cb51ebe8a6c2e1d958fa9bc01a5ffb7a5b93516948642cbacb7","sha512":"3e81bc260b557b03d7c14557caa06dc313e33760f789b69e58667d9095e643af59e8214dd6b69183cb87256267747cbb4386f91f169d726baa2b982bcc4874fe","ssdeep":"3072:M3QRDZBi056Xd2++Wgt1JmAXrqM7KVvJbK:mQ9ZBeN2Z9mAXruZ0","tlshash":"e5a31233d78062edcdef583628054274a2ad2c2d342a7c97f527b1ac6707648fb79534","first_seen":"2025-10-14T04:43:33.256107Z","last_seen":"2025-10-14T04:43:33.302413Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1634,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1092,"receive":542,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/jur00186/jur00186jp-5.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:03.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/jur00186/jur00186jp-5.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 60549\r\nserver: openresty\r\ndate: Tue, 14 Oct 2025 04:43:04 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Fri, 10 Jan 2025 09:54:33 GMT\r\netag: \"6780ee59-ec85\"\r\nx-cache-status: HIT\r\nvia: 1.1 38cc2c49b1f39546c075213022cc89f8.cloudfront.net (CloudFront), 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT57-P5, OSL50-P1\r\nx-amz-cf-id: U8vvnd5jZ2T00_0C6S8UjTN8S8eqU-hWROk2CBwLDU9bHyxscB0d1g==\r\nage: 202240\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60549,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x534, components 3","md5":"8db87e519d4ce07bb2c77633d2f867ec","sha1":"77bc546804a0c6870a392d836739dc0ff53a70af","sha256":"b2d51de1656f28cc049dc1e27ec6e990e2b880d0a6e79f1e9a3a008b5bb4c1e9","sha512":"29e463dcf835333619ecb833917155e52698a9b17abe799f3a865e7132e1f42ab722c8208622bb1bfeb6bd9414d5b0c8f8625ba79c533b6d3ed6e7f0e37c71ec","ssdeep":"1536:XBY84jwiByc9LlRC045iJoWeXgpvkD9Xy:XBYHScprs5iJoUm5y","tlshash":"2f43029d60091f19e1ef2d718e1af133fc054e66254e5392939002af7fe49d2fb1ca9a","first_seen":"2025-10-14T04:43:33.259243Z","last_seen":"2025-10-14T04:43:33.439328Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1086,"receive":271,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn001.imggle.net/webp/poster/20250606/1752167661.webp","fqdn":"cdn001.imggle.net","domain":"imggle.net","tld":"net"},"ip":{"addr":"172.67.74.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:04.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imggle.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 00:26:18 GMT","end":"Fri, 28 Nov 2025 01:26:04 GMT"},"fingerprint":{"sha1":"3D:D7:A4:29:CD:9D:68:E2:6D:DD:CB:4F:B7:65:26:2D:B8:3E:01:F6","sha256":"92:07:49:FB:FC:89:EC:3B:E7:48:EB:4C:8E:D0:E3:C2:24:FD:F3:84:C3:2F:D6:AE:8D:D2:21:6B:0F:F2:1B:4B"}}},"request":{"raw":"GET /webp/poster/20250606/1752167661.webp HTTP/1.1\r\nHost: cdn001.imggle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 79246\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 10 Jul 2025 17:14:23 GMT\r\netag: \"686ff4ef-1358e\"\r\nexpires: Thu, 17 Sep 2026 15:02:09 GMT\r\ncache-control: max-age=31536000\r\nx-cache: MISS\r\ncf-cache-status: HIT\r\nage: 1406188\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DJlfvwh3uAPwzhefZZRDfkVpcAXrLOBs%2BSooDfRV77kNRjZe%2BOcI72YAJpXRuUzJCNjvDIm9rudSBNAuosW6DgUjQP6DTBMb7GIkI%2FjghluI\"}]}\r\ncf-ray: 98e469e6596323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79246,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x426, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1f5f8e5d56609b74daa99fc2c4e444c6","sha1":"22ffc3d49cce3fe8d712181deda3cc055a81f80f","sha256":"d10f3f1b0757e8a36d4e75156c486214c21b598563f1913dbc570361f7956143","sha512":"64df4911d9c5e313e5afe11dd5d920874fa1335b97fc5d057b2ea81abd248658266da97a7a60dd5fd667e24c804df79a5e3943893c734ddf942aeeb7d1fbf356","ssdeep":"1536:JqOO4Vw8U44zif/n1RW7wIFHU4AcMXDAWoVyg+m+CjGVwSlLKXePBij:ke68Uzz4S7ajcMm0wS8Xe5ij","tlshash":"bb7301012137257e855f4a3d5a0b4ae1e4f1f46adb6932f726ea9eba0aff142300590d","first_seen":"2025-10-14T04:43:33.262321Z","last_seen":"2025-10-14T04:43:33.262321Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/jur00186/jur00186jp-7.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:03.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/jur00186/jur00186jp-7.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 65433\r\nserver: openresty\r\ndate: Tue, 14 Oct 2025 04:43:04 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Fri, 10 Jan 2025 09:54:33 GMT\r\netag: \"6780ee59-ff99\"\r\nx-cache-status: HIT\r\nvia: 1.1 38cc2c49b1f39546c075213022cc89f8.cloudfront.net (CloudFront), 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT57-P5, OSL50-P1\r\nx-amz-cf-id: yL6NvPSGpP6P1iA1b_ZNravIaQlVjkLXZSsC5e-3e3bSs89aBH4uaQ==\r\nage: 535929\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65433,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x534, components 3","md5":"123097861aab34f9c940b2199fa14ba3","sha1":"f0cbfdbf02d986c948b4b295ac72d0e1de204f75","sha256":"08a8f72b9e6c0ea94c0dee58c5c77e421bf0dadb5cb6b7064339ef37d1d56aaf","sha512":"e349597bdf90c75fd1846f07262a6fdfd57ea92f8cffde892aaf93cc787f7f3001fb4c78dff1ae4aa6bddfbbdad7ce33536a0dc819afc5d4363a61f6d3b04521","ssdeep":"768:vIZz4Oi8UbyO8B2vnTaBbIUQTQ2LiYcBu5rbXUMrMaumQLBYo3PJFuIfs9ZBiEQP:vu4OnUbyl+w0lVLEe+77OQYZVi","tlshash":"295302cb29538eaec915921392d27b68974cc9e28fe8735cf50ba0df57a9741034b709","first_seen":"2025-10-14T04:43:33.265434Z","last_seen":"2025-10-14T04:43:33.636413Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1397,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":1089,"receive":271,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:03.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=32cfe22f85a58d5525edded83a29d66b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:03 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 28 Aug 2023 14:14:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AxHuuj1dXRmwymhL7M2K04UHGBwll9eBZYrtIHxNiWOLGnuH3dmtiRu26seUVoxy5G4%2BuLwQfXtSWbKghVSkT5hefM1Yco1DF1efww%3D%3D\"}]}\r\ncontent-type: text/javascript\r\nage: 7095\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e469e52d26b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-04T10:48:36.161692Z","times_seen":685103,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w92","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"138.199.36.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:03.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Sep 2025 20:10:35 GMT","end":"Mon, 22 Dec 2025 20:10:34 GMT"},"fingerprint":{"sha1":"9B:24:B0:91:79:AC:B0:0C:F8:BA:AA:DC:AC:6D:67:E9:B9:AF:6F:BE","sha256":"11:31:79:0F:81:6F:B5:20:34:07:93:CB:FF:0D:3B:0D:EF:34:FB:C5:B5:99:92:02:90:BE:9E:5A:2D:FD:5A:E7"}}},"request":{"raw":"GET /t/p/w92 HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 14 Oct 2025 04:43:03 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-DE1-1054\r\ncdn-pullzone: 775336\r\ncdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf\r\ncdn-requestcountrycode: NO\r\ncache-control: max-age=43200\r\netag: W/\"653e955073f6ff68f1e0cfa5a613ef75\"\r\nlast-modified: Thu, 08 Apr 2021 15:54:44 GMT\r\ncdn-cachedat: 10/13/2025 21:29:16\r\ncdn-proxyver: 1.38\r\ncdn-requestpullcode: 404\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 863\r\ncdn-status: 404\r\ncdn-requesttime: 0\r\ncdn-requestid: b51591085c254bc9899194d9ee140cee\r\ncdn-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T10:49:22.366716Z","times_seen":13328728,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":4,"connect":22,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/uploads/2025/08/cropped-FotoJet-7ff-192x192.jpg","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:05.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/cropped-FotoJet-7ff-192x192.jpg HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=32cfe22f85a58d5525edded83a29d66b; _ga_RTM6XRXKXM=GS2.1.s1760416984$o1$g0$t1760416984$j60$l0$h0; _ga=GA1.1.909450301.1760416985; dom3ic8zudi28v8lr6fgphwffqoz0j6c=92ae32a5-269b-450c-87af-70327331e6d1%3A1%3A1; pp_main_e5740c7b80abc2329366e06d2dc81dff=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:05 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 13:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6529\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gDKJLlUz0J4oli%2BldsCvS6HcITQQsN7kIH%2FefgqR%2Fu2iJLunukHM277YmLY6zqV1ubWm9HB6lh8B21KVaun5G4Q%2F0kTf3Iq6rwz6og%3D%3D\"}]}\r\ncontent-type: image/jpeg\r\nage: 7094\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 98e469f14d71b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6529,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 192x192, components 3","md5":"23bc4d743935398bb8f1b5fa97da70f9","sha1":"8f3a6135412ea38327c0018e813bd8ec02ef4fef","sha256":"3d622014dfc5dc8a63e1a4dd62bcd583c5fe098a45f324a67b71dd8b7f66a872","sha512":"ffd9414b0079b76424870cb95fbd7f90573879f592ec5141c788ebaf65eaa48261310357a539d017c2fce30290ee8ca1f4213d1b32ace265bec6a1f6d8515dcf","ssdeep":"96:/PEAD7mvcyRjIMsYVPNWbRiJk47FtWL7AjwX9cFaQZoWJSqcn1Duge0GqjXB93+X:/PovcgMKVPNYavFtC4ccAM7U1DXBBS3","tlshash":"76d14b6f4b0181c1fa214eecba8307ed418a6a11f98739628b3accd2b4695d45ddfc38","first_seen":"2025-09-08T12:26:50.662724Z","last_seen":"2025-10-30T02:38:15.619697Z","times_seen":6,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-14T04:43:01.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Tue, 14 Oct 2025 04:43:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/\r\nserver: cloudflare\r\nvary: Accept-Encoding,Cookie\r\nx-redirect-by: WordPress\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3h%2BzfKsstaRFd71xOsyGbgXC6RqhiAnNdWvniVwiDaqn3Icw6RfFZd330PcWRN1YrhMIc2atq%2FKuCXxklzKCDtj%2Foskf4XyGuLsV6bvU\"}]}\r\ncf-cache-status: DYNAMIC\r\nset-cookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=32cfe22f85a58d5525edded83a29d66b; Path=/; Max-Age=31536000; Expires=Wed, 14 Oct 2026 04:43:02 GMT\r\ncf-ray: 98e469d89a208be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50088,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T10:49:22.366716Z","times_seen":13328728,"resource_available":true,"data":null}},"time_used":1215,"timings":{"blocked":192,"dns":1,"connect":1,"send":0,"wait":831,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"memojav.com/image/preview/1fns00037/1fns00037jp-5.jpg","fqdn":"memojav.com","domain":"memojav.com","tld":"com"},"ip":{"addr":"207.148.118.22","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:04.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"memojav.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 13:04:19 GMT","end":"Wed, 24 Dec 2025 13:04:18 GMT"},"fingerprint":{"sha1":"AB:FE:13:26:95:37:7F:65:AB:78:21:EB:5E:DF:D7:EF:E7:63:D7:5E","sha256":"00:94:CD:27:13:BD:9E:FE:96:C8:EF:E5:C0:EF:0F:05:7E:B0:CC:97:67:61:2A:DC:F8:23:C4:5F:65:7D:00:94"}}},"request":{"raw":"GET /image/preview/1fns00037/1fns00037jp-5.jpg HTTP/1.1\r\nHost: memojav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.29.0\r\ndate: Tue, 14 Oct 2025 04:43:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 260329\r\nlast-modified: Sun, 18 May 2025 14:14:12 GMT\r\nvary: Accept-Encoding\r\netag: \"6829eb34-3f8e9\"\r\ncache-control: public, max-age=300\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":260329,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", baseline, precision 8, 532x800, components 3","md5":"6f5d50674b3da6ced969fbd74d01b4b4","sha1":"c15007b74b05171ff857a061e1a12c428f1a40d3","sha256":"533244312ca2e61128d8f26cfd3a882481617049c3e00d65bccb58a16e2b47fd","sha512":"64ff5e2541b0cd36e218ddb9a4125267dd4454fd78457327a927cf847c9eb61fcf2913f4220242a9040b9483af385cfea6c5f93af79d37adc68b849c791c8fa9","ssdeep":"6144:Ev5sp/XEMiV9zBWkwAY+H+5m8PlHGFTMdcEP5:Eo/eB5rH+MyHG6SE5","tlshash":"eb4413bdd6316365cfc9a981af46236835fcdd3a745a60d264e420dec8eb0498b1cf6c","first_seen":"2025-10-14T04:43:33.278405Z","last_seen":"2025-10-20T06:25:38.726308Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1583,"timings":{"blocked":358,"dns":0,"connect":0,"send":0,"wait":783,"receive":442,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/player/jw8/jwplayer.core.controls.js?v=42","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"104.21.12.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stbhg.click/e/dfl69ejg86fa","date":"2025-10-14T04:43:06.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /player/jw8/jwplayer.core.controls.js?v=42 HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/dfl69ejg86fa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 24 Oct 2024 08:24:46 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FrDIa5eHR0kyoMH1RlIj%2B5bZT5vqUK9V8UL9oAN3SDLEGhcJbPbxaRMtCHddThhtt8YVspBc%2BORJIZ6aKB7Mpv7O7pp0GtvYt1KS\"}]}\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"50d6c-62534bc2f2f80\"\r\ncontent-encoding: br\r\ncf-ray: 98e469f7aaec783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":331116,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"bc91b5efc8f4bb2482c2d7d5d8d9b691","sha1":"5db922c4c6caf3a7d22f57a21670281d5c31994b","sha256":"f061c139ad68d7ed1360ab6a2c8842466d2913582468c48eb2d1ee2a651fb495","sha512":"f1e175f4658e4cb1c603875c81f3b96caaab74346c78d9b320e564f0a09a8518b11123509351bfa5229ac9d867d56c6afc1118ce7c368ff1ce729de877c7d694","ssdeep":"3072:+jY7nFuuslX/Na3u6NxIeLSJhy1yiSS64pOknRBb9Wsr9BbrC3YLrmYRJ:2Yx5U/Na3JpLSJhyJOaRBRtBHzLrmYRJ","tlshash":"e9640932214252359aea82da66514604b3398085f516cfacff2ceddd4c6e9c731fabb4","first_seen":"2024-12-01T14:07:01.698179Z","last_seen":"2026-04-02T13:28:52.627773Z","times_seen":668,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=92ae32a5-269b-450c-87af-70327331e6d1\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=e5740c7b80abc2329366e06d2dc81dff\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=4","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:07.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 21:53:17 GMT","end":"Fri, 28 Nov 2025 21:53:16 GMT"},"fingerprint":{"sha1":"AA:2A:FC:C2:EE:01:8F:55:3F:19:46:84:4A:C8:A0:95:62:50:5C:A3","sha256":"3D:8C:1A:2E:1F:32:30:D4:D8:4F:D2:FB:CC:99:F1:9C:05:E5:7B:D8:9D:7D:24:86:AD:C5:1E:62:55:44:A4:CA"}}},"request":{"raw":"GET /pxf.gif?uuid=92ae32a5-269b-450c-87af-70327331e6d1\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=e5740c7b80abc2329366e06d2dc81dff\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=4 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 14 Oct 2025 04:43:08 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 9c9f9311223fc58d4c97a9f231de8689\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T10:49:22.366716Z","times_seen":13328728,"resource_available":true,"data":null}},"time_used":681,"timings":{"blocked":292,"dns":1,"connect":92,"send":0,"wait":97,"receive":0,"ssl":194},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto%3A300%2C400%2C500%2C700\u0026ver=2.5.5","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:03.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:42:00 GMT","end":"Mon, 15 Dec 2025 08:41:59 GMT"},"fingerprint":{"sha1":"E9:4F:AE:49:69:8C:15:95:B2:F7:9C:C0:6F:DA:FF:C6:06:1A:22:46","sha256":"89:56:CA:FF:85:BC:CA:ED:64:3B:13:28:77:62:7B:0C:FD:25:AB:78:F3:7E:B5:34:21:E4:79:F2:F9:D2:8C:E7"}}},"request":{"raw":"GET /css?family=Roboto%3A300%2C400%2C500%2C700\u0026ver=2.5.5 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 14 Oct 2025 04:43:04 GMT\r\ndate: Tue, 14 Oct 2025 04:43:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21548,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"0ce0e705786211ddc60130dddbf31333","sha1":"3c8d0490b0f4b830c1f60f3c92e93c7ac1db586f","sha256":"f6182b1cbcd08174f2dc7eb2d65036aa68cd510971385d1f5cf7d5aea1c72604","sha512":"5a6ccf3337289ca09fca8ea809d96cfbe90008a8d357bef80c59045ae14d2298f86785471a357bdd637dabc6a18301ed16dd877da7bc1500c460ea1ffc57d3e4","ssdeep":"384:3wfnw+whwdwySw/qY4owmwGw3wfawDwwwkwyfw/qY45wLwrwcwfFwYw7w/wyEw/O:3KNyEfSQv3rgXU/9ffQiqGr8vkSfEQNg","tlshash":"e7a2fba108174000978358e223cebf34fe4f92507141d0b5abfd9b6bedcbca652693ad","first_seen":"2025-09-09T04:44:57.736265Z","last_seen":"2025-11-19T00:00:14.757832Z","times_seen":2883,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":167,"dns":0,"connect":28,"send":0,"wait":47,"receive":0,"ssl":163},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"memojav.com/image/preview/1dldss00406/1dldss00406jp-6.jpg","fqdn":"memojav.com","domain":"memojav.com","tld":"com"},"ip":{"addr":"207.148.118.22","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:04.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"memojav.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 13:04:19 GMT","end":"Wed, 24 Dec 2025 13:04:18 GMT"},"fingerprint":{"sha1":"AB:FE:13:26:95:37:7F:65:AB:78:21:EB:5E:DF:D7:EF:E7:63:D7:5E","sha256":"00:94:CD:27:13:BD:9E:FE:96:C8:EF:E5:C0:EF:0F:05:7E:B0:CC:97:67:61:2A:DC:F8:23:C4:5F:65:7D:00:94"}}},"request":{"raw":"GET /image/preview/1dldss00406/1dldss00406jp-6.jpg HTTP/1.1\r\nHost: memojav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.29.0\r\ndate: Tue, 14 Oct 2025 04:43:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 202104\r\nlast-modified: Sat, 28 Jun 2025 15:15:31 GMT\r\nvary: Accept-Encoding\r\netag: \"68600713-31578\"\r\ncache-control: public, max-age=300\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":202104,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", baseline, precision 8, 534x800, components 3","md5":"c55ad1683575e888c4bc7362034f0747","sha1":"4afc07e25e5c5f3acb27d5ff51418313eba1b1a5","sha256":"941a8c8dd5980c3b95396fca6672e2d100ea811465e0a054972eb0f52924aa4d","sha512":"24faca377068b0b02278eb3abb8daa9647212e2ae9edf3c17b4ca48e7f48049637163ea733b7e484357b8c26f15d549bc4264c2fb843bf7ca00efbad25c3641c","ssdeep":"3072:hG40G7hfEYWYX0blBJYaLXjHx/3wdFjMcpGISRqf5TmF6T+EAp3o:UW7ZED7bZzrJ3wd3TS4c0T+EAxo","tlshash":"ef142392a22512970f9dc14711ce371fd6c74af8226df8146eb12d19d0d68c8b2bea9f","first_seen":"2025-10-14T04:43:33.286579Z","last_seen":"2025-10-14T04:43:33.286579Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1568,"timings":{"blocked":371,"dns":0,"connect":0,"send":0,"wait":783,"receive":414,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:04.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xhdfriday.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 13 Oct 2025 23:17:37 GMT\r\nexpires: Tue, 13 Oct 2026 23:17:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 19527\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-04T10:49:10.931346Z","times_seen":714307,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":153,"dns":1,"connect":23,"send":0,"wait":33,"receive":10,"ssl":125},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-E2BG6CPV2J","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stbhg.click/e/dfl69ejg86fa","date":"2025-10-14T04:43:06.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"GET /gtag/js?id=G-E2BG6CPV2J HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 14 Oct 2025 04:43:06 GMT\r\nexpires: Tue, 14 Oct 2025 04:43:06 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 141344\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":424881,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"643146e3d5f556d296f91be8cc06c2f4","sha1":"dcbb451e94123d0a75c8f37df28dbb108c93ca89","sha256":"2224fba180e9f060f07f5896055ac7e9ad7ade5cbe9d995bece3812c99a2195a","sha512":"136c97e24c5870eab1917047753841dd46eb04a5e4aec80208be0d708adf2219efc7d741f553153cc99e88f4c418c06bb2335c7a3e0455af6ec4f30670c34ba9","ssdeep":"6144:qBDd/yp2W4tM0uwbWZJT+Nju5204O0NsYXdXAQY:k4Y9y0KZJu0O8","tlshash":"de941ade73d674225396f078503f018ba57b28a2b44cc89af189cde42e74a9a4177f7c","first_seen":"2025-10-14T04:43:33.293404Z","last_seen":"2025-10-14T04:43:33.293404Z","times_seen":1,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/colors.dark.min.css?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:03.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/colors.dark.min.css?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=32cfe22f85a58d5525edded83a29d66b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:03 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2BSiotIrlEj3RPOMi7H0N%2FJeIhat6SVvhbx92XWDaOxFHELfqtol%2BZxYujetdYG%2B%2Fst90YYNHvxKYd0F8BYLSZqRr82EgXXptzdycw%3D%3D\"}]}\r\ncontent-type: text/css\r\nage: 7095\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e469e51d23b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40105,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (40104)","md5":"e7b7365d4fb0236b5df80ec3b10a8502","sha1":"c02eda52d607b6126f750d6a718c817a1711f1ba","sha256":"9904853546d3d30611944fe53ff8a7e7cb02e77a5be14923a347f6964a74e82e","sha512":"8053ca116b4c6203e2dedd7af40fd58dfe00298a70132673caa7fa2e3518697e5c6295eefed7fcf70ae1fd117238d586b56a7f3bc417d2797dc69090751ee3fd","ssdeep":"384:gNjWIEKEG9kPZi8NlrhFf9N6zlEu29wQkMwOypdNPwPTSruv9y0iQkmfhZ1UbQLK:28/N+pd5wGi1U8u","tlshash":"9a030f70e5ca020f7523e5ba6956f94e32756294e2011b7df23f30e89e811dfe6a3b05","first_seen":"2023-04-10T18:21:08Z","last_seen":"2026-04-04T00:38:59.822255Z","times_seen":1178,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/front.ajax.min.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:03.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/front.ajax.min.js?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=32cfe22f85a58d5525edded83a29d66b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:03 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZTrOOUh2gpz8VD7bYSr%2BGTZuax%2BpzdC3Cle3UJkruDe9khlbusnJrQoEoSje7zTADlH3yNIVxa4hgtUmjUrHuvfGvxgeBv2GSbt3ZQ%3D%3D\"}]}\r\ncontent-type: text/javascript\r\nage: 7094\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e469e53d2db51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15025,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15023), with CRLF line terminators","md5":"01688e7db55bb122da5ecf1ecd76dc19","sha1":"127abb99dda567124ed64e89357caafdb672b528","sha256":"ebc7ea4f07c0230971ae1fbf81c235b1b20b8cff373f76d86dce9d10350b335b","sha512":"93ce636f46aaea47b3191fbbe42c33e57cb7c54ac956d33c32ccdc92db477955788d15d7fbfeb11e3a2881c08518859381dfb2c5aca35003677cba9909ed4b62","ssdeep":"384:1WJ5xYXJ0yfMS103o3Y93U3k3A69uDxMJxtvpWF1x1mUgspVYopnpTI6I3MIk47S:UGXfM5MigwA69uDxMJxtvpwVNRpTpxIE","tlshash":"f662635778869cca027761a1306fd50ab2b33e51d9124a06f1b9a1ec5ffdec66033b1e","first_seen":"2023-03-07T01:03:54Z","last_seen":"2026-04-04T00:38:59.786112Z","times_seen":1529,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w92","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"138.199.36.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:04.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Sep 2025 20:10:35 GMT","end":"Mon, 22 Dec 2025 20:10:34 GMT"},"fingerprint":{"sha1":"9B:24:B0:91:79:AC:B0:0C:F8:BA:AA:DC:AC:6D:67:E9:B9:AF:6F:BE","sha256":"11:31:79:0F:81:6F:B5:20:34:07:93:CB:FF:0D:3B:0D:EF:34:FB:C5:B5:99:92:02:90:BE:9E:5A:2D:FD:5A:E7"}}},"request":{"raw":"GET /t/p/w92 HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 14 Oct 2025 04:43:04 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-DE1-1054\r\ncdn-pullzone: 775336\r\ncdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf\r\ncdn-requestcountrycode: NO\r\ncache-control: max-age=43200\r\netag: W/\"653e955073f6ff68f1e0cfa5a613ef75\"\r\nlast-modified: Thu, 08 Apr 2021 15:54:44 GMT\r\ncdn-cachedat: 10/13/2025 21:29:16\r\ncdn-proxyver: 1.38\r\ncdn-requestpullcode: 404\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 863\r\ncdn-status: 404\r\ncdn-requesttime: 0\r\ncdn-requestid: 02f59c367f56339b6011b040c7ff466d\r\ncdn-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T10:49:22.366716Z","times_seen":13328728,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/stream/RGo4h75iirxcNZ2Y0QdDxg/kjhhiuahiuhgihdf/1760460186/45094825/master.m3u8","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"104.21.12.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://stbhg.click/e/dfl69ejg86fa","date":"2025-10-14T04:43:07.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /stream/RGo4h75iirxcNZ2Y0QdDxg/kjhhiuahiuhgihdf/1760460186/45094825/master.m3u8 HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/dfl69ejg86fa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 04:43:07 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mZ6HTCKq9kLhJjz05YOM4dV8LDYkwUj5oZ3VaNQfSAUdJP0DC2CTQ2jL5gv%2FlRDOlvKGpgoWuK%2BP2%2BBehzKUJzyh%2FLVXIRMFQ2ed\"}]}\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncf-ray: 98e469f98c9423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":421,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"bf094632ab79293661b3e8bb3a203a5e","sha1":"cc7e56fb4f5e3ee867421bf68e01ae917fcbc024","sha256":"635b677c0bb890cdf741d68130b06e00cab862de4a3c538fd6597e4df0ba4769","sha512":"aede4a6c8bdd61a6bc8edba3193ec2e0f563d7ed8cda62f03c3b25026b069e8c812c5f4c3b7ecc8e4deab820668f2d1d269fce3557b1eb07754acd0169142b1e","ssdeep":"","tlshash":"39e0e598363ed62a2424d9c848dca81b3c0918fc0444db64f08b0198cecbc743bbf174","first_seen":"2025-10-14T04:43:33.308601Z","last_seen":"2025-10-14T04:43:33.318632Z","times_seen":2,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-14T04:43:02.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/ HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=32cfe22f85a58d5525edded83a29d66b\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:03 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding,Cookie\r\nlink: \u003chttps://xhdfriday.site/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://xhdfriday.site/wp-json/wp/v2/movies/159\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://xhdfriday.site/?p=159\u003e; rel=shortlink\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UveHg5mfTA9cCyjLnx1x%2B1j3LLH7N%2F%2BokM4YMuxRltMjdGYbgk945X8z8cdweUXDgy%2FxFGYVCl9hbv8BmrhXxw%2BBbxXydUohk4%2FPKa8F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 98e469dddb9c8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Yoast SEO:25.8","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Draftpress HFCM","description":"Header Footer Code Manager by Draftpress is a easy interface to add snippets to the header or footer or above or below the content of your page.","website":"https://draftpress.com/products/header-footer-code-manager-pro/","common_platform_enumeration":"","icon":"Draftpress.png","categories":["WordPress plugins"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":50088,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (35999), with CR line terminators","md5":"8ccd14c55d1e963cbf0a37c83070536d","sha1":"896d19dc58a0d56ba14e3c9c6128cb3cf4c9c77b","sha256":"9b88dd7703ba43ba995a92af4546bd9a9239d4abfe9bc614e22338972eab49ea","sha512":"0e0b4b65d345cd43950fb487bb54a34ab9166c45f992b1b36fa99ac7db0c5e08e150a1b23f04cf0ebf41257f344465631f5926cfa3b03eb266f46ae9ea04eed8","ssdeep":"768:/12Q4ePJdyPZ7VwfwsyVS07zWljrXR22kZBxq094dTX:/YCA9OuF7ClPXe6094dTX","tlshash":"3023e7b3b04804372b1f93e8c594732da2a1910dcb468b59f5f892ec1bf5ef595a322d","first_seen":"2025-10-14T04:43:33.313956Z","last_seen":"2025-10-14T04:43:33.313956Z","times_seen":1,"resource_available":false,"data":null}},"time_used":877,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":877,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.googleusercontent.com/s2/favicons?domain=https://wtsmovies.com/torrent/movie/","fqdn":"s2.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:05.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:56 GMT","end":"Mon, 15 Dec 2025 08:41:55 GMT"},"fingerprint":{"sha1":"FB:46:5A:12:E3:6E:02:EF:CC:80:E2:C9:DB:21:F6:D0:B2:1C:01:8C","sha256":"FE:5F:B4:C6:68:6F:78:97:3E:0D:1E:04:2D:10:0E:C7:A2:90:5A:3C:B8:74:B6:84:19:8A:1F:38:D8:D8:31:28"}}},"request":{"raw":"GET /s2/favicons?domain=https://wtsmovies.com/torrent/movie/ HTTP/1.1\r\nHost: s2.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://t3.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=https://wtsmovies.com/torrent/movie/\u0026size=16\r\nx-content-type-options: nosniff\r\nserver: sffe\r\ncontent-length: 349\r\nx-xss-protection: 0\r\ndate: Tue, 14 Oct 2025 04:43:04 GMT\r\nexpires: Tue, 14 Oct 2025 05:13:04 GMT\r\ncache-control: public, max-age=1800\r\ncontent-type: text/html; charset=UTF-8\r\nage: 1\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":726,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T10:49:22.366716Z","times_seen":13328728,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":99,"dns":0,"connect":15,"send":0,"wait":15,"receive":1,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/stream/RGo4h75iirxcNZ2Y0QdDxg/kjhhiuahiuhgihdf/1760460186/45094825/index-f2-v1-a1.m3u8","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"104.21.12.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://stbhg.click/e/dfl69ejg86fa","date":"2025-10-14T04:43:07.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /stream/RGo4h75iirxcNZ2Y0QdDxg/kjhhiuahiuhgihdf/1760460186/45094825/index-f2-v1-a1.m3u8 HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/dfl69ejg86fa\r\nCookie: tsn=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 04:43:07 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lll1OD51FzGoxkfP75%2BfwPB7XANvrQjQyfkt7ABa8cWcUmPjRhZaK41NlafYRc5urlzWDddMhjPJuBv%2BdQb8eNL9Niit8rhb3%2B7v\"}]}\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncf-ray: 98e469fd3ccc23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90605,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"88998890b4343d05214e1de4ecd5b311","sha1":"c27d0dd717a26ad95a8c24860958d13681a28e28","sha256":"1aef6eacc9648e3664782c737197650419a6e6eb9b8e50509fe85c0c58f1f594","sha512":"b74070fb84f66c0ed9c74af33d87049b3e050bbe446a8f100bbf6ed1332d3121675ae10407b4e15efff7711ac331de4ca614ec76d6c32753bba8ed37e2670518","ssdeep":"768:TNMxy2MeACwC8R9KLMu0WNJdmLoLaWOZP:TNMxlMZCM8NpYuzk","tlshash":"3193b876eb41e2881a5c4c84f7b5f5a4ab96cbb5fcb8538db04c52fa0cb0c6b5960d0d","first_seen":"2025-10-14T04:43:33.328998Z","last_seen":"2025-10-14T04:43:33.507759Z","times_seen":2,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/front.mobile.min.css?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:03.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/front.mobile.min.css?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=32cfe22f85a58d5525edded83a29d66b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:03 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BfVo22Vosvn%2B28KcMSlShuFHNdwtPmZjKmZ3DyLYSpOX8UfjVQjLV3EJRXC%2FJNAJnZOigfXUnCHen1Qs9unVfGaVlwYD2aXM%2FNneNw%3D%3D\"}]}\r\ncontent-type: text/css\r\nage: 7095\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e469e51d24b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8720,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8719)","md5":"09ded5f0b08a22e680e6aaf72a4646e7","sha1":"866fdd70bf20d38dde5321910e1e44587989fc86","sha256":"cdf69f171470adc15b72f2604be5440e6d8a8254b8095813596b45694cb51ab8","sha512":"b98db9343155ec5467a853abb4d98e72a3ebe243df0351674847f0791284b80d4e300bf9f33e343188b5f9227ec8c4acb15ef05fe6d9b5801d6088f69ebb0746","ssdeep":"192:wO9xMLFP6x0Gkc4QliulTuUwIl/iho/vTKsnt7aitiF/:EG0cnfveoHTKmftih","tlshash":"4f0211b20d3a342ed56af091fec631ed36995065f35722e3c86ea56da1ce3a600b164c","first_seen":"2023-04-06T14:37:36Z","last_seen":"2026-04-04T00:38:59.790695Z","times_seen":1075,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/starstruck.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:03.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/starstruck.js?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=32cfe22f85a58d5525edded83a29d66b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:03 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5ico2pI5sY9Wr7PH%2FiLzhw%2FjMuCU1gv%2BwvRle3sqptEvud38KHRyzjetQMWG1GABqLXxmfAM%2FT2lF2PP7EbexXJxN%2Fk9KXEqDGWfHw%3D%3D\"}]}\r\ncontent-type: text/javascript\r\nage: 7095\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e469e53d30b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1311,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1309), with CRLF line terminators","md5":"4279a70d8fc5018f1a4dd4328ba56d0e","sha1":"6aec001b3bd94f107f49e62c817048b1dd5ebe27","sha256":"2914ebe7e0b33da6d390b3f42a784210f285402cf57588b90d917193f773e9aa","sha512":"025d6310ec864f81a8f0afc8f33a0e8acaf08e79250f78ab5e1c8fdd87b99c9790c4ebe17cb35fa21d9765e9817bad7db90759bce5862fbfdebccb689f03f0a2","ssdeep":"","tlshash":"34219e5c309b61ae67f2a1f4287f17015332ae14b507ca3b742900b69f9d94da63a968","first_seen":"2023-03-07T01:06:58Z","last_seen":"2026-04-04T00:38:59.81321Z","times_seen":877,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-includes/js/comment-reply.min.js?ver=6.8.3","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:04.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-includes/js/comment-reply.min.js?ver=6.8.3 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=32cfe22f85a58d5525edded83a29d66b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:04 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Feb 2025 14:27:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vrS2pb10cXbtn0XmMk3fHcESLrUR8ekx1B725Hkvq5hMJgm%2B3%2B6sJL1NCRP6IIqDhB9C4yjJevkIoUwfpLALiOIyL2zmVtbukV%2BEVw%3D%3D\"}]}\r\ncontent-type: text/javascript\r\nage: 7094\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 98e469e6ad37b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3026,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2991)","md5":"e4a49df71f8b98c1d9f9d8fce74d89e8","sha1":"b95fcda0c8c26305ad94e80343d0cfca8a048a10","sha256":"9d4687a19cab8f7442a3bda40c45be4d10e42488e091ddd706c3caed83c3ee1f","sha512":"42cd5f854779886f24c43ed14617380110c946d1b430b454060c3b391de6fbae6d0ed8ab7cdd7cfdc9726b2d6142a4e01c4448e36088dfcee7fdd00b60909f89","ssdeep":"","tlshash":"5051a7d437c95d762a83b3395efe930271712709a50805608826c86931bcfea63b67fe","first_seen":"2024-11-13T06:33:24.856382Z","last_seen":"2026-04-04T10:46:31.849515Z","times_seen":56962,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:04.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xhdfriday.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 13 Oct 2025 23:17:37 GMT\r\nexpires: Tue, 13 Oct 2026 23:17:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 19527\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-04T10:49:10.931346Z","times_seen":714307,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":213,"dns":4,"connect":31,"send":0,"wait":15,"receive":5,"ssl":157},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:04.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xhdfriday.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 13 Oct 2025 23:17:37 GMT\r\nexpires: Tue, 13 Oct 2026 23:17:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 19527\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-04T10:49:10.931346Z","times_seen":714307,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":135,"dns":1,"connect":15,"send":0,"wait":15,"receive":19,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.googleusercontent.com/s2/favicons?domain=https://wtsmovies.com/subtitles/movie/","fqdn":"s2.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:05.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:56 GMT","end":"Mon, 15 Dec 2025 08:41:55 GMT"},"fingerprint":{"sha1":"FB:46:5A:12:E3:6E:02:EF:CC:80:E2:C9:DB:21:F6:D0:B2:1C:01:8C","sha256":"FE:5F:B4:C6:68:6F:78:97:3E:0D:1E:04:2D:10:0E:C7:A2:90:5A:3C:B8:74:B6:84:19:8A:1F:38:D8:D8:31:28"}}},"request":{"raw":"GET /s2/favicons?domain=https://wtsmovies.com/subtitles/movie/ HTTP/1.1\r\nHost: s2.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://t2.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=https://wtsmovies.com/subtitles/movie/\u0026size=16\r\nx-content-type-options: nosniff\r\nserver: sffe\r\ncontent-length: 351\r\nx-xss-protection: 0\r\ndate: Tue, 14 Oct 2025 04:43:04 GMT\r\nexpires: Tue, 14 Oct 2025 05:13:04 GMT\r\ncache-control: public, max-age=1800\r\ncontent-type: text/html; charset=UTF-8\r\nage: 1\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":726,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T10:49:22.366716Z","times_seen":13328728,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":112,"dns":0,"connect":28,"send":0,"wait":15,"receive":0,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/uploads/2025/08/cropped-FotoJet-7ff-32x32.jpg","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:05.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/cropped-FotoJet-7ff-32x32.jpg HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=32cfe22f85a58d5525edded83a29d66b; _ga_RTM6XRXKXM=GS2.1.s1760416984$o1$g0$t1760416984$j60$l0$h0; _ga=GA1.1.909450301.1760416985; dom3ic8zudi28v8lr6fgphwffqoz0j6c=92ae32a5-269b-450c-87af-70327331e6d1%3A1%3A1; pp_main_e5740c7b80abc2329366e06d2dc81dff=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:05 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 13:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1149\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7dfZ42fE00y9JkJXRkZEAc8tg8BBJTfpAi5ODEX6H7rcP2ltd2ZyPYlH0XQ86fkzSB1%2Bs%2BvOzUjBb3kDVFrJY%2BFMn3SzEWIMAQcxKQ%3D%3D\"}]}\r\ncontent-type: image/jpeg\r\nage: 7094\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 98e469f14d72b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1149,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 32x32, components 3","md5":"203b4458696a114dc8a9f24d77b2ef9d","sha1":"aeb864c9ee85bd40d866589865197160b8c8d244","sha256":"4560dc1e2bfbb42da3c42caa2afc5c4e947f6f088174b468da4f645c40822847","sha512":"ce40a6da08a0ffc079a5e27414c787a6c0c26b880eff7746249086f275ef6e778768812c30bb6121ffb6bca035fe7e2d2f3f2b36b4e90df4b7a5303fb40d30c6","ssdeep":"","tlshash":"8e2146761f0203a1c56acdfd0963239ed29e7642b99d97407f72c2b2c6148eda54c64d","first_seen":"2025-09-08T12:26:50.651139Z","last_seen":"2025-10-30T02:38:15.59364Z","times_seen":6,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/jur00186/jur00186jp-8.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:03.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/jur00186/jur00186jp-8.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 59388\r\nserver: openresty\r\ndate: Tue, 14 Oct 2025 04:43:04 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Fri, 10 Jan 2025 09:54:34 GMT\r\netag: \"6780ee5a-e7fc\"\r\nx-cache-status: HIT\r\nvia: 1.1 b37dbbe8d3b5fd859db3dda5e93f1dd6.cloudfront.net (CloudFront), 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT57-P5, OSL50-P1\r\nx-amz-cf-id: 6-no1EqBReTIxYYHlu5udvhzHE-PMIyL6DkoujI8pGiyCNgjBwqfUQ==\r\nage: 183889\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59388,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x534, components 3","md5":"1c5458f6ec31fbf46c00d78a7272e842","sha1":"6ee49b6bbedd2ea9b77808e125bbecb89501fd7e","sha256":"a819159312048f066a1a823b2405cd3ca16047772dc0096c0e01da97a6b99f7c","sha512":"1d28b175601258bb586c5a700da3f776d337f8bb5a087b5d5e7eee6588379ca2ab1832158c4e264fcce1db6ab6d77963d966ca49a656c00ffea791fa0ad0907b","ssdeep":"1536:ytLKI9E+XnBSWin9k63CLNNT0TtsxI54Yh9aWR:ypKBg0nDCLNNITtsxpYh8c","tlshash":"9c4302379d139529b20eceb87ac953fb23ed8a4086cbee0d075748b80e7dc62475098d","first_seen":"2025-10-14T04:43:33.366645Z","last_seen":"2025-10-14T04:43:33.654198Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1083,"receive":271,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/front.scripts.min.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:04.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/front.scripts.min.js?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=32cfe22f85a58d5525edded83a29d66b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:04 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k8vhXvi1JVAHLhpJEKHmJ2fnmXZpYGpzBQTvbaiPtd26C3P5gMtc2nk1yFIcHh0%2FRqfFKC9fBEYd91E5lNWh1w82x4FWJpiAI3P64w%3D%3D\"}]}\r\ncontent-type: text/javascript\r\nage: 7094\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 98e469e6ad35b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4786,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4784), with CRLF line terminators","md5":"2731772e163f205b1c9e24a5c6c7b470","sha1":"81bdbbc6fcb56e622ddfd6a6d28e72493e3f2329","sha256":"55974bc676581db39c8e596c87ebd046b4439fdb6c381e4270b43f6065393623","sha512":"4622fa5cf1c9120c4bb5439ac1f8b97ba81df1ae3b2a0093ae9f00e6a13e223e535ead27cf999d7621d8c3ea057591c9f379dab920e38877fd6caf338ddb6787","ssdeep":"48:gqhZsZGRO2NQ5XM9gMy5U8aG0vxBOCOo7JMcvTNqfQNuJoH+p58DPJEpE751KhZD:gUTn8aGExBULEen851FEBE7NPbWqi/","tlshash":"2aa1542b3222b0dd10bf2371752fa45416276d59da05498ab8b8c8da0d3fcc621a7f3f","first_seen":"2023-03-07T01:03:55Z","last_seen":"2026-04-04T00:38:59.800621Z","times_seen":1666,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/js/jquery.cookie.js","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"104.21.12.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stbhg.click/e/dfl69ejg86fa","date":"2025-10-14T04:43:06.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /js/jquery.cookie.js HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/dfl69ejg86fa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Tue, 31 May 2011 13:53:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"4de4f2bc-10eb\"\r\nexpires: Tue, 14 Oct 2025 17:51:15 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 557511\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4QvsKE9s91AidyY%2BXcAjx2ydVFFy4jBexwWEzQdj8WYyjYzuaFKmmf58BwuUJXvkRcFxEqqPAp80BmLVPlPxdxmeCaLm9AayS%2B4d\"}]}\r\ncf-ray: 98e469f628c5783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4331,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"ae0c2c5d8f01f7d35bb698bb618a62f7","sha1":"63556a22ddea1c5f23a5cf7d0b6d35c7aab54e20","sha256":"75aef2e95ea7f3a70999396fba0c2ab866f4ff06313cf1b07780d800a5fc1ebc","sha512":"eac94ca9d884692af8bdf12aa6e902a3be4eed0772ad8f2932ac1c3328b83a7351cdf743a409bbc0a3cd385956c08d3203d51c572bb1680489e37330fe27a2bb","ssdeep":"96:L4BZxb64Ng7V8cNwpGylRCsKZcj1JXulL6M/aGByLskPSP4lBCClf1wgCyC:LQnb6eg7DgCsk8fgZJkPSPa+gCyC","tlshash":"2e91fd293a0d231d149353f57aee10c8a930d632216ad46c744cb6b06f00c63ddfbbea","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-04-04T06:19:11.113197Z","times_seen":4345,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-2TL7NH453R","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stbhg.click/e/dfl69ejg86fa","date":"2025-10-14T04:43:06.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"GET /gtag/js?id=G-2TL7NH453R HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 14 Oct 2025 04:43:06 GMT\r\nexpires: Tue, 14 Oct 2025 04:43:06 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 141255\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":425137,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"2167e25edd11c8164edf78c946fe5a14","sha1":"1bcfb7e9085f87ab5163212af21c5c8b2691318e","sha256":"e46a5d61a55f6b4b39686288cb2015bbfaeeeeaf4e0dca7ecedcf63bdc42e54d","sha512":"777d5e88cb34a5cb6e49acd70d321b6d537f40a37dad0e0778000a0f9211372ccb4aa7ac1bb44166523cc12b72cf8bf9e2e7d392c0bc56cbbc2473b2827bc033","ssdeep":"6144:nBPb/yp2a4tM0uwbWZJT+Nju5204O0NsYXdXAQY:BWYJy0KZJu0O8","tlshash":"099419de73d674225396f078503f018ba57b28a2b44cc89af189cde42e74a9a4177f7c","first_seen":"2025-10-14T02:45:26.864333Z","last_seen":"2025-10-14T04:43:33.37941Z","times_seen":2,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/dl?op=get_slides\u0026length=8298\u0026url=https://pixoraa.cc/dfl69ejg86fa0000.jpg","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"104.21.12.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://stbhg.click/e/dfl69ejg86fa","date":"2025-10-14T04:43:07.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /dl?op=get_slides\u0026length=8298\u0026url=https://pixoraa.cc/dfl69ejg86fa0000.jpg HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/dfl69ejg86fa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 04:43:07 GMT\r\ncontent-type: text/vtt\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SPd%2F6RhCM6PzzW4e6mGbH9a6GiHUoEoTd1YrY0j5MQeNICaoBjNyHu%2BFjoHbrJOXtAEwQzUDjIv1NByHGpTdzQZJK6zIXtJyaYqF\"}]}\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98e469f92c8d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9228,"size_decoded":0,"mime_type":"text/vtt","magic":"WebVTT subtitles, ASCII text","md5":"fb25f223fafd9012706dcec50c2e017b","sha1":"50d413ede644ed1fe76a4bdc1e8d10fcbc344ec1","sha256":"10793a2e3ec77c16c858d33ff2c56c29a3a53865fd5685209e02381931d26fe8","sha512":"6766146f9c2d243b426efbe09033c73df83af070dbfcf73a249c362280e415c0f07ec1260788deb5486250acb40797cfa56059cea9dc2996f6345c700b8919f9","ssdeep":"96:L5h8Ro7Robm6K4cbL2HOepZzbjvbUKFygjA7BvoY2lcx:1h82OmV5bCnZjvbUmjuR2M","tlshash":"b21247d7439a8c7feb965ef0a3d03ffed532218b99fc6492a8f03072588c6199e25055","first_seen":"2025-10-14T04:43:33.348477Z","last_seen":"2025-10-14T04:43:33.389116Z","times_seen":2,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p16-tiktok-ads-sg.tiktokcdn.com/obj/ad-site-i18n-sg/202505265d0d1cd94de17e4245ae8784","fqdn":"p16-tiktok-ads-sg.tiktokcdn.com","domain":"tiktokcdn.com","tld":"com"},"ip":{"addr":"23.36.76.210","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://stbhg.click/e/dfl69ejg86fa","date":"2025-10-14T04:43:07.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tiktokcdn.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 07 Mar 2025 05:26:04 GMT","end":"Wed, 08 Apr 2026 05:26:03 GMT"},"fingerprint":{"sha1":"AB:A5:D2:DF:CE:6C:6D:AE:DD:36:C7:0F:CC:E1:32:1D:76:C7:35:C0","sha256":"75:76:14:5C:F5:BB:65:0D:C6:06:2B:2A:07:FA:50:AF:47:D8:3D:E9:63:80:10:B1:BA:42:B3:0B:51:AE:A7:9B"}}},"request":{"raw":"GET /obj/ad-site-i18n-sg/202505265d0d1cd94de17e4245ae8784 HTTP/1.1\r\nHost: p16-tiktok-ads-sg.tiktokcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://stbhg.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 553918\r\nimagex-fmt: png2png\r\nlast-modified: Sun, 12 Oct 2025 14:43:53 GMT\r\nnw-session-id: 20251012224353A819156516CD1177AB28f2r7n12tt\r\nnw-session-trace: 2025-10-12T14:43:53.240091197Z 117\r\nx-bdcdn-cache-status: TCP_HIT\r\nx-length: 553918\r\nx-powered-by: ImageX\r\nx-response-date: Sun, 12 Oct 2025 14:43:53 GMT\r\nx-tt-logid: 20251012224353A819156516CD1177AB28\r\nx-request-ip: fdbd:dc53:21:a4a::50\r\nx-response-cinfo: fdbd:dc53:21:a4a::50\r\nx-response-cache: edge_hit\r\nx-tt-trace-host: 01e3ccd96da73ac8d099e586a09252157fe9b5a21cafd5dc5d13b209eaf1d2650e0c3660570f0ef377878d4ffd60df72cc8f18c318abe0cfa062e2b234d47a3579dd3a64fe010f339a34894b85e97735336362cf89aa1cf80f83fa5c544494482dd86099e9a3180095aa3f59a7f006282da6693479316e068fa906254ad64c55b5\r\nx-tt-trace-id: 00-251014124257A411F34BB20519051FEF-0A18E359382DDB90-00\r\nserver: TLB\r\ncache-control: max-age=31536000\r\ndate: Tue, 14 Oct 2025 04:43:07 GMT\r\nx-cache: TCP_MISS from a23-36-76-125.deploy.akamaitechnologies.com (AkamaiGHost/22.2.5-a9c17ad842a5a5bbb9fede73ebb832d8) (-)\r\nx-cache-remote: TCP_HIT from a23-36-76-206.deploy.akamaitechnologies.com (AkamaiGHost/22.3.0-fcd174d50fb223c8364cec3c4b3f29c6) (-)\r\nx-tt-trace-tag: id=16;cdn-cache=miss;type=static\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=5, origin; dur=0, inner; dur=5\r\nx-parent-response-time: 275,23.197.207.29, 2,23.36.76.125\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":553918,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"c2f0ec350e8e26fff4f515d37200aac9","sha1":"bbfc09a57faf48a308ba04059609a9b4c316145d","sha256":"4da0d1a9ac6f85f9f1fd667526361c2fe4fe1e9904fd968955c6d58d9560cd90","sha512":"f76dc73fc16dbad6a937556286a2d4c073cd665f353dee9ed7ac6df4f21003002403561c6fd251870ce08b7a5331ccc9deec2cc5af98d298165eeb294a0d39e8","ssdeep":"12288:Ej/0AoV2u9/VHW52bnRwCyf06FF72o1asLp+s:Ej0Aowu9tHWn8mkoT","tlshash":"7bc402686f8899eac4075ab7835947b773989d009dccaf9b3cd87717fcb86e99434008","first_seen":"2025-10-14T04:43:33.392053Z","last_seen":"2025-10-14T04:43:33.613545Z","times_seen":2,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":43,"dns":1,"connect":1,"send":0,"wait":7,"receive":22,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"memojav.com/image/preview/1fsdss00959/1fsdss00959jp-2.jpg","fqdn":"memojav.com","domain":"memojav.com","tld":"com"},"ip":{"addr":"207.148.118.22","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:04.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"memojav.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 13:04:19 GMT","end":"Wed, 24 Dec 2025 13:04:18 GMT"},"fingerprint":{"sha1":"AB:FE:13:26:95:37:7F:65:AB:78:21:EB:5E:DF:D7:EF:E7:63:D7:5E","sha256":"00:94:CD:27:13:BD:9E:FE:96:C8:EF:E5:C0:EF:0F:05:7E:B0:CC:97:67:61:2A:DC:F8:23:C4:5F:65:7D:00:94"}}},"request":{"raw":"GET /image/preview/1fsdss00959/1fsdss00959jp-2.jpg HTTP/1.1\r\nHost: memojav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.29.0\r\ndate: Tue, 14 Oct 2025 04:43:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 246036\r\nlast-modified: Fri, 03 Jan 2025 13:36:25 GMT\r\nvary: Accept-Encoding\r\netag: \"6777e7d9-3c114\"\r\ncache-control: public, max-age=300\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":246036,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", baseline, precision 8, 534x800, components 3","md5":"d2554928a3bb32a11f7722f670137624","sha1":"5dd57e9d1040ab6079e0ad8d0bed698ff7d0ed07","sha256":"17985ead5f8284b87b714a592c5fb6f3feffdaf21d7d3dba082c245405af2e58","sha512":"2004750668f5f1ab1f1d4425520dc1e9257ec6944ad06a2f725848c0ce234a4760f4513f71b3b64a987be1cf8ac4e8144f5532815288b20f671acadd3a5df3d5","ssdeep":"6144:h9LK0aLo1s5O+qG2kQxbCEbmUOTrOIU/zEJNFrCF3fb:DLKrLoxCPUOeV/JNz","tlshash":"20342335e3530af0ca7ba9fb84b04076e59194a26779fbacd1209789f0f8355f1892c6","first_seen":"2025-10-14T04:43:33.396673Z","last_seen":"2025-10-14T04:43:33.396673Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1774,"timings":{"blocked":363,"dns":7,"connect":170,"send":0,"wait":345,"receive":703,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn001.imggle.net/webp/poster/20253001/1738862875.webp","fqdn":"cdn001.imggle.net","domain":"imggle.net","tld":"net"},"ip":{"addr":"172.67.74.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:03.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imggle.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 00:26:18 GMT","end":"Fri, 28 Nov 2025 01:26:04 GMT"},"fingerprint":{"sha1":"3D:D7:A4:29:CD:9D:68:E2:6D:DD:CB:4F:B7:65:26:2D:B8:3E:01:F6","sha256":"92:07:49:FB:FC:89:EC:3B:E7:48:EB:4C:8E:D0:E3:C2:24:FD:F3:84:C3:2F:D6:AE:8D:D2:21:6B:0F:F2:1B:4B"}}},"request":{"raw":"GET /webp/poster/20253001/1738862875.webp HTTP/1.1\r\nHost: cdn001.imggle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 75308\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 06 Feb 2025 17:27:56 GMT\r\netag: \"67a4f11c-1262c\"\r\nexpires: Tue, 22 Sep 2026 18:33:16 GMT\r\ncache-control: max-age=31536000\r\nx-cache: MISS\r\ncf-cache-status: HIT\r\nage: 1665959\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vhrLMk7gIvFJNRLuqWHdW9hRjEEUk97lm70ZJVbh7s6hWb3FZx%2FN2srNLhF4XMolZTm%2FIKxJC7kuqyqurKNEUUa2CLgtjZZukgLxrzocsc1I\"}]}\r\ncf-ray: 98e469e6495c23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75308,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x426, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"df5c8d973396dcf9570e96c8b514f6bc","sha1":"d40feea624288c285736caaef987cde7eee8bb09","sha256":"e8b7769d989f3a1e33480021068e6af6b96100a5353c9856709889d193e55175","sha512":"65de7a05e214da2941e51ce28de05f0458c7d195515ed0f73044817ce9f4f1f550e8e195a7049a0792b48d80b355506036f4e9ecade1af51266d96dac627d393","ssdeep":"1536:qh0K4/US6T0g/ojI2s/0C0rKdUzoWqRNOR1wC:qCXBg/oJC0hEjC","tlshash":"2c73021173dcc84e6322e27ed953653becc3a771e6f1bd88e87a5d59270f0862614e82","first_seen":"2025-10-14T04:43:33.401403Z","last_seen":"2026-03-26T08:34:36.018292Z","times_seen":3,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":81,"dns":1,"connect":1,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/front.crollbar.min.css?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:03.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/front.crollbar.min.css?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=32cfe22f85a58d5525edded83a29d66b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:03 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0A6QsuFgZ4vuUPJtoJ2CGXjeNBO8UqeJHQ4yjVRXsS3nUho5AN6sCkcfKP7miM1HPpdkrNTB06wEo3uJJ627SgIo5gwzmbBY4F8cyQ%3D%3D\"}]}\r\ncontent-type: text/css\r\nage: 7095\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e469e51d21b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7194,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7193)","md5":"9e616d63cbabe72390edb6a56b0542d5","sha1":"efdae53b931dfc69ce0737b7421ed84923020cbc","sha256":"6e12666ba88aac25e0a52cb658950b878e5932f258d3d6bde397542e338a021b","sha512":"c80191ff1f688e53ae3efb32dbfe1a963f4a7af42825bdf0de7ac0251b1aba5e5ef31e214062a036b08e5f9fe8ddf5e11edd36f9b64dbc31449b0df928b48608","ssdeep":"96:hLWoARQ0z2fpRfbc70ImVH6Reug3/uTFgqoNFrPQsS:hStRQ0sXH6Rev3mEQsS","tlshash":"5ae1688c090236dff75f45bae7c233a911f977875162465db09b1ce8af8c7b6a436402","first_seen":"2023-04-06T14:37:36Z","last_seen":"2026-04-04T00:38:59.803088Z","times_seen":1114,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/starstruck.raty.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:03.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/starstruck.raty.js?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=32cfe22f85a58d5525edded83a29d66b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:03 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K0%2FrDzOusQ0wIjrPiCD%2BiTKgYsWC2gSE9664FQ%2FXz0rndAnAream0o4OXABtSA8ppt4cyG7167dNn8l61Z0kDjZMMRZN0NdT7%2BTrHg%3D%3D\"}]}\r\ncontent-type: text/javascript\r\nage: 7094\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e469e53d2fb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10364,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10362), with CRLF line terminators","md5":"d967735d0c4a36d039142d01d02ee257","sha1":"e79738152720eef153774d3a6806d03861623f2f","sha256":"310589cc35c17dc5e369b35b45423ac830bb0a0b65f7f720a1c3b089254bd152","sha512":"ffa0ed7ed3788cb34ba92c8c94fd7c0cc4ecee293e17ab73e762b46ad604efa543dd3abc96680786632c9af5f93d374facf2daf260194f76e1787d5889017c0d","ssdeep":"192:4r1zqoHYKx2zznWhn5KsPYxUDAh8QGrCafGULhcX5LlXF/OfIpoqt:4rJxc3WwmCoKmyoqt","tlshash":"242211ccb3827146eea3337059ab270ee232be49e54a401d787dc7d1ef6990d2066e75","first_seen":"2023-03-07T01:06:58Z","last_seen":"2026-04-04T00:38:59.811815Z","times_seen":876,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weirdopt.com/ad/advertisers.js","fqdn":"weirdopt.com","domain":"weirdopt.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:04.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"weirdopt.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 Aug 2025 00:07:02 GMT","end":"Sat, 29 Nov 2025 00:07:01 GMT"},"fingerprint":{"sha1":"AD:4F:15:9E:60:62:A7:16:BA:4B:37:64:C6:01:6B:2B:99:47:89:BE","sha256":"44:74:EA:98:35:48:9C:28:63:20:61:17:18:F6:2B:0A:57:68:36:F4:EF:B0:67:1E:C0:7C:41:30:13:2C:02:F1"}}},"request":{"raw":"GET /ad/advertisers.js HTTP/1.1\r\nHost: weirdopt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 14 Oct 2025 04:43:04 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 0\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: cb811c30220fac2f27018471435bc43d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T10:49:22.366716Z","times_seen":13328728,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":59,"dns":2,"connect":17,"send":0,"wait":17,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/js/jquery.min.js","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"104.21.12.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stbhg.click/e/dfl69ejg86fa","date":"2025-10-14T04:43:06.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/dfl69ejg86fa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Mar 2021 00:27:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"603ed7d4-15d9d\"\r\nexpires: Sat, 18 Oct 2025 23:17:27 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 192339\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9A9zy11xOUC%2BrPvwWulSAJmHUsX7gCLiTPdE0DgJXZ%2BA4wmjCP9ETfq0SmUMfYg%2F1Z%2Ff3gwdaAGsZ3B3f4GUlwa4JsYUJPHpe6CQ\"}]}\r\ncf-ray: 98e469f618ad783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-04T10:47:17.230001Z","times_seen":444780,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rashcolonizeexpand.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=2716\u0026rd=2716\u0026fd=540\u0026bv=25.10.2289\u0026tmpl=70","fqdn":"rashcolonizeexpand.com","domain":"rashcolonizeexpand.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:04.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rashcolonizeexpand.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 21:51:30 GMT","end":"Tue, 25 Nov 2025 21:51:29 GMT"},"fingerprint":{"sha1":"1E:45:CB:7E:7C:E7:1E:08:73:0A:D3:08:B4:74:21:2F:CA:B6:15:9B","sha256":"54:F3:5A:C9:08:4C:76:26:F7:0E:BF:E0:3F:5B:38:DD:53:CF:95:81:0B:FC:C7:F9:6A:3E:9C:1A:6E:33:92:E0"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=2716\u0026rd=2716\u0026fd=540\u0026bv=25.10.2289\u0026tmpl=70 HTTP/1.1\r\nHost: rashcolonizeexpand.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Tue, 14 Oct 2025 04:43:04 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: rashcolonizeexpand.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T10:49:22.366716Z","times_seen":13328728,"resource_available":true,"data":null}},"time_used":677,"timings":{"blocked":291,"dns":1,"connect":95,"send":0,"wait":95,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/img/flags/jp.png","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:03.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/img/flags/jp.png HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=32cfe22f85a58d5525edded83a29d66b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:03 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 109\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BYEGMltqWLsGT2g7R%2B7sqc10HVzPgXM3lY5A9IuuDX%2FkdTsXEi%2FjaXqnUzQxtW7jla%2F41JyEPjOiZschbfBWKw%2BIQbuj%2BH1Rbc4%2F5g%3D%3D\"}]}\r\ncontent-type: image/png\r\nage: 7094\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 98e469e54d32b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 12 x 12, 2-bit colormap, non-interlaced","md5":"71846767eecb8d37811c70551da5a450","sha1":"1e6bb364a8a9eef12189719c7c8133a062ffc808","sha256":"7ab35c9c4f438c9c287953626cbd9115feb04bdc25d7f7d6f61d97abaf31c2b6","sha512":"759b0d3d6ea3e8c9b93c2e5b2cd71efc2868e3256a5860be6eb29833ed7664239f7423706c1b852e39939605b9b7fade0dc4cf8303ed296a47234ef50ba2727f","ssdeep":"","tlshash":"a0b012c223902f3acf549e7a81a82421f83550540162548d1149d6283ece6558184657","first_seen":"2024-02-03T08:02:53Z","last_seen":"2026-03-26T08:34:35.997077Z","times_seen":19,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-includes/css/dist/block-library/style.min.css?ver=6.8.3","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:03.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.8.3 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=32cfe22f85a58d5525edded83a29d66b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:03 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 08 Jul 2025 10:02:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CZXuxoo1q%2BRyL2z9lvDMDlIuzSIc54OZASxA9Vu1ta5%2FuMIb5%2BSJ3MG6VwqGbn%2FFAanUe93GpaqONfEwb2C7EemO8uBth7qemDXJmQ%3D%3D\"}]}\r\ncontent-type: text/css\r\nage: 7095\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e469e51d1eb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116345,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55654)","md5":"a06b3af98203ddc303997e0e0caaff83","sha1":"04c3e7de74a890d18014588c4e1f077a52d79acc","sha256":"838ede31a58a3cdb411d6dd7f13cbe65d4a26193d9fa31882854e63938f12bac","sha512":"4ce1079b8dc07043b0201dc74f5888b50aa530a4e604eecd7673e225946de62c421b290a707014ddaf4366591f8c4767737b5689bc44d57eb0a11aef905cead9","ssdeep":"3072:seeJu1iQg5MG7x+qehvP0x2pck2qkA3Pu:b1iQg5MG7x+qehvP0x2pck2lA2","tlshash":"34b3615417b4dcf935ffa73a5e4ee248a503aa41c68a57ebe066d190618ca490cf3f0f","first_seen":"2025-07-15T17:03:07.843749Z","last_seen":"2026-04-04T10:38:00.46533Z","times_seen":164211,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/front.owl.min.css?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:03.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/front.owl.min.css?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=32cfe22f85a58d5525edded83a29d66b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:03 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9sBs%2FFgGp1Q4Yfc94XUnLLIzBvWFaQJDYmgpZ6EXemNUxxrTp364lPXcJXV0HlO5VCBj7oThUTY3HYrqNQM8S4yrHRevSHohG6YgDA%3D%3D\"}]}\r\ncontent-type: text/css\r\nage: 7095\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e469e51d20b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2299,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2298)","md5":"d85bf9b7c512286b478726a6de8e238b","sha1":"3d2dcd82c7a1dd52a6812233239d4a5bd9115d9b","sha256":"3b963d8c3b9b23f879654a20f996366d6e2427691c9f480eb78a08bf3f8e032f","sha512":"36b72d250c430b4ef16d7eaec5befd2a1f147f05f7ddab265bdaa1e699ba49fa96815b61de8033e07cb1375560f3e15482304ec733bf6af22609f33212cf12ff","ssdeep":"","tlshash":"c941f1f44215229d603bc30966c99eca152de173ea16069e925ffe1493c7d16353f3ce","first_seen":"2023-04-08T11:04:44Z","last_seen":"2026-04-04T00:38:59.821659Z","times_seen":1102,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/front.style.min.css?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:03.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/front.style.min.css?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=32cfe22f85a58d5525edded83a29d66b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:03 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lkjcawN16nMCYiSjb8LnU17kREFwbXvUJaRC3XtYap%2FqzWdhSimg0RrVD2XaHNHKl%2BZgj5HZ%2Bnelyi%2F3XInEcPJz6xxmy5PzSM3B2g%3D%3D\"}]}\r\ncontent-type: text/css\r\nage: 7095\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e469e51d22b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97357,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c09b8d324eea3e01ab0f0eb66aba27e8","sha1":"23a640ee42f0d448a742bcb1f17dcd7661b3c4c9","sha256":"35a6c6b08117a7c8239667d8c72c17f7e92fbaede64b3491b515642c0b86e677","sha512":"b6f17115bb9b5526c28cf5343098237b957cb26655301c8040bde3dbe59daa9acfabfeff1c66601df2b2b7d569d75281cbbe5dad07b0f7f2b5c987339f6ad235","ssdeep":"1536:yfMqJ1dqPoietmX+C4+ed0qBe3bAMv1SQxK5tt1jDE1p:eL6nEjw","tlshash":"ff9344315532602cb53ba5a1fec25bec322c8167f3234dead65d653ac2d65a32532bcc","first_seen":"2023-04-06T14:37:36Z","last_seen":"2026-04-04T00:38:59.805758Z","times_seen":836,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/midv00827/midv00827jp-7.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:04.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/midv00827/midv00827jp-7.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 58854\r\nserver: openresty\r\ndate: Tue, 14 Oct 2025 04:43:04 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Fri, 12 Jul 2024 10:48:29 GMT\r\netag: \"669109fd-e5e6\"\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nvia: 1.1 ee37e0f094ae25c978019ce1a6357240.cloudfront.net (CloudFront), 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT20-P6, OSL50-P1\r\nx-amz-cf-id: feIjGfN_RoDDKRz-zJgy7oFHTq6iMh59UQoubJOuxWG4h1QOavCNOw==\r\nage: 298865\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":58854,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 534x800, components 3","md5":"5b365d9acf4fa8153081ac6a66d210d3","sha1":"aa858d5f95e25e7e31e3179a6e1ad775880ef5e9","sha256":"3afc446d91f9c9b78ecaa54c6104652ea4985367f5d570f228ef99ccb9a4b19d","sha512":"b676055778f05a3ad1afedc6b231a2bda5eef00e427663da42c5a4ac4cb3876ddfc0f540b67d1b5dc47f55473017cfa42e8654a8c7f955b7ed79b8169db5fd01","ssdeep":"1536:fIDvJnSfYdBK4hLRa8tKrMSuCVzd+YRL5U2c0k:MvJDthLRJ8MSnp+Yb2","tlshash":"3343f153bfb36982f4ddb5b2428478642afe8e759c33161f2dc01ea947a35582c9c4b1","first_seen":"2025-10-14T04:43:33.445642Z","last_seen":"2025-10-14T04:43:33.445642Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1048,"receive":261,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/isrepeater.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:03.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/isrepeater.js?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=32cfe22f85a58d5525edded83a29d66b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:03 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m%2BM5R9I5rZs33B4mhR9yXq7PZqCBnIRoy7c0Sqrg23mimCYRbovJCJ%2F7ZMp0ejbrko88RfLtoExWlzdXpVWewyelXaR6rsQzg4Knqg%3D%3D\"}]}\r\ncontent-type: text/javascript\r\nage: 7095\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e469e53d2cb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10380,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10378), with CRLF line terminators","md5":"6ceeb6d8b500945a6aaea27f52f6f5e6","sha1":"4647a4865cb5ba5dce1057b3765044ec9559eec6","sha256":"477f24a8aa73997ef9d469763c99d51a9a0e94826db0525b45542d9d7219e214","sha512":"08bcacdd9fd2e1f2c30b50fd1f9d6ab57ca431a61c3d152e4b700537f264459ec76b31bba225752f00cd434d73f6f567aaadbaceb5865136eb6c9f551435758e","ssdeep":"192:OHLiBsVoJ1jrQN+U+PZeX8+eo3MmYXRHLHoZq3Ho7:NsO/jrQNjvleo3HCW6I7","tlshash":"8722a9997691b5229267b830117f010fb23b98d6f94d5804e2ce99e6bfbd80c4227f9d","first_seen":"2023-03-07T01:03:55Z","last_seen":"2026-04-04T00:38:59.82646Z","times_seen":1817,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/mfyd00035/mfyd00035jp-8.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:04.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/mfyd00035/mfyd00035jp-8.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 83241\r\nserver: openresty\r\ndate: Tue, 14 Oct 2025 04:43:04 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Mon, 14 Jul 2025 11:19:20 GMT\r\nx-cache-status: HIT\r\netag: \"6874e7b8-14529\"\r\naccept-ranges: bytes\r\nvia: 1.1 2f49b142e533a08662b63624a8ad1776.cloudfront.net (CloudFront), 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT57-P5, OSL50-P1\r\nx-amz-cf-id: ia5Rc-2Xikcic85TcbBmKwaHalgazsZWgFq2F0TBCRFktMgVPbp8CQ==\r\nage: 5791\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":83241,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 534x800, components 3","md5":"f0e308ed9e5c287211a0239a20fdfc0e","sha1":"feac22b6ec73b44ae8f41aad48b28b31cf5143d5","sha256":"7b0c96dfddd52da061ac141804d04ac81641b1e53768c2b23cf1d11215d6074b","sha512":"7c0eabb272276f7b1767c9f3a89e8f8386132b0f2e91d31ce77102172f03192e1bdff01e5a273d09fcb8ca4a5df17199de95b7f88a12ec285ce5c6403f69a433","ssdeep":"1536:izoLylWKe6JxPuo1pfYXOJ+Gus9TOKGpsuAgkiIY9oTCfZnFsM8Xvf:9ecKekxPTpAQFusRxGzABi79oTCfZnF8","tlshash":"358302316aa3dcd4f84a3bf85a81e260f30587dbc966bcad4b4980134f37a9345646f9","first_seen":"2025-10-14T04:43:33.459058Z","last_seen":"2025-10-14T04:43:33.459058Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1047,"receive":264,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/1start00398/1start00398jp-2.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:04.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/1start00398/1start00398jp-2.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 83848\r\nserver: openresty\r\ndate: Tue, 14 Oct 2025 04:43:05 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Fri, 01 Aug 2025 05:50:34 GMT\r\netag: \"688c55aa-14788\"\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nvia: 1.1 9afd2550e0ced91c2223cec22970051e.cloudfront.net (CloudFront), 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT57-P5, OSL50-P1\r\nx-amz-cf-id: Sa7MAV79jGW032pEuDtChWkXIeZsLoTIQYi6M58ZXi9IMnq0qZZlWQ==\r\nage: 434059\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":83848,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 533x800, components 3","md5":"ef74c4c9e606e0ef7bc05c3bf4d43681","sha1":"e1788af8ae0f3ff46fa3bc59db94104144c9d710","sha256":"443fc99585d125a19b6423e5f8585ca983fa0ee0c8c579732ffec48a5a922c14","sha512":"27ea863acc746159ad8e64438110e7909a3e0f11a9ae84a3a738da28cb38a8370ab50572262c3e4cb00a4286574670765f0d6932f5ff940fd13110f8b7332629","ssdeep":"1536:zH8PS1hcqgexeBBmr6UdqHxvflandqdF77X6iduSCDSQlhZgH2akAVsgz:CS1XABmr6nEdq/yiwg3yu","tlshash":"e08302a175a3c3fedc39093c85a68d265702efe1f81c031f469649539a3ec4ba89c776","first_seen":"2025-10-14T04:43:33.464942Z","last_seen":"2025-10-14T04:43:33.598168Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1722,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1435,"receive":287,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/fontawesome/webfonts/fa-solid-900.woff2","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:04.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/fontawesome/css/all.min.css?ver=5.15.1\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=32cfe22f85a58d5525edded83a29d66b\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:04 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 140996\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sd1LE743hX56ocXRRB3zWzbsnmC%2F2ij7Ck%2BMbeNFI6Cz%2Bv0fPYbYSXai1P7NNV7gT3BEFXZjfGfjTDOrmQi7qiTGPY6d4LTy%2BPh5kQ%3D%3D\"}]}\r\ncontent-type: font/woff2\r\nage: 7094\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 98e469e91d46b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140996,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 140996, version 331.-31392","md5":"25d740d42658b6e2c293ce7b3322aac7","sha1":"41cc9ae4b5dd70fd3988059dfb864f20f99ae371","sha256":"8b5a3ff47c2413e0bf3dd3bb7899a25aeef9b390a055847a1185a39ad48a2da2","sha512":"eb92dd22d53765b44d918ecec0105cbaae08fd5e0c7fac1ec8494a32bb553ded03e8b3826a230161ab791d6169eba1d3b384451e002ff0369760206b7775c768","ssdeep":"3072:X8Y40kER3HLOKqHj4HYwoR9G8iSjt1FrLl+JeMU:/4GZHLOtEH3wVdjtyLU","tlshash":"13d3123a6c8961b6fd2e9870bef1fc0949db7852059892c6b3565f6cd97a0031873f09","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-04-04T08:10:34.412695Z","times_seen":5624,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/player/jw8/jwplayer.js?v=7","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"104.21.12.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stbhg.click/e/dfl69ejg86fa","date":"2025-10-14T04:43:06.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /player/jw8/jwplayer.js?v=7 HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/dfl69ejg86fa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 28 Mar 2025 05:48:51 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FZTNEIOTBDRZjGBofczV57lgqFfSe0Aslq%2BvEWFOY3C5yJ3%2FjH7k6eowolC84Vfey6Q57%2F7j8C4W7VXIDUkMUY0rdsHlOAPn0L6j\"}]}\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 168\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"24254-631609ffc56c0\"\r\ncontent-encoding: br\r\ncf-ray: 98e469f638e6783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148052,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65503)","md5":"581ff912c413cd78a30f5c212f42271a","sha1":"79af689432d0f20cd1d951eb9436711da07decd4","sha256":"c708d26c24b48c3343e8cc7879d07e8ca6f23d1cc1e5df165a9f8e24a7c5830e","sha512":"c6185ea9db6db8786aa1636537595a5f061745caf287602beafc2dca984b1eceafeb3651109cad8cf45be3dba2a76a201758c6aaa7d7fb1adc8e07e95a39f41b","ssdeep":"1536:ELyl/ByW1iqxGJaGB2lAqU6ePRtwoIWz0Bk+5cm3wUn+yUi3LAalYqlkcRPUeJaQ:L4pknUi3LAbdhHwSm","tlshash":"99e339a631c2f4a613e264c7e47a4005f1790988744de8a4faacecd67956907b1b3ffc","first_seen":"2025-04-01T21:32:19.723959Z","last_seen":"2026-04-02T13:28:52.626488Z","times_seen":603,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/stream/RGo4h75iirxcNZ2Y0QdDxg/kjhhiuahiuhgihdf/1760460186/45094825/master.m3u8","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"104.21.12.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://stbhg.click/e/dfl69ejg86fa","date":"2025-10-14T04:43:07.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"HEAD /stream/RGo4h75iirxcNZ2Y0QdDxg/kjhhiuahiuhgihdf/1760460186/45094825/master.m3u8 HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://stbhg.click/e/dfl69ejg86fa\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 04:43:07 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ggFFrPBAHszXdJo8YJ%2F8x2Gf0fe3gE1MmB0CwgKkenNkn3GZkPyuuAqs%2Be7Se%2FYyW3jsAnrZTA5C1MjrE%2BAYXKDd5dJkhVNahuHP\"}]}\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98e469f97c9223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T10:49:22.366716Z","times_seen":13328728,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p16-tiktok-ads-sg.tiktokcdn.com/obj/ad-site-i18n-sg/202505265d0d2e324e8c952243f48376","fqdn":"p16-tiktok-ads-sg.tiktokcdn.com","domain":"tiktokcdn.com","tld":"com"},"ip":{"addr":"23.36.76.210","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://stbhg.click/e/dfl69ejg86fa","date":"2025-10-14T04:43:07.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tiktokcdn.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 07 Mar 2025 05:26:04 GMT","end":"Wed, 08 Apr 2026 05:26:03 GMT"},"fingerprint":{"sha1":"AB:A5:D2:DF:CE:6C:6D:AE:DD:36:C7:0F:CC:E1:32:1D:76:C7:35:C0","sha256":"75:76:14:5C:F5:BB:65:0D:C6:06:2B:2A:07:FA:50:AF:47:D8:3D:E9:63:80:10:B1:BA:42:B3:0B:51:AE:A7:9B"}}},"request":{"raw":"GET /obj/ad-site-i18n-sg/202505265d0d2e324e8c952243f48376 HTTP/1.1\r\nHost: p16-tiktok-ads-sg.tiktokcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://stbhg.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 1432254\r\nimagex-fmt: png2png\r\nlast-modified: Sat, 11 Oct 2025 22:58:35 GMT\r\nnw-session-id: 20251012065835A5BC41007EEE396F0B706bc6n13tt\r\nnw-session-trace: 2025-10-11T22:58:35.921652781Z 141\r\nx-bdcdn-cache-status: TCP_HIT\r\nx-length: 1432254\r\nx-powered-by: ImageX\r\nx-response-date: Sat, 11 Oct 2025 22:58:35 GMT\r\nx-tt-logid: 20251012065835A5BC41007EEE396F0B70\r\nx-request-ip: fdbd:dc51:ff:1:1:245:40:109\r\nx-response-cinfo: fdbd:dc51:ff:1:1:245:40:109\r\nx-response-cache: edge_hit\r\nx-tt-trace-host: 01a99b592d481906266179393a0b8805c74f0c531c6b184a68f2e8a846b9cedf35a8e88dbf6dea49181132829b5e5941dd40dfd28f1fe20c13e266397115fcde4139551fa4067d9470d42985d3965987c921ad094063443c64d905acf28359a08b2ec89b15f97ab76471fe55c20eb002b911070f1e09c819fb909236404ebb0904\r\nx-tt-trace-id: 00-251013000054BD9DFDE4CFE105A5071C-42F29A0141193AA7-00\r\nserver: TLB\r\nx-parent-response-time: 3,23.48.148.138, 247,2.23.186.203, 2,23.36.76.125\r\ncache-control: max-age=31536000\r\ndate: Tue, 14 Oct 2025 04:43:07 GMT\r\nx-cache: TCP_MISS from a23-36-76-125.deploy.akamaitechnologies.com (AkamaiGHost/22.2.5-a9c17ad842a5a5bbb9fede73ebb832d8) (-)\r\nx-cache-remote: TCP_HIT from a23-36-76-206.deploy.akamaitechnologies.com (AkamaiGHost/22.3.0-fcd174d50fb223c8364cec3c4b3f29c6) (-)\r\nx-tt-trace-tag: id=16;cdn-cache=miss;type=static\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=3, origin; dur=0, inner; dur=4\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1432254,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"394e36952726bb98b409313d72cae756","sha1":"d61566afc0625c521424cc48b93322a5cc12deb4","sha256":"b31e9efe8aed80d3db5514a73812e795a74c0d41a771776741b91dbbe457fd9d","sha512":"162a28d6a78636b91056cdec2be72e164a657af377c61f45e69bb82a2c5e101b946742021a904b45c2a17d6d90ef019638e5f05b34fc9474bcf66872261f1e12","ssdeep":"24576:eEcg18P1aouSex0ctN1ou4nvgytEmpPb4q46/iMM1V:jcg18k6M5nyvgytVpPb4Poi5","tlshash":"e72523897f681cebc49749f2d20e83f2b7a0c44499583f5729d99b0bf9f47d8ea20065","first_seen":"2025-10-14T04:43:33.452726Z","last_seen":"2025-10-14T04:43:33.474063Z","times_seen":2,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":138,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn001.imggle.net/webp/poster/20253001/1741286182.webp","fqdn":"cdn001.imggle.net","domain":"imggle.net","tld":"net"},"ip":{"addr":"172.67.74.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:04.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imggle.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 00:26:18 GMT","end":"Fri, 28 Nov 2025 01:26:04 GMT"},"fingerprint":{"sha1":"3D:D7:A4:29:CD:9D:68:E2:6D:DD:CB:4F:B7:65:26:2D:B8:3E:01:F6","sha256":"92:07:49:FB:FC:89:EC:3B:E7:48:EB:4C:8E:D0:E3:C2:24:FD:F3:84:C3:2F:D6:AE:8D:D2:21:6B:0F:F2:1B:4B"}}},"request":{"raw":"GET /webp/poster/20253001/1741286182.webp HTTP/1.1\r\nHost: cdn001.imggle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 81652\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 06 Mar 2025 18:36:23 GMT\r\netag: \"67c9eb27-13ef4\"\r\nexpires: Mon, 21 Sep 2026 23:06:00 GMT\r\ncache-control: max-age=31536000\r\nx-cache: MISS\r\ncf-cache-status: HIT\r\nage: 1666124\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BfcBZjmqhW0P0J42jgGoTXdVfcV2goS5dJvdCmB%2BX3rqAfpXzXxBQ8DyR89oJEiHm6lL2xUl6Qa6jONhxwy2QhL0mSEzdUE9x37nK5pVB%2FbM\"}]}\r\ncf-ray: 98e469e6596e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81652,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x426, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"408a101c6f6104a1954731e77621072e","sha1":"c4a0b8a98f3df170d93532df800ae06871b9923b","sha256":"94bbc24699e6159b69fe5f721206e200fd1b9c66c41e6d9d019e189aefe02c7d","sha512":"23133f7f15c7d28ba7e5ebc3e77502acc009446f3acdc9c8af928a75628bf7e3f445224deb4a1975782c0172ee2261f414b810d436317274a75cda734d920362","ssdeep":"1536:pJTXAUTciB65djkxlbE6O3hxaD37Sd6NpUE+KfXcW:pJTX1B65djk46/3ed6HX1fXcW","tlshash":"7f831263979b328783cfe01732857f2a1e5b0d3e36c35a9c062cb552f691a9089e5f4d","first_seen":"2025-10-14T04:43:33.478704Z","last_seen":"2025-10-14T04:43:33.478704Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-admin/admin-ajax.php","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:05.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"POST /wp-admin/admin-ajax.php HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 49\r\nOrigin: https://xhdfriday.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=32cfe22f85a58d5525edded83a29d66b; _ga_RTM6XRXKXM=GS2.1.s1760416984$o1$g0$t1760416984$j60$l0$h0; _ga=GA1.1.909450301.1760416985; dom3ic8zudi28v8lr6fgphwffqoz0j6c=92ae32a5-269b-450c-87af-70327331e6d1%3A1%3A1; pp_main_e5740c7b80abc2329366e06d2dc81dff=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:05 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: https://xhdfriday.site\r\naccess-control-allow-credentials: true\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lyx73DW%2BwfQIZ4syn2wHtco4pz5zqpiQr%2BhOh5IqfNaractR6%2F0ylXv7aqAmc3hanYQ5hXMoK2HmfcjqJ89oYRc41YmAJftOW4ZcPg%3D%3D\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/json; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncf-ray: 98e469eced57b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f362d1337f5b9cb2ea6d7ef5689ab417","sha1":"eebb09d7d088a2bced4c4a740af143a275828d1c","sha256":"d3c3f3cf6fd347e606bba353ef359a7ae00518479800cb9e63c842e8b758aa3d","sha512":"09e2c6f496d7dce6a86c1091353714e878ae3189cd9b2fdb26a367453b9e727b0d8a2e11e1d4d5065ad4f6f9a3c916d441d46e51f9ca889b15c01189c66a8ace","ssdeep":"","tlshash":"29a022c3b0c3880c20a000c000c8002fe0383e0322e838ab20b33838802c20032ef30f","first_seen":"2025-10-14T04:43:33.485029Z","last_seen":"2025-10-14T04:43:33.62584Z","times_seen":2,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":471,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/e/dfl69ejg86fa","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"104.21.12.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:05.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /e/dfl69ejg86fa HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:06 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 13 Oct 2025 04:43:06 GMT\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4o4TqvnuNAF1wwSXfUYPNYzcy9UM0VLky%2BegFyZ3t6jjFTCbkaKRwjHGDmH5JQLxfCyJL4ewfmd3BmpjiMiuB%2F8sewDS90IzT1AR\"}]}\r\ncontent-encoding: br\r\nset-cookie: lang=1; HttpOnly; Path=/; Domain=stbhg.click\r\ncf-ray: 98e469f069e6783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14964,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (9049)","md5":"c861a8d091b397a0dad7df15df4e0354","sha1":"5b8e98c6df76d59853ec86f19cfdb7ca94706210","sha256":"9643162ea4b6a3220e8a69b7bf48a99f10df8b7cb48ba900a8fb9669e8e4c1ad","sha512":"a1c6ce91807176fd587ec9876466133816350be8067cd0d3affd8ce14216b53314325d499f69b1f4cc9cb6a5bf8f038e8e2ac8b94a6ea6f70d2a695a4b3f0f30","ssdeep":"384:JlMzwJoeV0sHkOx2DE4PtWq9SsEzHrYuqRwZl2G:JlMzwlV0JE4F9tE/EW","tlshash":"db625c7ba949443246e111acb83eb61cb5ba3871f931f490f59dc4847f80fca95b3888","first_seen":"2025-10-14T04:43:33.491644Z","last_seen":"2025-10-14T04:43:33.491644Z","times_seen":1,"resource_available":false,"data":null}},"time_used":969,"timings":{"blocked":68,"dns":1,"connect":1,"send":0,"wait":833,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/player/jw8/provider.hlsjs.js?v=42","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"104.21.12.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stbhg.click/e/dfl69ejg86fa","date":"2025-10-14T04:43:06.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /player/jw8/provider.hlsjs.js?v=42 HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/dfl69ejg86fa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 28 Mar 2025 05:48:27 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7uH39Cc1xp6rodNBD7gV0wMzT1Opre27ziYs4zODfKMEA4KKEvscL3XndW%2BuD5bP0ro9pn7KT8%2FaKNp9rUWre01s8ZwUcwFaU%2FIQ\"}]}\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"70ac0-631609e8e20c0\"\r\ncontent-encoding: br\r\ncf-ray: 98e469f7aaed783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":461504,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65501)","md5":"b88ce761b9ebc2a7859a2e03b33ce1ed","sha1":"70d94f3c48460af13fc14eea9e5969f8f28d1a3a","sha256":"0b009d01bf513b1059d8ee15e1a8b57faeb5f8066c0f47d2cf8e1dd2454e5b28","sha512":"0bf83a6b3d8d20918df3ecfd29f7016549a8d8c8cc4aa439018295d55ebf7e136397e0fca72ae0e4bc9eebcd3384261c9a4a492b6e4d43e1fc1acd3ce872c24a","ssdeep":"6144:Fy9gZtOSTvzXBukG/xu08Q9Eu961Q3/nqJxgEMLew9rrqwZk6:MyvvG/xu0pU1cqJxgEIZF","tlshash":"aca43bdd77a5a42642c2a1a5903f4607633b7d0a340dc1acfa2be9d75db8849b03bf74","first_seen":"2025-04-01T21:32:19.721472Z","last_seen":"2026-04-02T13:28:52.612627Z","times_seen":602,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/fontawesome/css/all.min.css?ver=5.15.1","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:03.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/fontawesome/css/all.min.css?ver=5.15.1 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=32cfe22f85a58d5525edded83a29d66b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 04:43:03 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3u%2BfQ5PlJko6mOQ7Z5WzewRCjs%2FaPyHLzHC51kmy3O6nS9zuaeIG8wUn5Kn2gATwrNZ13dP3hTSzWNnInJrbzQU8gswvOWVt8MykhA%3D%3D\"}]}\r\ncontent-type: text/css\r\nage: 7095\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e469e51d1fb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":174333,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65393)","md5":"95fe9653f2c45892b7e58090566f510f","sha1":"be3795caeaada195d12c96bb689a7f0b6f8d63b1","sha256":"257418de09101ff7791d410f420f9320141ce0436c264b076d46539b0ea0f830","sha512":"ace73c0affb5ee5c14308e4eac07c952f76c9d04ef44c19b5c73f3152f6d7543d24afe8573f6db1d4c757298b9ee215bc13bb883315d5c9bef4e79f27c3e206e","ssdeep":"1536:Kwv1E8SIZlJ/Zg9ADlnIZ+mqX565dWGFIibJbiC8IYiy6BFAXq6Y18GMF63kAmhT:N1E1IZ3/g2ln++1glbqMAXHR","tlshash":"b7046fb4d41e01da7726c60fab01b27a99f6f738d5410e4ae0cb4d1e1de2b9811c9bed","first_seen":"2023-04-06T14:37:36Z","last_seen":"2026-04-04T09:04:38.325565Z","times_seen":3306,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"relishsubsequentlytank.com/e5/74/0c/e5740c7b80abc2329366e06d2dc81dff.js","fqdn":"relishsubsequentlytank.com","domain":"relishsubsequentlytank.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:03.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"relishsubsequentlytank.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 22:03:42 GMT","end":"Fri, 02 Jan 2026 22:03:41 GMT"},"fingerprint":{"sha1":"E7:83:20:81:25:0E:7C:3B:7A:7C:3D:BA:C6:AA:E8:D2:87:13:7E:C1","sha256":"0C:8A:CE:2E:84:60:C2:59:BF:CF:8A:E8:E9:C4:96:C3:12:5B:FF:0A:D0:27:6C:5E:35:3E:26:A3:5C:84:94:AF"}}},"request":{"raw":"GET /e5/74/0c/e5740c7b80abc2329366e06d2dc81dff.js HTTP/1.1\r\nHost: relishsubsequentlytank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 14 Oct 2025 04:43:04 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 38320\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: relishsubsequentlytank.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: a8ae9f765025d22b5224d4b3502581ee\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":106605,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e98223846fca2fe6b3e97400df0744f0","sha1":"4c77eb91cb0cc025a4fd33178748efb5b442b92e","sha256":"296fce823750041c89b1da12e8ffaeb47cc36cbdd2691a57b62000184e5b015d","sha512":"9d5b176a0b0188e4c8ac0d50ca29d1ad8f4e11b90aa69d4a9055f03716f143de0d82014b29bb454c07b85a15e421579e922894ffcc7a6ce55ae1a465034b1560","ssdeep":"1536:89IDYewEZykUTzY67ytOUS5VlIXga6kSFf02mdBV4mCzCgiA0eQpE0I9N0rvQ:Bn+T9RCgZ0eQp29N0rvQ","tlshash":"baa3a4883f40f17d0796b47a323fa61af0791a01509cd69cf107f1a8ae6674ab43fe65","first_seen":"2025-10-14T04:43:33.499193Z","last_seen":"2025-10-14T04:43:33.632387Z","times_seen":2,"resource_available":true,"data":null}},"time_used":721,"timings":{"blocked":241,"dns":1,"connect":92,"send":0,"wait":102,"receive":95,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"relishsubsequentlytank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/jur00212/jur00212jp-10.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/jur-186-uncensored-this-might-be-the-last-erection-of-my-life/","date":"2025-10-14T04:43:04.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/jur00212/jur00212jp-10.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 63151\r\nserver: openresty\r\ndate: Tue, 14 Oct 2025 04:43:05 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Mon, 27 Jan 2025 08:55:41 GMT\r\netag: \"67974a0d-f6af\"\r\nx-cache-status: HIT\r\nvia: 1.1 b101a9331666b8f65bfdfc26e686a81e.cloudfront.net (CloudFront), 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT20-P2, OSL50-P1\r\nx-amz-cf-id: bsdbRW8DzC15JHmelxBINxMpcKV9TWqQmAhUidhSbk0W__rIHejBtQ==\r\nage: 260019\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":63151,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 534x800, components 3","md5":"c4431d6667b696a84ea2105f01361c2d","sha1":"2d75baa057e738c0d64767444256a27fc49f2b65","sha256":"c97d04e02d5b2a3cdd9c141941acbb1955dc4c1a40ba961592e7bd5f354040c8","sha512":"f262b509454cb7f0f55981434d8a1d2ff7f16519c1f363914455884f075d2cfeb7a8524a581890738dd4d176d0b68c50a454e2f551801c3d9d0b1f9766c305d3","ssdeep":"1536:1Brx6C+YPNVosiykAQUdb9tNNxxgYJRPqaVy/oumZi:1BrUZYPfo5ykAtJtrL3Jlqdoji","tlshash":"075302cf17a4dc848c97973d89819ff503a9629907eb225aaf57cc18832f14d89f16ce","first_seen":"2025-10-14T04:43:33.50376Z","last_seen":"2025-10-14T04:43:33.50376Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1719,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1432,"receive":287,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}