{"report_id":"73101140-4302-4d54-aa30-ea504508645e","version":6,"status":"done","tags":[],"date":"2025-10-26T22:48:28Z","url":{"schema":"http","addr":"shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"104.21.35.251","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"title":"مسلسل محمد الفاتح سلطان الفتوحات الموسم الثاني الحلقة 19 مترجمة - شاهد فور يو - Shahid4u | مشاهدة افلام و مسلسلات اون لاين 2025","dom":{"size":64,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"91e12c9d68ab51fb753bc1a65b333516","sha1":"a81d34cdc9135b3bfb291574b7bf7b40e94c4e5c","sha256":"9ae5416c9320ef2be2f2fdb07e60bf1d80a4f1422aa50d5f7b8d16ea79544451","sha512":"cbf6794a5a2eefd073aadf912ae05cb4656ca9a11b50de239af4be40adef9ba8b5fcc5046744f9e1a168571970f1841ed9d3f81aef4b2e154465214cb224f6b9","ssdeep":"","tlshash":"61a002f9e0534c076c2037a06dc1124f1925c7a861c18e0427d8287ae9653368d252d8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":"PGh0bWw+PGhlYWQ+PC9oZWFkPjxib2R5IHN0eWxlPSJjdXJzb3I6IHBvaW50ZXI7Ij48L2JvZHk+PC9odG1sPg=="}},"submit":{"url":{"schema":"http","addr":"shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"104.21.35.251","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-30T22:48:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":7,"urlquery":0,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-26T22:48:05Z","timestamp":1761518885,"ip_dst":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.29","port":37124,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-10-26T22:48:05.008033+0000\",\"flow_id\":1863894023078087,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.29\",\"src_port\":37124,\"dest_ip\":\"104.26.13.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3512,\"start\":\"2025-10-26T22:48:05.000199+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-26T22:48:07Z","timestamp":1761518887,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.29","port":37126,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-10-26T22:48:07.176072+0000\",\"flow_id\":39271656828872,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.29\",\"src_port\":37126,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-10-26T22:48:07.176072+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-26T22:48:07Z","timestamp":1761518887,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.29","port":37126,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-10-26T22:48:07.196130+0000\",\"flow_id\":898982375587362,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.29\",\"src_port\":37126,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-10-26T22:48:07.196130+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-26T22:48:07Z","timestamp":1761518887,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.29","port":37126,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-10-26T22:48:07.216172+0000\",\"flow_id\":1497958514642028,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.29\",\"src_port\":37126,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-10-26T22:48:07.216172+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-26T22:48:07Z","timestamp":1761518887,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.29","port":37126,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-10-26T22:48:07.276357+0000\",\"flow_id\":39271656828872,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.29\",\"src_port\":37126,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-10-26T22:48:07.176072+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-26T22:48:07Z","timestamp":1761518887,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.29","port":37126,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-10-26T22:48:07.300445+0000\",\"flow_id\":898982375587362,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.29\",\"src_port\":37126,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-10-26T22:48:07.196130+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-26T22:48:07Z","timestamp":1761518887,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.29","port":37126,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-10-26T22:48:07.316474+0000\",\"flow_id\":1497958514642028,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.29\",\"src_port\":37126,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-10-26T22:48:07.216172+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"intelligenceadx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"shahid-4u.my","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"www.intelligenceadx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"x3os.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"earnvids.com","ip":{"addr":"172.67.165.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-04","domain_rank":118559,"first_seen":"2024-12-14T06:54:05.221672Z","last_seen":"2025-10-26T06:39:27.715399Z","alert_count":0,"request_count":1,"received_data":610,"sent_data":441,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.intelligenceadx.com","ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2020-04-18","domain_rank":673791,"first_seen":"2020-04-29T02:39:45Z","last_seen":"2025-10-21T16:07:37.974649Z","alert_count":1,"request_count":1,"received_data":42499,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-26T22:12:37.824968Z","alert_count":0,"request_count":1,"received_data":9638,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bvtpk.com","ip":{"addr":"172.67.154.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-03-16","domain_rank":37068,"first_seen":"2025-05-21T11:34:02.786268Z","last_seen":"2025-10-21T23:36:17.858471Z","alert_count":0,"request_count":1,"received_data":111169,"sent_data":404,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"emt1ptwzwg7a.l4.adsco.re","ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2025-10-26T22:48:30.376781Z","last_seen":"2025-10-26T22:48:30.376781Z","alert_count":0,"request_count":1,"received_data":463,"sent_data":436,"comment":"","tags":null,"fingerprints":null},{"fqdn":"intelligenceadx.com","ip":{"addr":"208.95.114.100","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2020-04-18","domain_rank":61654,"first_seen":"2020-04-19T20:09:16Z","last_seen":"2025-10-21T16:07:38.852957Z","alert_count":1,"request_count":1,"received_data":257,"sent_data":1770,"comment":"","tags":null,"fingerprints":null},{"fqdn":"p16-ad-sg.tiktokcdn.com","ip":{"addr":"23.36.77.99","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2017-09-20","domain_rank":2789250,"first_seen":"2025-08-29T12:48:37.175172Z","last_seen":"2025-10-25T19:32:43.658898Z","alert_count":0,"request_count":2,"received_data":1703423,"sent_data":970,"comment":"","tags":null,"fingerprints":null},{"fqdn":"c.adsco.re","ip":{"addr":"104.17.138.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":100769,"first_seen":"2017-11-29T18:42:15Z","last_seen":"2025-10-20T04:59:29.765901Z","alert_count":0,"request_count":1,"received_data":80380,"sent_data":509,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"emt1ptwzwg7a.s4.adsco.re","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2025-10-26T22:48:30.386354Z","last_seen":"2025-10-26T22:48:30.386354Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":436,"comment":"","tags":null,"fingerprints":null},{"fqdn":"emt1ptwzwg7a.n4.adsco.re","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2025-10-26T22:48:30.368006Z","last_seen":"2025-10-26T22:48:30.368006Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":436,"comment":"","tags":null,"fingerprints":null},{"fqdn":"adsco.re","ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":3069,"first_seen":"2017-04-03T03:11:30Z","last_seen":"2025-10-21T15:10:53.822095Z","alert_count":0,"request_count":1,"received_data":1810,"sent_data":444,"comment":"","tags":null,"fingerprints":null},{"fqdn":"shahid-4u.my","ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-10-25T22:35:01.318783Z","last_seen":"2025-10-25T22:35:01.318783Z","alert_count":25,"request_count":25,"received_data":1204196,"sent_data":36929,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-10-26T22:15:38.172198Z","alert_count":0,"request_count":4,"received_data":389199,"sent_data":2114,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-26T22:13:34.663946Z","alert_count":0,"request_count":2,"received_data":857796,"sent_data":865,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"4.adsco.re","ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":95532,"first_seen":"2021-01-04T16:47:52Z","last_seen":"2025-10-23T13:32:29.184447Z","alert_count":0,"request_count":2,"received_data":860,"sent_data":849,"comment":"","tags":null,"fingerprints":null},{"fqdn":"my.rtmark.net","ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2025-10-20T01:00:57.748276Z","alert_count":0,"request_count":1,"received_data":834,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"x3os.com","ip":{"addr":"139.45.196.64","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2021-03-18","domain_rank":19468,"first_seen":"2025-04-24T02:39:31.647355Z","last_seen":"2025-10-23T15:16:20.726817Z","alert_count":1,"request_count":1,"received_data":826,"sent_data":586,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"api.ipify.org","ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2025-10-20T00:00:00.591325Z","alert_count":0,"request_count":1,"received_data":271,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pixibay.cc","ip":{"addr":"172.67.207.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-18","domain_rank":362650,"first_seen":"2025-08-01T20:54:23.92846Z","last_seen":"2025-10-23T15:16:20.813143Z","alert_count":0,"request_count":2,"received_data":748068,"sent_data":871,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"6.adsco.re","ip":{"addr":"104.17.138.102","port":2087,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":91627,"first_seen":"2018-01-15T04:15:29Z","last_seen":"2025-10-23T13:32:30.054225Z","alert_count":0,"request_count":2,"received_data":993,"sent_data":849,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fdewsdc.sbs","ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-11-16","domain_rank":97696,"first_seen":"2023-11-16T18:23:31Z","last_seen":"2025-10-26T06:39:27.874629Z","alert_count":0,"request_count":18,"received_data":1441537,"sent_data":8185,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-26T22:48:05Z","timestamp":1761518885,"ip_dst":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.29","port":37124,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-10-26T22:48:05.008033+0000\",\"flow_id\":1863894023078087,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.29\",\"src_port\":37124,\"dest_ip\":\"104.26.13.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3512,\"start\":\"2025-10-26T22:48:05.000199+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-26T22:48:07Z","timestamp":1761518887,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.29","port":37126,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-10-26T22:48:07.176072+0000\",\"flow_id\":39271656828872,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.29\",\"src_port\":37126,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-10-26T22:48:07.176072+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-26T22:48:07Z","timestamp":1761518887,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.29","port":37126,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-10-26T22:48:07.196130+0000\",\"flow_id\":898982375587362,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.29\",\"src_port\":37126,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-10-26T22:48:07.196130+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-26T22:48:07Z","timestamp":1761518887,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.29","port":37126,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-10-26T22:48:07.216172+0000\",\"flow_id\":1497958514642028,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.29\",\"src_port\":37126,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-10-26T22:48:07.216172+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-26T22:48:07Z","timestamp":1761518887,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.29","port":37126,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-10-26T22:48:07.276357+0000\",\"flow_id\":39271656828872,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.29\",\"src_port\":37126,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-10-26T22:48:07.176072+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-26T22:48:07Z","timestamp":1761518887,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.29","port":37126,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-10-26T22:48:07.300445+0000\",\"flow_id\":898982375587362,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.29\",\"src_port\":37126,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-10-26T22:48:07.196130+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-26T22:48:07Z","timestamp":1761518887,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.29","port":37126,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-10-26T22:48:07.316474+0000\",\"flow_id\":1497958514642028,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.29\",\"src_port\":37126,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-10-26T22:48:07.216172+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fdewsdc.sbs/assets/jquery/ev1.js?type=main\u0026u=36\u0026v=2.0","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"01670c853835417bf26efbe9afc6f337","sha1":"00bc1f1a0b943c8aef0d096364218b300a9a317f","sha256":"b4ab1045a2d97e700e88c894ab02ceccf1ad3e61e0b9f00211e70abc49b0ac9b","sha512":"eeae005bb6956801ba4039cabf8795e96985612c646ae7b3394a7627b919c765c070e5d51639c6186bb7fd7e7db27eb6e096f060a64fd8a85812a3d6c0360c7f","ssdeep":"192:K71nI6C8/ZayQDCO/WayUFCh/VnayUDCc/MayQB8u+0CZh:KpnAspSe1VrMGh","tlshash":"e4e1ab9d5ef3006d9067b56abf2fa12470749027050aee1a7c4c62d85f84cba3976fbc","size":6841,"data":"","first_seen":"2025-09-19T10:51:40.885767Z","last_seen":"2025-11-15T19:23:31.230483Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/player/jw8/provider.hlsjs.js?v=42","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b88ce761b9ebc2a7859a2e03b33ce1ed","sha1":"70d94f3c48460af13fc14eea9e5969f8f28d1a3a","sha256":"0b009d01bf513b1059d8ee15e1a8b57faeb5f8066c0f47d2cf8e1dd2454e5b28","sha512":"0bf83a6b3d8d20918df3ecfd29f7016549a8d8c8cc4aa439018295d55ebf7e136397e0fca72ae0e4bc9eebcd3384261c9a4a492b6e4d43e1fc1acd3ce872c24a","ssdeep":"6144:Fy9gZtOSTvzXBukG/xu08Q9Eu961Q3/nqJxgEMLew9rrqwZk6:MyvvG/xu0pU1cqJxgEIZF","tlshash":"aca43bdd77a5a42642c2a1a5903f4607633b7d0a340dc1acfa2be9d75db8849b03bf74","size":461504,"data":"","first_seen":"2025-04-01T21:32:19.721472Z","last_seen":"2026-04-02T13:28:52.612627Z","times_seen":602,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/assets/jquery.js","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4fcf018b5c604c47ae980185cf0167c2","sha1":"fa4ab55b154a5a4c4ef55cfad51a2a2d4407af61","sha256":"32b42f9bc813dd6bad1b45129eade1df8dd1463908f79505209fbfa1aa71018a","sha512":"3ea648f880dcc7bd96685650b232213a6d1056dea2c698c1a3a09f14df04ac4c13e06ad5966341a597280d432aa94aff0c51a39a77ff3602e7754bcd65fc9464","ssdeep":"1536:6KRUXRa8Dgwxcy2jpBNwch96SLk8Ek2BSrBGS1ia/eEk4aV2EXi8SMpQ47GKF:6u1zNwcv9qBy1HOg8SMpQ47GKF","tlshash":"7283f8df77ca706247ab30b9006f550bf276199d684d4400f159d8e9bc78a4a823bf7e","size":87462,"data":"","first_seen":"2023-06-05T16:56:04Z","last_seen":"2026-04-16T15:12:53.221883Z","times_seen":1301,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.intelligenceadx.com/ANHcps/j/jxss.min.js","fqdn":"www.intelligenceadx.com","domain":"intelligenceadx.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"004f148533aeb7c580163e2b36f9f345","sha1":"0c3e6833a697b8e5ff25b7423b9a4d794146b21a","sha256":"c32dbd81e7c830bee8470a8faedb76cb441db739de6006e05aa174e456117eb8","sha512":"27352c105df55ed7c1c3fad8c3821fa5a5448506a0867bef47f258e0c5ce699708ab4b22ab8f0d8aad6ecd4bc4c9a5fedd92a72db9aacdee6e2876d88358cfc8","ssdeep":"768:bt9rqAYKKeZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigCAJCntlqoDX:bbVZzFQ9JsTgZvfzmMzhYrTscpMZZ","tlshash":"40132aaab286282601e741ba513eb316b23305167812d458fcb9cdf96e3ddc6117b7fc","size":41946,"data":"","first_seen":"2025-10-25T22:35:10.908061Z","last_seen":"2025-10-26T22:48:42.281054Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/js/jquery.min.js","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-16T21:05:18.139708Z","times_seen":450774,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/ad?type=18869649","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6374a71794fb1b28a620e89fb3453bae","sha1":"ff2b29384e980be738e9e1affd60c6f0e5606cca","sha256":"32f12bce51e57ec5c4f423f5f01b81e40c96c6449ec90abaff1430d82a3994bf","sha512":"4d8da9b65bd0b6bc5ef22f1e6722c65af615d3b2003ad34f55e0396a62bf69fed40bbae2922b8d36189dd5e000a24b246915e29392ff84144422e6485a0a3e41","ssdeep":"96:vmiVe9hBjHujaKvsUSgtZix6G9yhAWfnb4JG0681v8:vmMChBjHCsgtZixpohdfbwG0681v8","tlshash":"ce8110c466d168c00347a676373ab1eaf82b9dac39c47c59f5417c90f692c20e6e597c","size":4127,"data":"","first_seen":"2025-02-26T03:12:32.193263Z","last_seen":"2026-04-01T19:35:17.266136Z","times_seen":293,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/embed/2426vbhxujg1","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"13734aa9c93c039107d6e183ad18d72a","sha1":"782638bcb9e092580c491b7c0f0c65a131512118","sha256":"87081bc5290094ee96abe8489cf1a4fb57c2efff22e52efda12a6b0364a57239","sha512":"df2e4f06c219375291fbebf57b3bcd1d2bf2fa4d7d285788b4f550563b490f13e4e5f2aee28ae73ed17b9cb2dd5226f5eb828c7d1987802bb46b85341aa0af54","ssdeep":"","tlshash":"aac02bcc211e4c7041f727408b3ff600b4023324d5d4ad32491d33085e30e17d744810","size":153,"data":"","first_seen":"2025-05-10T11:08:49.303884Z","last_seen":"2026-04-01T19:35:17.315956Z","times_seen":285,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/embed/2426vbhxujg1","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8128a441ff706a8ec299dd1a560923bb","sha1":"9f8788439276618a33079275ae70924eb75ac719","sha256":"59fdddc6adc92255f75234397026b775ccbd50552523579aeb175e2e19a4a5c2","sha512":"92c52f63ee46471ee8c53d878e3a1ec433eec80deb761fec422a1659a375936433302ddcf0f571091ce0f5ec57546e3e03cc7c76c7b515dc15b1d0304b9753d5","ssdeep":"192:W/0tpWKzMNwpyE5SZsV4XB+7vsOsdE1kJrzo4gEEn11CW01XUGEXS1NvCWGWPWBn:W/0XMNw6ZHREsOL1orzo6KFSDQF1l","tlshash":"70221c785d904834c1d617ecb8bfe314b23e1c00ad55e28dfd7ae54837697836ab7984","size":10235,"data":"","first_seen":"2025-10-26T22:48:42.31662Z","last_seen":"2025-10-26T22:48:42.31662Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/embed/2426vbhxujg1","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7469399f6ae776a44b60a1b0089c1488","sha1":"0ed10e160f95020286084ad24a3270d392ec969d","sha256":"6c5e3c9031fe7ef7cd1c462518248bdbf82f2a17592cee0ac9cdc0c850738cfa","sha512":"7ec861fcca18d1ce9d727564a1dafadf0acaf09f52b98faecc09062ecf9bb15fe9ed77b2903f406f995065a1a66881cb6b2d044594ea7c50513b0f53d25634d7","ssdeep":"","tlshash":"77f09ea53cc98435e336116362afa159745969382c4abc15c84c88853695dfa08af54c","size":505,"data":"","first_seen":"2025-05-10T11:08:49.304654Z","last_seen":"2026-04-01T19:35:17.318266Z","times_seen":250,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bvtpk.com/tag.min.js","fqdn":"bvtpk.com","domain":"bvtpk.com","tld":"com"},"ip":{"addr":"172.67.154.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eeaae1cd96fced67aafdbb7b198ddc18","sha1":"27d2fdbaeef79401288886bd276079809bb9f039","sha256":"8f0af4ab5e06c6170903b6168d1dc3d63d750f4e063263a431583d1fa5e71cc0","sha512":"571e4e189fbfc71dbe4709cc50571e14a31c059bc428253abc48f0fb7239fd528fb43ca868b0509e1b2f3a3acd524acab5db4e14e1dec132080f10f4c57fa6da","ssdeep":"1536:IMukxpFON+nJivD2eJXWBTN7aZeCm68L3b7Az0SAF9Q4+DIVVIBUCn:3uCFOqJQDBBWxqeCm68W0SI9z34UCn","tlshash":"29b33bda2266241612bf8034445bdd0db5aecd8104cdcdb8e0e6b8662d78b16d3fbfd9","size":109979,"data":"","first_seen":"2025-10-23T13:04:31.962589Z","last_seen":"2025-10-26T22:51:31.539862Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-BM642X4VSX","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b3946cd68919662b6e62d36132a4f22","sha1":"4f4fbd6d01d1d94ec662f9dd5ac960c1133eaf14","sha256":"b8a24f1fd5c228ce034cf8d73bd7266e30698967abbe939a93d17dec787d69c1","sha512":"21a35ea6280e91f559db0ae17a4fac32d521dd32cb0917824d4e8a56e76202329ca000e9ba21ef98339e2b82116211a12d163136fc01cb9b2bd7c779da2ee088","ssdeep":"6144:rBjyJBX178429Z8nP57wr/s0s/+Kxxc20hYllAk6KlhDjMc:tWJBl929Z8nP58DG/mYl5X","tlshash":"3e9419ce73d670269396f078503f018ba57b29a2b45cc896f189cce42d74a9a4277f7c","size":427145,"data":"","first_seen":"2025-10-26T22:48:42.29774Z","last_seen":"2025-10-26T22:48:42.29774Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/player/jw8/vast.js?v=32","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b3eb53abc624a51f5e226d08758ddf3","sha1":"6cca061ec7c41313ec2027eaaca76fa9dfad750b","sha256":"73788e3233d5113578082f78869724925d3e4dd2c9d02fdc0bf84d6aed3a768e","sha512":"c6c7bbc31213d98134d98087ad912f1244b2dc7c7914247baac80d534663ab75135c004bf5473044db9e082302477b9d812b0a0db4c5f21b3e27508c26c265c5","ssdeep":"1536:twVnle2Qmbe005pkZ/gbxRYpYItN6X6ud7srzIjpitB39BsLIYOONMQHMkBxLNwO:tEnPRIN1D2zXkIYdN7Hnf","tlshash":"acb308872399d52247e484e960344212b335060f780a83acf67dfdef1d5ea4b76bab74","size":112211,"data":"","first_seen":"2025-04-01T21:32:19.700252Z","last_seen":"2026-04-02T13:28:52.634565Z","times_seen":561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/embed/2426vbhxujg1","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"28531f250cfd98951077c6bf551731f3","sha1":"15903990f3bb7abf52907a50ea436e57be24a329","sha256":"6b49a2e3a5ce9746aa9e940390fd6832ff3fbd02e516ed82e77096b0fe90d610","sha512":"0da200f96192c2e407c03fa3b8d117073914ddd90e4125c1bd76410bf7d270469bcc76aea76383bb04f13cd035cea1d72682f10e303d0d4d3c8a6f58f9ef8cb3","ssdeep":"","tlshash":"f311eb26b7ad5124c13b356bd676f2c7b43d00314410ec0efe4ce28862a1986297a8a5","size":893,"data":"","first_seen":"2025-10-26T22:48:42.318256Z","last_seen":"2025-10-26T22:48:42.318256Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d389b91779cf5e7838cd8587dc47e314","sha1":"ca8fe09e210259da2d59e83ce079534d24a9ccfa","sha256":"9d885082e3746cde63773c6d75e1dc88107590d3679f6f71564b8d719d57905a","sha512":"8a00e962c2496b40162d1075c6e2fc9b90e31dca5feb5b5bf158540fb756d382f6d7c8d5f69ccc330fb420e0a976148bae7d06c47efd8609a9b3f707e01951a5","ssdeep":"","tlshash":"c311941c3818981521ef24f492bbd819b4b742f48f0c79e8bcefa4e0277684758572a4","size":966,"data":"","first_seen":"2025-10-25T22:35:10.916276Z","last_seen":"2025-10-26T22:48:42.31913Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"265fbd04531d9cf5fd767b4e3149a5d1","sha1":"9df7368252b2b411d8472e2a6cc46fd5557ac415","sha256":"1b5a1da3648fc66667a67e766f23683675655e69a2f5186d65e750c7af80fa01","sha512":"c66a183c6e2dcabfedf54ccf42ca70a8cb2f9fde6fdfabfcb8ce20dc684821ce10b7892a940f459cc41c7462c97300aa740eecc1a38638845d159c684c9b036a","ssdeep":"","tlshash":"cb9000020c0ac08a003a208e3a0e3b022a2a2ba080020202bcca023ab8a8003aa28080","size":49,"data":"","first_seen":"2024-05-15T22:21:34Z","last_seen":"2025-11-06T10:54:25.308656Z","times_seen":13860,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/js/xupload.js","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"98f99724f09ee7524d3e2ad085f43332","sha1":"3a1b48d327c1bb5c1675b5d63d7806006b18b671","sha256":"90c38291318a91efee3b33b2ab5dcc4338fd5a85ff913afa631dfd26267a7eac","sha512":"057c3096700dd08e1d09e93402b60454c92a3567df1510c698e486fbf82df8e5f23aaf063376b6b5c139d27e8aa773f01a0e036260bed96bd4fb5c86a7b79ca9","ssdeep":"192:7IKE9YGs1axsrl6IsZWnrbll621w+4UWdRebMQ4WdReDyYQaQv7OsaaFg+BnqGQZ:EGy+tBlV9GRebVReDyYS7OsaaF10fq3u","tlshash":"e722774abaa339912a7730350bbf52043b398407114aca54bd5cd6c4af8452897ffbfd","size":10716,"data":"","first_seen":"2023-03-07T15:52:27Z","last_seen":"2026-04-01T19:35:17.30488Z","times_seen":605,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"aaf72876f0d5e8a677a383fd45bf938b","sha1":"d8b2ca3c238c933223f4a6313c5c0561f99e0c1c","sha256":"15eb7e222abfc64660d0f94c04053839498df20ea9ac9a13a201701a56ce3bf6","sha512":"c6bec20224539a5319a753a794c7521e7063e76b3d41bac8d7f0159880eaf3ed07c3fc1b0eb4ec285f1970f270f4b0ab68890d5a0ed01e3b1542102ad707f6d7","ssdeep":"","tlshash":"207000080820000820200802220322283822323022cc0002220a083022ea00b80282e2","size":24,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-03-06T11:55:01.498128Z","times_seen":23956,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6dc0afc5aee21e3a2c7ba20fcbbc5502","sha1":"b0b548e52b180b7ac2fbac80962700dcd226b31f","sha256":"97e8f3fb205c8b155c8c6370121edddfad4baf9da50783c9b7efc9ed120bf41b","sha512":"e37b0c0f47dd7f5641a98b80cd68fa04f9b932dedd7d691399e0d04a47e75abc50fe62dee85ca735f2dc3c534869f8f8c1478afc9fcde9b91719665003f21a7b","ssdeep":"","tlshash":"819000022c2ac08a0038208e3b0e3b082a022fa080020202bcca0238f8a8803a808080","size":49,"data":"","first_seen":"2024-05-15T22:21:34Z","last_seen":"2025-11-06T10:54:25.308032Z","times_seen":13933,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/embed/2426vbhxujg1","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b646c52e581f55e05d9221627e7ec03","sha1":"0068422edd4a5acb27f3a9b9d6c02c8e7654a712","sha256":"176b49fb5e01e9613a33453a93f47d76f4261206ea56ea0ff13c9c58451fb669","sha512":"d481152cc4d515572a3916104800cf3a6d347e03de8babe13be7b0208ac5d6905d14aeaa488a6c3ba21e853f38f363adbcf8c370b12a5692584e459b2174d655","ssdeep":"","tlshash":"1fc08c2b229ef824c03abf3ec7a0b0c7b83a7020c101ca8c3244346cb3131452c808bb","size":148,"data":"","first_seen":"2025-10-26T22:48:42.321289Z","last_seen":"2025-10-26T22:48:42.321289Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd4820b250c493253358471e0614f67e","sha1":"6675f4006750dd490a573c0ebb7e7aecffaf9b5f","sha256":"01167d2f7fdaed7bff31a7f84233228c2648761bcab5308bf65945c17ac1e6b6","sha512":"4f2d6ae07080f847d02bbcf399cb20a243678e7e0bac460260a56da467b10e14f12ff1b708933e7c1d3ec5c09d337ff9404bfe206a32f91952c1500661649f48","ssdeep":"","tlshash":"0dc02b8c230a0c7091fb37008b7ff600f002322c94d56931490d33446d30e07e744814","size":153,"data":"","first_seen":"2025-10-05T15:42:05.811855Z","last_seen":"2026-01-11T22:52:14.379292Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"10e160f0bb19305f081118188d4002fc","sha1":"a2b0810be6d009dba0d7d2da90fcb26252aa0264","sha256":"9452b1ea7d87cec67e027a7a04773cf4297e4d9f9b52b73f0e93adeaefcf8e3a","sha512":"bc05746592da1dbf1a2f0ff22accb7bb0378d99ded5177bd80656a596bbc430958cf715ff5976f2815b8622b2d9c60e301c0a034e61d7fd168ba4690e0ed39bb","ssdeep":"","tlshash":"13f0891846728d3500f725f753d797d53660488bf58596af327ceb991f008e1a7604df","size":646,"data":"","first_seen":"2023-09-30T16:39:31Z","last_seen":"2026-04-11T10:46:50.385408Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-48ZJD1VPGZ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b00ac8090f29531e234d1a486f0d07b2","sha1":"4ec80a6f9e8523f0811e5cd05f974d1c6073336b","sha256":"5d2c6b49c562d3a3749023f13688bd9ba2dffe83a72ac40209ef95ff6cc2b24c","sha512":"f4c98dda86bb2303b828a94aa6dfff624c01dd330c9ac18e1ca80b5ba9c65edc001d1932360d8f59d711311e5c3a4b1d30b29e2f0b561286455dfe2e98bd06bf","ssdeep":"6144:KBFyJBX178429Z8nP57wr/s0s/+Kxxc20hYllAk6KlhDjMc:E8JBl929Z8nP58DG/mYl5X","tlshash":"289419ce73d670269396f078503f018ba57b29a2b45cc896f189cce42d74a9a4277f7c","size":429463,"data":"","first_seen":"2025-10-26T22:48:42.294437Z","last_seen":"2025-10-26T22:51:31.522794Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"41310478a380eaf7e07dbad9b4f81a97","sha1":"1714b6ef86e90b5b23e2aaa1e7728ed9c59f4d34","sha256":"848e5342d9196c0f64861ab926a3c5aecce9294750febbd22e5d8df859bdb144","sha512":"7b93f330547524ce01b8f888a8d56c19cd4432fbee43db16aab33fc1aecd77243762c5e7dd5ce767e38c0fdf9d58bc629caf106d77689c1ef90ebeb09406580e","ssdeep":"","tlshash":"d37000000000000b203c00020a023a003003003000880800820808302ae800b802c0a0","size":23,"data":"","first_seen":"2024-02-12T20:00:21Z","last_seen":"2026-03-06T11:55:01.500018Z","times_seen":19951,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9c1890d3d97cc4261473c8573097715b","sha1":"12d53006bef7811c15c3790b0e9bafa077f52d2b","sha256":"d0ea77c33d12565615b751dd5d753895e6287577bc0cfe0522961048b211daa6","sha512":"62eca8e363afdbc821f3ba920a58a75a3789fca87c65d7b68bf138ea41634dc74f1f45342376e49d8afefadc74d4bfee35fd24df9a842064845a368580f74943","ssdeep":"","tlshash":"ae800405303014013113541140c313014033cc105113f440413501145c7515031c1777","size":32,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-05T11:10:16.764296Z","times_seen":14600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/#0.6406190631777612","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.17.138.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"77c8287be10ff4b66a8490ca4d999917","sha1":"7fccb364c5e22958503bcd8b92cdb648d5c4c96e","sha256":"c2d43195d015b5856873b3b0c6e717ee21599ca3f03f820b7c325f27b9b6a31d","sha512":"2007ec2f0297a0479f4507af110911f7022310f757533ba1bbd40228d9b26908758bc09afa59f09471cdc254e49b84baa61f80514a010195d288f8049dface07","ssdeep":"","tlshash":"e3f050ddb475e1e955d22580bd2fbf407876526e240361e0d20cbcc1041868e871dbca","size":486,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-01-09T03:52:32.475699Z","times_seen":6630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/player/jw8/jwplayer.core.controls.js?v=42","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc91b5efc8f4bb2482c2d7d5d8d9b691","sha1":"5db922c4c6caf3a7d22f57a21670281d5c31994b","sha256":"f061c139ad68d7ed1360ab6a2c8842466d2913582468c48eb2d1ee2a651fb495","sha512":"f1e175f4658e4cb1c603875c81f3b96caaab74346c78d9b320e564f0a09a8518b11123509351bfa5229ac9d867d56c6afc1118ce7c368ff1ce729de877c7d694","ssdeep":"3072:+jY7nFuuslX/Na3u6NxIeLSJhy1yiSS64pOknRBb9Wsr9BbrC3YLrmYRJ:2Yx5U/Na3JpLSJhyJOaRBRtBHzLrmYRJ","tlshash":"e9640932214252359aea82da66514604b3398085f516cfacff2ceddd4c6e9c731fabb4","size":331116,"data":"","first_seen":"2024-12-01T14:07:01.698179Z","last_seen":"2026-04-02T13:28:52.627773Z","times_seen":668,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"93128c282499b9ac18b63d0170ef3d44","sha1":"20a9c22e9546d49fc54c41ecbfa82880934f45f3","sha256":"f58ab76f9bc7003d1eaa68b8ca01bc723da2137cac1536511da193bd3062f86c","sha512":"7275c7fe7ca0a85191389c0c276f16c73ea59858c6af7268cc1c4a306755a35956ac72c4c8a7ba702c386eaa76ef38e871d50f0b18304dfd9ef1c75430a53f85","ssdeep":"","tlshash":"0d9000020c0ac08a003a208f3a0e3b002a02aba080020202bcea0238b8a8003aa08080","size":49,"data":"","first_seen":"2024-05-15T22:21:34Z","last_seen":"2025-11-06T10:54:25.290898Z","times_seen":13778,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/embed/2426vbhxujg1","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4850721277c7d8758ba7c9ec2256469b","sha1":"6ffc7ffe25c8cc9f8b8aeaa0409becfb8bf76e26","sha256":"18e4d0daeea338888efa2cd480b1981e06f9aafd175bda6a119db7009d6c949c","sha512":"30e0892bb77bbd63a705339aa0c64fb29267d661ed2f9f5b5931e4c8a8765928f2146e849d7efc3a334cc2df194aba866075cb57192204ea630c0161f66b3203","ssdeep":"","tlshash":"7290021d55215a70d08205fe6555b0606032110095295b24b5426054244e1428271546","size":53,"data":"","first_seen":"2023-03-29T22:26:00Z","last_seen":"2026-03-14T01:45:00.947957Z","times_seen":389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/embed/2426vbhxujg1","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76cc6a7775b7b653ba5a7d7f9cea4eb4","sha1":"6484c7b286038e9a60c38f4adc61e6ba30062c91","sha256":"a00f1ced7d3bab63e82c08fdb0b05b0e9659805756c15b085c2b9804671302c9","sha512":"38c92e616452c2021d351efc393e49b83c1405721bcab7c63eb809eb040a9cb77d87e2f9bac91373a0853d198f76616ed1759e7024a8b5b0d3d0398da48738db","ssdeep":"","tlshash":"aaa022000300b80280000cccb000c8a820ec330380c20200f223fa0eea38282c03300e","size":60,"data":"","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-04-11T03:47:04.88884Z","times_seen":1031,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5b42ac404bde4320db9b4640f4aaccb4","sha1":"b9c3dc10322e6f208cc1a2ad40cd7fb5bcd86da7","sha256":"76d80524bbaa6e67b7be2a453684d5ada055e75740fd396670ea817cee5024b3","sha512":"3f59c8bded43a452577f6ac1aa8e306710786ebbc14f260c4a2c759c1422707314d8f073328d45a705861a98a205ca9972a1af985816ed8c4efeab5e2fdfc931","ssdeep":"","tlshash":"d051a97f36b47e6f85b232e25debf1cc569c351f34429804b22cfc562b90458229a6db","size":2683,"data":"","first_seen":"2025-10-26T22:48:42.326933Z","last_seen":"2025-10-26T22:48:42.326933Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2ab5a98d2c6e582c731aac3696999df1","sha1":"33028da86affff9a9e1d599af8e2823af06db4d7","sha256":"fef62f3f3236f697650601016956dced3b2d614db693d4aae6318a346cb8477e","sha512":"7b0c638236b0bb50f573d06be590b120d28ae68d9b598ce56b18b4813bafa9abf44c892daeb38665593afbd73840904f61c3e1f7c0fc09aab6b2698b4349d1db","ssdeep":"","tlshash":"3480040530103103115350110003344110314440411371d051330d35d47d1d01541357","size":34,"data":"","first_seen":"2023-03-08T03:36:07Z","last_seen":"2026-03-05T11:10:16.7705Z","times_seen":10377,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e969e6981adb7ab1cb174994a5c8c627","sha1":"5f534a259a6f3754d1d392028fd4cbb344fb6563","sha256":"5cb18f9c0eebf644c0bc27e5224177984121b4c4a3f8189861a6d797a15a2e7a","sha512":"10bbe815bb6e4ade10d00a42a82dd10b668e95e275161cb0a637b2ea95785f8f7fc72b31bb48ac9c1dfad03d811912c0683941a3c09357525f164915d5b033cf","ssdeep":"","tlshash":"a380000a88a8a0222a30a0228c020200202e822080ee208083f2032020c283c022b802","size":30,"data":"","first_seen":"2024-02-12T20:00:22Z","last_seen":"2026-03-06T11:55:01.514986Z","times_seen":20053,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fb440b8133f21c3e5d3e39624e7bda94","sha1":"1b46d8568f9bd8a2be944d6a61924a21ec0b6e4f","sha256":"a5e2bc908c3bd3196d273564d073484f9905d13817490eca5aa249e701139cdc","sha512":"f874692932aab2be754d763a3998c5cd3c654a5bcd78c5d839fe0ba506f9a9e563d3cecba0ca71a6b0db35ff94943f6fa8bb0292f10c1aeb7df2704ea6d85fbf","ssdeep":"","tlshash":"047000000000000820200802220322083822223002cc0002220a083022ea00b80282a0","size":20,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-13T16:26:24.145032Z","times_seen":24301,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intelligenceadx.com/frhkiymmajstmsbfg?vhfnOmes=BQOSAAAAAAAACZUAAp85WvjNvFeQS7dvw19_oZf72Fn3bZSTz9j9O4YaZY_T5sPMxhsQgjwKzhKjkY7BXdtxu7rJHhlpsz3o3h8eDwyZdbmYXzucvm4Pp19HBypc5XZQyIJVGM51fhHpv-6fBrH7zO5oKfgIQbsXDi4IKf2HtE2FnD7aeXuAtrFQ3-EpRPbcK30mLlZwpwLynlGpuLg9DB6o_TlsRkI4Wx1RExyV90PAhX70CxH0ur8bYmAXRd-CrisD4EbVzMJZ2UUbARfFE4iW7oAlSm9-kNZptyhOBFezVtGRZ2TXQYgQYuLzBkh065TaCB-eBzB9FtJeSv6vSuYLwtv92Enb44fmzErVaBF7N-AY31JKcG4rEXRLByH4MqO6hvav5p3ahe7MEHvLbkmTiFeK2mDVvJ5vHA-xWHgqEsXnm7az-YtbZpiHhHdIxoWhbQjJdumQVbQYtOFgiVf47YWLxzp0xA31AX7q__cZfZTbVOGQSfL84DzHklSOgfjR-t9vfp_77d3_tE7AwhlSaZWTaQE8Bg_L3WGX97AB_fpy-gqmJTf8VESQaoBVSJO1zdl-ej_5ln6H_Ciw9TwHqR-sF0ZyFIYQ-qlq_2ERr3NouPDggqwRPdSCqgZuI9DC-C91-uvWuc3icL0vmha4HA3-8440N_Ud95_fYIqGceG9nsEFwTsbrGo17zJNQl6fPckgQ1FIDPVmTn5B0hMOKexL-hkCQ5oVZNKv4xCI_yBDwYJeKMGuTBvrF7kmfV7wXNISUFR9ZnnQYIM3uTo4FyBml91Jq1S-nqfYnLlN30lQd7bm3d_E21k7mc0fRHwNSEZhM1GbOgmDoBHOqaHzBcDbB1JiPuxDY9YBpIlPQZRq3eZsBYVvBzWyohcauB6oWGQagdGC0EWo1kEP-xQxkuwr54Wxm4I6GuucXcjlBYaA_TEC7_yg4dM1j_C-NAK8oX6Lw6LRv3dDcTf_v4_ymt9n_TcAAbCZfx3IwYjj4eRWhI3rEWnDhczhu6UPXF-Lin8JGQcxRPeRZOkRAKZXIPKgj5Te7xnvU4RgHDuy6sYVV6npA2MY5TAZ_Yyhh_1K3UVUI3ULicdDpNy5ODzf8tsrI8mmV-WgnfLztLnsqbGf3R1V7QrmFhRZELt5M68aJPMpiXOR-nUqe9r7YqBDO9DlNr7MaosCfiUvofoVsDe-9NZ_FARrhWx6hJ7qW5WdxTiCVwgEbsyYqQ\u0026EJuaSGKc=4\u0026kXRgmDnz=5249291\u0026MAFSiQgj=\u0026QmdnToHu=0,0\u0026KFNXyPzD=\u0026VIfzuXLN=\u0026synpfWuw=1280,1024,1,1280,1024,0","fqdn":"intelligenceadx.com","domain":"intelligenceadx.com","tld":"com"},"ip":{"addr":"208.95.114.100","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","size":44,"data":"","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-04-16T13:38:50.03215Z","times_seen":23398,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/embed/2426vbhxujg1","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"78bb6e14dc2f3d49e20d7f19f5c97294","sha1":"e0ef665cc802c422ebfafadf98cf1f3ef1fe995d","sha256":"e1c59578a7a9466f42770520f780713f4546f610553082bdb7fe1566c14724bd","sha512":"9770bea3a4e0634a86db624642eabcc144655967dcaa92e8878131b089feab6d78753cf4556ee748cbafc67b27b219397144a9a4e12e07f0c12f2b692da6b140","ssdeep":"192:l70lEhhfyaoOvgEiMrgGT4v6NOi8zurG5eiadqYb1:Jhhfvo2iMRfq1knqs1","tlshash":"af124a3c91474035e9f352acb03f9219b7b61d91f432e17099ce888bb4d5a90d0fb6c6","size":9132,"data":"","first_seen":"2025-10-26T22:48:42.329427Z","last_seen":"2025-10-26T22:48:42.329427Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"javascriptURL","is_inline":false,"md5":"68934a3e9455fa72420237eb05902327","sha1":"7cb6efb98ba5972a9b5090dc2e517fe14d12cb04","sha256":"fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa","sha512":"719fa67eef49c4b2a2b83f0c62bddd88c106aaadb7e21ae057c8802b700e36f81fe3f144812d8b05d66dc663d908b25645e153262cf6d457aa34e684af9e328d","ssdeep":"","tlshash":"aa3000000000000c000000000000000000000000000000000000000030000000000000","size":5,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-16T20:46:57.393134Z","times_seen":68340,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d720eef71edef78b948a643d5712ec07","sha1":"ea5eb334bd6ddb0f04abafb700dc2ecb30070c76","sha256":"2daa1a91b2430e9867296c9cb26d1483785954a9bdd66f79b2c754bab7092cae","sha512":"63368ff1fef849df7f849af23bc2f24698893bd3d58300282427a76665b2d5c94f097d409f93173ad9c36944b4fffc2e37fa03a91f81e4e04f3737f9b73d2d6f","ssdeep":"","tlshash":"5f6000c00000c00c0000ccc3c00300c030000030c0cc3c0003003c3300cf00ccc00033","size":15,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-06T11:55:01.51255Z","times_seen":24260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/js/jquery.min.js","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-16T21:05:18.139708Z","times_seen":450774,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d447ee8e4cf6b692a2e2a1e1efa8a51","sha1":"5f519c56b1e96c6b76ec8c169430bf7850e42363","sha256":"3e961560dcc0c0f2bca4cd88f498125b1d9d4bd84955df17b08b7ff794887946","sha512":"5356de5f79cea082d957bc6154fe7082ca1d40641d8bd7dd30b8353ac043d983720b9ccc9bc7c3046b89690d94da8cb245c42cd4dfd111f4dc118b1ceff27999","ssdeep":"96:uCla4wUEokWKspEbcQ999+up2XaPLZML4cmqSzer:uCla4wxhWKYAbb90ajiSKr","tlshash":"ce9144f9a9fb6171514373a85bbf8145b237402b6707c881b5acd3507f85cb0ca929fa","size":4247,"data":"","first_seen":"2025-10-22T06:32:53.056306Z","last_seen":"2026-04-11T19:43:19.373455Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"902c460afdd3e381e561395b818a5dbf","sha1":"91008cfe46804ec773a2e4f72302086a0a41366b","sha256":"64e360e85164e7675724c7fe1ed681b25a138c51d437bac5ff97e8910ccf2aa7","sha512":"f1cdaa252c9faeb7cafc830b5d755b186e10d090b7b2482e66ff0cba147c8ba570a1751dec8f3cbc4a59e654025753813aa3910f3c0c9ea2a673bec65e485416","ssdeep":"","tlshash":"5670002002002820802e20022202a3002000020008000000820800082220203280828a","size":18,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-13T16:26:24.113388Z","times_seen":17704,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0f4b802b51c4558d3f050b42c3292dbe","sha1":"a99984bbf5e882cd778e5c1d782efd8a5da81857","sha256":"4e26213b997dea9f8c66863fffa3863c9ba4553ad22f02630e66280a508cd477","sha512":"77777c6ed13875ff182abf07621a92beb298e13e4482546156a1c3ee3e7d5f32247cc6b8f52e2bd3695e37c1f0ebc6d52ca7b06fce760c22b92a8bc3a2898120","ssdeep":"","tlshash":"41e02b1890a343bc6713245572d7b394b8a2110b265481527bbf4a7e5f22eda904b98c","size":298,"data":"","first_seen":"2023-09-30T16:39:31Z","last_seen":"2026-04-11T10:46:50.399804Z","times_seen":198,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/js/jquery.cookie.js","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae0c2c5d8f01f7d35bb698bb618a62f7","sha1":"63556a22ddea1c5f23a5cf7d0b6d35c7aab54e20","sha256":"75aef2e95ea7f3a70999396fba0c2ab866f4ff06313cf1b07780d800a5fc1ebc","sha512":"eac94ca9d884692af8bdf12aa6e902a3be4eed0772ad8f2932ac1c3328b83a7351cdf743a409bbc0a3cd385956c08d3203d51c572bb1680489e37330fe27a2bb","ssdeep":"96:L4BZxb64Ng7V8cNwpGylRCsKZcj1JXulL6M/aGByLskPSP4lBCClf1wgCyC:LQnb6eg7DgCsk8fgZJkPSPa+gCyC","tlshash":"2e91fd293a0d231d149353f57aee10c8a930d632216ad46c744cb6b06f00c63ddfbbea","size":4331,"data":"","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-04-16T09:18:21.618052Z","times_seen":4385,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/js/localstorage-slim.js","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba6facacb00551830393d637195804cf","sha1":"77d2d2802ee44767b33a2d679945cc3efa3619cc","sha256":"41bb37c8133d8e5c128820cfbe03bcbf63ce256bcbd60a1a76143472d8668e38","sha512":"90aa07250eb414ec22765ab6922f593ed3186faecc02008f0331c3e3807cace76861e01028142015308341e955f151b609d08b7d354ff2d27e0ff04ebfde81f9","ssdeep":"","tlshash":"ea41118275e1d9904be004e728b0c002e638992e705d62d0f7b7dd827c9909bcfb57fa","size":2064,"data":"","first_seen":"2023-03-07T15:52:27Z","last_seen":"2026-04-16T09:18:21.624022Z","times_seen":1490,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/player/jw8/jwplayer.js?v=6","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"581ff912c413cd78a30f5c212f42271a","sha1":"79af689432d0f20cd1d951eb9436711da07decd4","sha256":"c708d26c24b48c3343e8cc7879d07e8ca6f23d1cc1e5df165a9f8e24a7c5830e","sha512":"c6185ea9db6db8786aa1636537595a5f061745caf287602beafc2dca984b1eceafeb3651109cad8cf45be3dba2a76a201758c6aaa7d7fb1adc8e07e95a39f41b","ssdeep":"1536:ELyl/ByW1iqxGJaGB2lAqU6ePRtwoIWz0Bk+5cm3wUn+yUi3LAalYqlkcRPUeJaQ:L4pknUi3LAbdhHwSm","tlshash":"99e339a631c2f4a613e264c7e47a4005f1790988744de8a4faacecd67956907b1b3ffc","size":148052,"data":"","first_seen":"2025-04-01T21:32:19.723959Z","last_seen":"2026-04-02T13:28:52.626488Z","times_seen":603,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/embed/2426vbhxujg1","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2709a1a5d00f734a76a5d43f2997645f","sha1":"74e4e3989b26b7ee174b9028cae0f9c058197393","sha256":"db79a897bc9a33f80ba5f9e09ad4680472c6fb90e60f666ce56a21549a741c8a","sha512":"634fcaad95b5816e937197f0f880f7e2540d9b57481f84de97e22f38a79505e37b1bc7ccf54def4f1dd1fd575082c5f28b94659414782a9a10a3e4d75a9b41b5","ssdeep":"","tlshash":"313167b63128347c82e6166f7cfb664df06756512d1ed044612ce5607828fb9b6338ce","size":1530,"data":"","first_seen":"2025-07-12T10:21:47.751176Z","last_seen":"2026-04-01T19:35:17.328026Z","times_seen":200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ed2da64ff289b6f32285e35401117bb2","sha1":"888a3bbfc83a0c3252c8c0208c27474c9c7bb4b4","sha256":"a9dc93ae3dc52ac584bff8e382bf1db1f87b8e3a54243eae8d1e3badb180e834","sha512":"bb32fb8d6ff6e5346a4b02481972064ca411f8f1c9e24459d8259df4c17a4ab4587b7efdf6df44d89320f46be1d1b6787afefc65f98e16821d2bbfa3ce195f10","ssdeep":"","tlshash":"f880000a30302802322328228083230280338c20a223b880823a0228ac382a032c2abb","size":29,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-05T11:10:16.763515Z","times_seen":14612,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/js/jquery.cookie.js","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae0c2c5d8f01f7d35bb698bb618a62f7","sha1":"63556a22ddea1c5f23a5cf7d0b6d35c7aab54e20","sha256":"75aef2e95ea7f3a70999396fba0c2ab866f4ff06313cf1b07780d800a5fc1ebc","sha512":"eac94ca9d884692af8bdf12aa6e902a3be4eed0772ad8f2932ac1c3328b83a7351cdf743a409bbc0a3cd385956c08d3203d51c572bb1680489e37330fe27a2bb","ssdeep":"96:L4BZxb64Ng7V8cNwpGylRCsKZcj1JXulL6M/aGByLskPSP4lBCClf1wgCyC:LQnb6eg7DgCsk8fgZJkPSPa+gCyC","tlshash":"2e91fd293a0d231d149353f57aee10c8a930d632216ad46c744cb6b06f00c63ddfbbea","size":4331,"data":"","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-04-16T09:18:21.618052Z","times_seen":4385,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"pixibay.cc/2426vbhxujg1_xt.jpg","fqdn":"pixibay.cc","domain":"pixibay.cc","tld":"cc"},"ip":{"addr":"172.67.207.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fdewsdc.sbs/embed/2426vbhxujg1","date":"2025-10-26T22:48:06.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixibay.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 21:35:53 GMT","end":"Wed, 10 Dec 2025 22:34:09 GMT"},"fingerprint":{"sha1":"E6:A3:9E:B3:AF:60:C0:2D:99:51:CA:AC:FD:48:96:12:C7:E6:68:9B","sha256":"26:FF:91:61:26:88:B9:80:39:5F:76:A7:35:B8:89:8A:DD:69:DA:9B:B8:C3:22:70:70:7E:E7:3E:EE:C3:A7:06"}}},"request":{"raw":"GET /2426vbhxujg1_xt.jpg HTTP/1.1\r\nHost: pixibay.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fdewsdc.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 26 Oct 2025 22:48:07 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P64ghBzH%2F%2FSjWTDTQVA8L3HSyi4q5OPr6VbVW7XD3%2FCtLKelgiX%2FVcgYmeOSVd1KAK%2B2SfTNr5ey5Oxr1naG47lUgxq0fXoW\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\netag: W/\"48b2e2b8-9\"\r\ncontent-encoding: br\r\ncf-ray: 994d7fcfa8db56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":1242,"timings":{"blocked":94,"dns":5,"connect":1,"send":0,"wait":1037,"receive":0,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re:2087/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.17.138.102","port":2087,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:06.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shahid-4u.my\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 22:48:06 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 45\r\ncf-ray: 994d7fcfb84f1a30-OSL\r\naccess-control-allow-origin: https://shahid-4u.my\r\ncache-control: private, max-age=10\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-max-age: 2592000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":2087\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":8,"dns":2,"connect":1,"send":0,"wait":9,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emt1ptwzwg7a.l4.adsco.re/","fqdn":"emt1ptwzwg7a.l4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:06.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.l4.adsco.re","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:14:30 GMT","end":"Sun, 14 Dec 2025 09:14:29 GMT"},"fingerprint":{"sha1":"AA:48:1D:E2:C4:73:88:D6:A0:D5:36:32:2B:EE:2F:67:01:C4:3D:23","sha256":"FC:04:34:8C:BD:15:93:CB:47:29:34:FA:05:BA:8C:F8:AE:96:33:7F:42:F2:72:62:C9:07:CC:D2:57:B3:1D:27"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: emt1ptwzwg7a.l4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shahid-4u.my\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 22:48:06 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Fri, 02 Jun 2023 14:03:32 GMT\r\netag: \"6479f6b4-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":108,"dns":40,"connect":23,"send":0,"wait":23,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intelligenceadx.com/frhkiymmajstmsbfg?vhfnOmes=BQOSAAAAAAAACZUAAp85WvjNvFeQS7dvw19_oZf72Fn3bZSTz9j9O4YaZY_T5sPMxhsQgjwKzhKjkY7BXdtxu7rJHhlpsz3o3h8eDwyZdbmYXzucvm4Pp19HBypc5XZQyIJVGM51fhHpv-6fBrH7zO5oKfgIQbsXDi4IKf2HtE2FnD7aeXuAtrFQ3-EpRPbcK30mLlZwpwLynlGpuLg9DB6o_TlsRkI4Wx1RExyV90PAhX70CxH0ur8bYmAXRd-CrisD4EbVzMJZ2UUbARfFE4iW7oAlSm9-kNZptyhOBFezVtGRZ2TXQYgQYuLzBkh065TaCB-eBzB9FtJeSv6vSuYLwtv92Enb44fmzErVaBF7N-AY31JKcG4rEXRLByH4MqO6hvav5p3ahe7MEHvLbkmTiFeK2mDVvJ5vHA-xWHgqEsXnm7az-YtbZpiHhHdIxoWhbQjJdumQVbQYtOFgiVf47YWLxzp0xA31AX7q__cZfZTbVOGQSfL84DzHklSOgfjR-t9vfp_77d3_tE7AwhlSaZWTaQE8Bg_L3WGX97AB_fpy-gqmJTf8VESQaoBVSJO1zdl-ej_5ln6H_Ciw9TwHqR-sF0ZyFIYQ-qlq_2ERr3NouPDggqwRPdSCqgZuI9DC-C91-uvWuc3icL0vmha4HA3-8440N_Ud95_fYIqGceG9nsEFwTsbrGo17zJNQl6fPckgQ1FIDPVmTn5B0hMOKexL-hkCQ5oVZNKv4xCI_yBDwYJeKMGuTBvrF7kmfV7wXNISUFR9ZnnQYIM3uTo4FyBml91Jq1S-nqfYnLlN30lQd7bm3d_E21k7mc0fRHwNSEZhM1GbOgmDoBHOqaHzBcDbB1JiPuxDY9YBpIlPQZRq3eZsBYVvBzWyohcauB6oWGQagdGC0EWo1kEP-xQxkuwr54Wxm4I6GuucXcjlBYaA_TEC7_yg4dM1j_C-NAK8oX6Lw6LRv3dDcTf_v4_ymt9n_TcAAbCZfx3IwYjj4eRWhI3rEWnDhczhu6UPXF-Lin8JGQcxRPeRZOkRAKZXIPKgj5Te7xnvU4RgHDuy6sYVV6npA2MY5TAZ_Yyhh_1K3UVUI3ULicdDpNy5ODzf8tsrI8mmV-WgnfLztLnsqbGf3R1V7QrmFhRZELt5M68aJPMpiXOR-nUqe9r7YqBDO9DlNr7MaosCfiUvofoVsDe-9NZ_FARrhWx6hJ7qW5WdxTiCVwgEbsyYqQ\u0026EJuaSGKc=4\u0026kXRgmDnz=5249291\u0026MAFSiQgj=\u0026QmdnToHu=0,0\u0026KFNXyPzD=\u0026VIfzuXLN=\u0026synpfWuw=1280,1024,1,1280,1024,0","fqdn":"intelligenceadx.com","domain":"intelligenceadx.com","tld":"com"},"ip":{"addr":"208.95.114.100","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:07.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"intelligenceadx.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 04 Apr 2025 00:00:00 GMT","end":"Tue, 05 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:72:94:6A:70:D1:57:77:77:94:C0:B2:5D:D9:4B:21:50:01:A9:EA","sha256":"D2:95:A2:80:F9:9D:D0:6A:F9:69:A4:1F:1D:36:37:CF:38:B4:C0:2B:39:B3:6F:8D:3A:38:6E:26:C1:01:2E:F8"}}},"request":{"raw":"GET /frhkiymmajstmsbfg?vhfnOmes=BQOSAAAAAAAACZUAAp85WvjNvFeQS7dvw19_oZf72Fn3bZSTz9j9O4YaZY_T5sPMxhsQgjwKzhKjkY7BXdtxu7rJHhlpsz3o3h8eDwyZdbmYXzucvm4Pp19HBypc5XZQyIJVGM51fhHpv-6fBrH7zO5oKfgIQbsXDi4IKf2HtE2FnD7aeXuAtrFQ3-EpRPbcK30mLlZwpwLynlGpuLg9DB6o_TlsRkI4Wx1RExyV90PAhX70CxH0ur8bYmAXRd-CrisD4EbVzMJZ2UUbARfFE4iW7oAlSm9-kNZptyhOBFezVtGRZ2TXQYgQYuLzBkh065TaCB-eBzB9FtJeSv6vSuYLwtv92Enb44fmzErVaBF7N-AY31JKcG4rEXRLByH4MqO6hvav5p3ahe7MEHvLbkmTiFeK2mDVvJ5vHA-xWHgqEsXnm7az-YtbZpiHhHdIxoWhbQjJdumQVbQYtOFgiVf47YWLxzp0xA31AX7q__cZfZTbVOGQSfL84DzHklSOgfjR-t9vfp_77d3_tE7AwhlSaZWTaQE8Bg_L3WGX97AB_fpy-gqmJTf8VESQaoBVSJO1zdl-ej_5ln6H_Ciw9TwHqR-sF0ZyFIYQ-qlq_2ERr3NouPDggqwRPdSCqgZuI9DC-C91-uvWuc3icL0vmha4HA3-8440N_Ud95_fYIqGceG9nsEFwTsbrGo17zJNQl6fPckgQ1FIDPVmTn5B0hMOKexL-hkCQ5oVZNKv4xCI_yBDwYJeKMGuTBvrF7kmfV7wXNISUFR9ZnnQYIM3uTo4FyBml91Jq1S-nqfYnLlN30lQd7bm3d_E21k7mc0fRHwNSEZhM1GbOgmDoBHOqaHzBcDbB1JiPuxDY9YBpIlPQZRq3eZsBYVvBzWyohcauB6oWGQagdGC0EWo1kEP-xQxkuwr54Wxm4I6GuucXcjlBYaA_TEC7_yg4dM1j_C-NAK8oX6Lw6LRv3dDcTf_v4_ymt9n_TcAAbCZfx3IwYjj4eRWhI3rEWnDhczhu6UPXF-Lin8JGQcxRPeRZOkRAKZXIPKgj5Te7xnvU4RgHDuy6sYVV6npA2MY5TAZ_Yyhh_1K3UVUI3ULicdDpNy5ODzf8tsrI8mmV-WgnfLztLnsqbGf3R1V7QrmFhRZELt5M68aJPMpiXOR-nUqe9r7YqBDO9DlNr7MaosCfiUvofoVsDe-9NZ_FARrhWx6hJ7qW5WdxTiCVwgEbsyYqQ\u0026EJuaSGKc=4\u0026kXRgmDnz=5249291\u0026MAFSiQgj=\u0026QmdnToHu=0,0\u0026KFNXyPzD=\u0026VIfzuXLN=\u0026synpfWuw=1280,1024,1,1280,1024,0 HTTP/1.1\r\nHost: intelligenceadx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\npopads-node: wb9\r\naccess-control-allow-origin: *\r\nasf: 9\r\npopads-ec: ASB\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 44\r\ndate: Sun, 26 Oct 2025 22:48:08 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-04-16T13:38:50.03215Z","times_seen":23398,"resource_available":true,"data":null}},"time_used":755,"timings":{"blocked":324,"dns":21,"connect":92,"send":0,"wait":109,"receive":0,"ssl":206},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"intelligenceadx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/bootstrap/css/bootstrap.min.css","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:04.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shahid-4u.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Oct 2025 17:43:52 GMT","end":"Fri, 23 Jan 2026 18:39:03 GMT"},"fingerprint":{"sha1":"72:00:52:7E:0E:E8:3C:1C:CB:F9:11:91:D6:47:93:A0:1F:DE:A4:88","sha256":"6B:0B:94:BF:97:85:78:77:C3:9E:34:62:8D:26:9E:5F:68:EE:21:D5:64:2A:2D:77:E5:3D:B7:67:4C:63:A9:22"}}},"request":{"raw":"GET /bootstrap/css/bootstrap.min.css HTTP/1.1\r\nHost: shahid-4u.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9\r\nCookie: XSRF-TOKEN=eyJpdiI6IktlMlBxOXlKM05mZVF3TTlRVkUyUnc9PSIsInZhbHVlIjoiZHZES0VITXVpRUx0YzVBcEx0RFVuQ1NnaFpuZzNnQXJnZWs5cEltcWRJNGhXY0w4STU0ejRIYkJGeGxCVXNKcytMMzVwd0VCY2x4WmFjVTRUejN1NXhOd2lqQXNGRkNVSnd2TThPNExtME05U0xiN3dMRXowT01LSVQ3QzFUNU4iLCJtYWMiOiI2MWJiMWU3NmI5MTAwYjc2NjU5YWE1NGE1MTBmOTkzMzZkOTU3OTBhMTQxNWQwZjc4MmI0MWY0ZjEyMmM5YWYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InV0SVVqZ1B3VFZDRWZaNnlHOUdLUkE9PSIsInZhbHVlIjoiT1hDaG9TRnVZZC9JMndLbXBqZDcvcEo5Nkxkb3BIQTNOTkZXTnptMHB3cEVkZ01yOXc5bmROcHlUU1AyYmhwaDROVlNTVmhqS2w1VGJRS2hKVXBLdUoydllMY1JSY091UjhxMHA2RUNxYlZTdXdqYWU0a3dyK0lQTngrNS9tNlQiLCJtYWMiOiI1YWVlNjNjMDVjMWQyZjY3MDY4ZGI5ZDFlZjkyNzQ4ZWNjYTQwYjhjNzhjOTE0N2JlZThlOWJmZDAzNGI2YzFmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:04 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nlast-modified: Tue, 30 May 2023 09:02:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 6608\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m6OxCvREtdhNpT%2FEW3YtanWzaDo%2BHccyZLZ0VcYqoahrMxtU3NFmGRhsUAK50LufUZjpFXPJvDhU2%2FX1IKGILrsN%2FHkSPlKRmGMP6A%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 994d7fc4d96835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232914,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"fe7fdfec700d100dc745dc64d3600cb2","sha1":"b231651e0fd68bbd8758189fbd3642c462d34fa6","sha256":"7f1d37f0d90b6385354c2ac10e2bb91563c46bd7a266ed351222ebcac8496c2a","sha512":"b7819649564ed5e0bc04cdf7f5777b529870e6cd7b6bcead219223f2a4718672ae6fa5a8ca19ebc5e08831e02a04f81d646942706d8fad98cc73e5abefcfb95e","ssdeep":"1536:VYutjsbf98fOdBfvO5wlP7Qy9A374298wsY/ElV6V6pz600I41r:ntj898fo298uI6V6pz600I41r","tlshash":"383481d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2023-06-08T14:47:00Z","last_seen":"2026-04-16T20:25:05.005817Z","times_seen":20377,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"shahid-4u.my","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/photos/servers-images/1736277904.webp","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:04.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shahid-4u.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Oct 2025 17:43:52 GMT","end":"Fri, 23 Jan 2026 18:39:03 GMT"},"fingerprint":{"sha1":"72:00:52:7E:0E:E8:3C:1C:CB:F9:11:91:D6:47:93:A0:1F:DE:A4:88","sha256":"6B:0B:94:BF:97:85:78:77:C3:9E:34:62:8D:26:9E:5F:68:EE:21:D5:64:2A:2D:77:E5:3D:B7:67:4C:63:A9:22"}}},"request":{"raw":"GET /photos/servers-images/1736277904.webp HTTP/1.1\r\nHost: shahid-4u.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9\r\nCookie: XSRF-TOKEN=eyJpdiI6IktlMlBxOXlKM05mZVF3TTlRVkUyUnc9PSIsInZhbHVlIjoiZHZES0VITXVpRUx0YzVBcEx0RFVuQ1NnaFpuZzNnQXJnZWs5cEltcWRJNGhXY0w4STU0ejRIYkJGeGxCVXNKcytMMzVwd0VCY2x4WmFjVTRUejN1NXhOd2lqQXNGRkNVSnd2TThPNExtME05U0xiN3dMRXowT01LSVQ3QzFUNU4iLCJtYWMiOiI2MWJiMWU3NmI5MTAwYjc2NjU5YWE1NGE1MTBmOTkzMzZkOTU3OTBhMTQxNWQwZjc4MmI0MWY0ZjEyMmM5YWYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InV0SVVqZ1B3VFZDRWZaNnlHOUdLUkE9PSIsInZhbHVlIjoiT1hDaG9TRnVZZC9JMndLbXBqZDcvcEo5Nkxkb3BIQTNOTkZXTnptMHB3cEVkZ01yOXc5bmROcHlUU1AyYmhwaDROVlNTVmhqS2w1VGJRS2hKVXBLdUoydllMY1JSY091UjhxMHA2RUNxYlZTdXdqYWU0a3dyK0lQTngrNS9tNlQiLCJtYWMiOiI1YWVlNjNjMDVjMWQyZjY3MDY4ZGI5ZDFlZjkyNzQ4ZWNjYTQwYjhjNzhjOTE0N2JlZThlOWJmZDAzNGI2YzFmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2181\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FtxOwuARmhVSJZSzaWyfE1r%2BiPweAZabRJMjoyP%2B3zUy2QlvYYDFPB28qrJgwymr6PRCiEioW64moDqQyEQPMV23J%2F44nNhG%2FI0%2FCQ%3D%3D\"}]}\r\nlast-modified: Tue, 07 Jan 2025 09:25:04 GMT\r\naccept-ranges: bytes\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 994d7fc4e97535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2181,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 161 x 57, 8-bit/color RGBA, non-interlaced","md5":"ca52154d2b76d373310f30574f6cb312","sha1":"7b4987de5366c323dcd851039751c9ba65e51c19","sha256":"d5faa9ec0259a6e46b554cbaffa6e41a5f5e43b1ffe724c185c05c840d3e55c4","sha512":"c0cae9c4c619f5059ef9af6a9796fe66cfd763602b1dad3731d1d3d5c0ce694cd3288b495730d02ad1795abdd84d6690adbc98f9f3a5f2571de8338b8bd5cd4e","ssdeep":"","tlshash":"c3410bdf19e1a28a3a858ec589cc4e2959f932afda9d60131f07a05130e2f7042f21a7","first_seen":"2023-10-30T00:28:27Z","last_seen":"2026-03-14T01:45:00.844815Z","times_seen":22,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"shahid-4u.my","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/stream/WVftWa42qUmFeWvB-wQNQg/hjkrhuihghfvu/1761562085/19092947/master.m3u8","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fdewsdc.sbs/embed/2426vbhxujg1","date":"2025-10-26T22:48:07.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fdewsdc.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 11:23:48 GMT","end":"Sat, 24 Jan 2026 12:22:31 GMT"},"fingerprint":{"sha1":"18:A9:5F:75:6F:5C:6A:DB:A5:C7:E9:9C:D9:5E:EF:55:8A:D4:84:4E","sha256":"83:01:F8:71:CB:8A:5A:24:1C:D7:9C:E8:35:44:50:3E:35:D4:A4:A8:33:0C:3A:4C:47:3A:27:0F:AE:68:6F:6F"}}},"request":{"raw":"HEAD /stream/WVftWa42qUmFeWvB-wQNQg/hjkrhuihghfvu/1761562085/19092947/master.m3u8 HTTP/1.1\r\nHost: fdewsdc.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fdewsdc.sbs/embed/2426vbhxujg1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:07 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FQTuHBv%2BFdNSZ0shVdFQSnTAU1TskrteT2AjktycS5Gqy9szCo60vbfi6Ws8ohOWv%2BxYJ7GAa4Xk36b%2B%2BJ4xqLS1SWmrnFkCWdeU\"}]}\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 994d7fd71d1f0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earnvids.com/upload-data/logo_36.png","fqdn":"earnvids.com","domain":"earnvids.com","tld":"com"},"ip":{"addr":"172.67.165.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fdewsdc.sbs/embed/2426vbhxujg1","date":"2025-10-26T22:48:07.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnvids.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 09:18:00 GMT","end":"Fri, 26 Dec 2025 10:15:24 GMT"},"fingerprint":{"sha1":"DC:85:95:5E:34:57:31:3D:89:1C:DE:F3:E7:A7:5C:21:B5:97:99:75","sha256":"D9:A6:F8:9B:01:8F:D0:2F:8A:D6:84:86:D8:CB:F8:E0:69:77:DA:59:8D:A4:A5:9D:8F:5A:C3:37:0D:2E:BE:EA"}}},"request":{"raw":"GET /upload-data/logo_36.png HTTP/1.1\r\nHost: earnvids.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fdewsdc.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 26 Oct 2025 22:48:07 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 122\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=egNYE%2FOlWvxLiJnwKjUnpiqnLOGzMTSlHcQtg2OI5UhyjFLtEoypAGv466l4%2Bfn3k2CEx8sKOJ8G7xi7IlNivQMyXPuL8Ll%2BhLcSpA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 994d7fd68f17c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":32,"dns":7,"connect":1,"send":0,"wait":8,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/assets/glide/css/glide.core.min.css","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:04.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shahid-4u.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Oct 2025 17:43:52 GMT","end":"Fri, 23 Jan 2026 18:39:03 GMT"},"fingerprint":{"sha1":"72:00:52:7E:0E:E8:3C:1C:CB:F9:11:91:D6:47:93:A0:1F:DE:A4:88","sha256":"6B:0B:94:BF:97:85:78:77:C3:9E:34:62:8D:26:9E:5F:68:EE:21:D5:64:2A:2D:77:E5:3D:B7:67:4C:63:A9:22"}}},"request":{"raw":"GET /assets/glide/css/glide.core.min.css HTTP/1.1\r\nHost: shahid-4u.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9\r\nCookie: XSRF-TOKEN=eyJpdiI6IktlMlBxOXlKM05mZVF3TTlRVkUyUnc9PSIsInZhbHVlIjoiZHZES0VITXVpRUx0YzVBcEx0RFVuQ1NnaFpuZzNnQXJnZWs5cEltcWRJNGhXY0w4STU0ejRIYkJGeGxCVXNKcytMMzVwd0VCY2x4WmFjVTRUejN1NXhOd2lqQXNGRkNVSnd2TThPNExtME05U0xiN3dMRXowT01LSVQ3QzFUNU4iLCJtYWMiOiI2MWJiMWU3NmI5MTAwYjc2NjU5YWE1NGE1MTBmOTkzMzZkOTU3OTBhMTQxNWQwZjc4MmI0MWY0ZjEyMmM5YWYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InV0SVVqZ1B3VFZDRWZaNnlHOUdLUkE9PSIsInZhbHVlIjoiT1hDaG9TRnVZZC9JMndLbXBqZDcvcEo5Nkxkb3BIQTNOTkZXTnptMHB3cEVkZ01yOXc5bmROcHlUU1AyYmhwaDROVlNTVmhqS2w1VGJRS2hKVXBLdUoydllMY1JSY091UjhxMHA2RUNxYlZTdXdqYWU0a3dyK0lQTngrNS9tNlQiLCJtYWMiOiI1YWVlNjNjMDVjMWQyZjY3MDY4ZGI5ZDFlZjkyNzQ4ZWNjYTQwYjhjNzhjOTE0N2JlZThlOWJmZDAzNGI2YzFmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:04 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nlast-modified: Wed, 12 Jul 2023 17:49:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 6608\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xVDmHtlbOD94w755wE13fRwMK7u05QvMnwj4R8RXk9NtrmGoEuZtg%2BippnITssNSFDbdCszIGpXmkbWryTwh3iwRmGyXSSzITNpFUA%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 994d7fc4d96a35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":843,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (842)","md5":"42a8a9ffb55a7eba68c6b97c027b6453","sha1":"e6e9a9765865ff93386efc309df56b5eaac8e103","sha256":"6e6765981015a3543a5d5d9c1e2c9a06e05f7bd2a0610842adf426a11abcf928","sha512":"b582aa3bbf07de64510876bbe5f9acd6006f1a500dcf42718cde9f56b301bd62febce3b2db4d27a7027af4e065f5712c4eedf2554bd936b75614822b21ff052e","ssdeep":"","tlshash":"a001af36455622248526fa3319a1f1cc6596f2538e3387cabbf9d120864bd5d0a239ee","first_seen":"2023-05-02T09:55:32Z","last_seen":"2026-04-16T17:39:14.977873Z","times_seen":1066,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"shahid-4u.my","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/photos/imgs/bg.png","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:04.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shahid-4u.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Oct 2025 17:43:52 GMT","end":"Fri, 23 Jan 2026 18:39:03 GMT"},"fingerprint":{"sha1":"72:00:52:7E:0E:E8:3C:1C:CB:F9:11:91:D6:47:93:A0:1F:DE:A4:88","sha256":"6B:0B:94:BF:97:85:78:77:C3:9E:34:62:8D:26:9E:5F:68:EE:21:D5:64:2A:2D:77:E5:3D:B7:67:4C:63:A9:22"}}},"request":{"raw":"GET /photos/imgs/bg.png HTTP/1.1\r\nHost: shahid-4u.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/assets/main_style.css?v=6\r\nCookie: XSRF-TOKEN=eyJpdiI6IktlMlBxOXlKM05mZVF3TTlRVkUyUnc9PSIsInZhbHVlIjoiZHZES0VITXVpRUx0YzVBcEx0RFVuQ1NnaFpuZzNnQXJnZWs5cEltcWRJNGhXY0w4STU0ejRIYkJGeGxCVXNKcytMMzVwd0VCY2x4WmFjVTRUejN1NXhOd2lqQXNGRkNVSnd2TThPNExtME05U0xiN3dMRXowT01LSVQ3QzFUNU4iLCJtYWMiOiI2MWJiMWU3NmI5MTAwYjc2NjU5YWE1NGE1MTBmOTkzMzZkOTU3OTBhMTQxNWQwZjc4MmI0MWY0ZjEyMmM5YWYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InV0SVVqZ1B3VFZDRWZaNnlHOUdLUkE9PSIsInZhbHVlIjoiT1hDaG9TRnVZZC9JMndLbXBqZDcvcEo5Nkxkb3BIQTNOTkZXTnptMHB3cEVkZ01yOXc5bmROcHlUU1AyYmhwaDROVlNTVmhqS2w1VGJRS2hKVXBLdUoydllMY1JSY091UjhxMHA2RUNxYlZTdXdqYWU0a3dyK0lQTngrNS9tNlQiLCJtYWMiOiI1YWVlNjNjMDVjMWQyZjY3MDY4ZGI5ZDFlZjkyNzQ4ZWNjYTQwYjhjNzhjOTE0N2JlZThlOWJmZDAzNGI2YzFmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 627300\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mjpN5FL4g%2Fzm9OGEa41UJVcdSkHXzD%2Fa7qKb6yKt4vuymm8jRyaPFgnYZg4KsgH3vf2RlAVdmfTCzFY8F1v4zs1%2Fyb38Bjdq9ix5ng%3D%3D\"}]}\r\nlast-modified: Mon, 10 Jul 2023 17:02:52 GMT\r\naccept-ranges: bytes\r\nage: 4304\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 994d7fc5c9a935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":627300,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1598 x 2272, 8-bit colormap, non-interlaced","md5":"fdc1ba13fee12e75a2a63d7b95542a50","sha1":"7b25a7cc73387bc1695f5e80998e3421608ae6eb","sha256":"2dffbf0d03a8f8dec2cf49aa46db2644261e9a0c74b68e6528be7c23a8a5d043","sha512":"873d5b5ea6cf3701ba24a9659de164fe67c04c28079d7069708686bf26b9ca2bf1eedf2a72c06358a807d4dcdd42f14f061af4b2b74ff8aef23a9189a88aedd2","ssdeep":"12288:40AMmR8MOYZkY4wRlFIMjuG1NWWJrZR16EWcUvWCKXvBwVPN6Y6e8OzWGnG4YW:45eMduY4YLoWhZD62lvB8N6Y6ejzWGGW","tlshash":"4dd423e48a11db36f66fe00968d9ae9f3778f1d4894c6c10264f450c58edf0b72ae278","first_seen":"2023-05-22T01:59:42Z","last_seen":"2026-03-17T16:33:01.949096Z","times_seen":180,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"shahid-4u.my","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:05.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 22:48:05 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18752\r\ncf-ray: 994d7fc79f8d5ebd-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"6421d693-4940\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 419358\r\nexpires: Fri, 16 Oct 2026 22:48:05 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=YlUxzWwaHb4Q35i%2FvpLqaA2Yiv1GTwIOsdJFOCiEGcclmMy8BLh%2B%2Bqz1fRb65Jn8hAIF1ORj24Lu%2Fz3mRUenWr4SUyWSCaStmHTIK0HyG95aqMR63GMWHNP3gKk7J%2FY9L%2FCsHpct\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102025,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"ded1c367363e8b20bdc6a19b8350a737","sha1":"8c06d82739d14b094ff6d9036021a252bd1d985d","sha256":"1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf","sha512":"89e71d2e66ac925ec2564aa45cd43f647fd72e5bd664e2728fb632eed71e9e6a43d72a404a8ce9993fc4d223ed985201e3a66676d01cf5e341bc7d07fd9a6207","ssdeep":"1536:OwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuZprfZCl:S709gMGFiyPGuZpfZCl","tlshash":"2ea3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-06T15:05:25Z","last_seen":"2026-04-16T21:10:51.721379Z","times_seen":44172,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":39,"dns":2,"connect":1,"send":0,"wait":18,"receive":2,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:05.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shahid-4u.my\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 26 Oct 2025 22:48:05 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 150124\r\ncf-ray: 994d7fc8bdfc712a-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"6421d693-24a6c\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 82515\r\nexpires: Fri, 16 Oct 2026 22:48:05 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=oUpVFJglSA5SGKuV55zjW6zbzCizxPQimY5Mlog4QuJH2eQ%2FMFzMbvYnUmBem4KWiwcQF2gkij0ANNNlwdptThTHDRwEPX%2FezWUGKxK%2BHwyycGTX71sUDJIjb%2B9409mg3gT1bFKA\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150124,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 150124, version 772.256","md5":"c64278386c2bbb5e293e11b94ca2f6d1","sha1":"6b99aa650bd12a36caa14e0127435d8f4cd3ba73","sha256":"7152a6933ee3d690ec2af3d09da9d701723d16aa3410a6d80f28ff8866f3b880","sha512":"0ccdc1515510d902c0b4a48b863c48bad86e1f766b1f9c890a64e28d91ee7c6d488241c531fc094d15b29c211da71e092587a987e24ee8e67ef8ea99c284e821","ssdeep":"3072:7sCbk7w0ZXdkN6iMjif3Lr7x7wAtf+D7gDk1feXDLnurWHqrNIuv5n0:7sCbkFZXdC7MaLr9w2mIY1feXXurWyNW","tlshash":"28e3123cf2c6d486735f5aeadb79636894fd0a2e74ecc67d26b982112048f828174d1d","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-04-16T20:18:36.223776Z","times_seen":32441,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/js/jquery.min.js","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fdewsdc.sbs/embed/2426vbhxujg1","date":"2025-10-26T22:48:06.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fdewsdc.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 11:23:48 GMT","end":"Sat, 24 Jan 2026 12:22:31 GMT"},"fingerprint":{"sha1":"18:A9:5F:75:6F:5C:6A:DB:A5:C7:E9:9C:D9:5E:EF:55:8A:D4:84:4E","sha256":"83:01:F8:71:CB:8A:5A:24:1C:D7:9C:E8:35:44:50:3E:35:D4:A4:A8:33:0C:3A:4C:47:3A:27:0F:AE:68:6F:6F"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: fdewsdc.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fdewsdc.sbs/embed/2426vbhxujg1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 02 Mar 2021 21:27:20 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q1%2BCWEvwEb56V6nlWZJGNIOr6xOLxmMBFA9upNr6tTRWMxpkvIR4OJsx1Fjm05XJ0bAuZ81Iz2mfnxvveveHGQWx2k5nIafFP91A\"}]}\r\netag: W/\"603eadb8-15d9d\"\r\nexpires: Sun, 02 Nov 2025 22:48:06 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 994d7fd0bc6d0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-16T21:05:18.139708Z","times_seen":450774,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/photos/servers-images/1699028740.webp","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:04.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shahid-4u.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Oct 2025 17:43:52 GMT","end":"Fri, 23 Jan 2026 18:39:03 GMT"},"fingerprint":{"sha1":"72:00:52:7E:0E:E8:3C:1C:CB:F9:11:91:D6:47:93:A0:1F:DE:A4:88","sha256":"6B:0B:94:BF:97:85:78:77:C3:9E:34:62:8D:26:9E:5F:68:EE:21:D5:64:2A:2D:77:E5:3D:B7:67:4C:63:A9:22"}}},"request":{"raw":"GET /photos/servers-images/1699028740.webp HTTP/1.1\r\nHost: shahid-4u.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9\r\nCookie: XSRF-TOKEN=eyJpdiI6IktlMlBxOXlKM05mZVF3TTlRVkUyUnc9PSIsInZhbHVlIjoiZHZES0VITXVpRUx0YzVBcEx0RFVuQ1NnaFpuZzNnQXJnZWs5cEltcWRJNGhXY0w4STU0ejRIYkJGeGxCVXNKcytMMzVwd0VCY2x4WmFjVTRUejN1NXhOd2lqQXNGRkNVSnd2TThPNExtME05U0xiN3dMRXowT01LSVQ3QzFUNU4iLCJtYWMiOiI2MWJiMWU3NmI5MTAwYjc2NjU5YWE1NGE1MTBmOTkzMzZkOTU3OTBhMTQxNWQwZjc4MmI0MWY0ZjEyMmM5YWYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InV0SVVqZ1B3VFZDRWZaNnlHOUdLUkE9PSIsInZhbHVlIjoiT1hDaG9TRnVZZC9JMndLbXBqZDcvcEo5Nkxkb3BIQTNOTkZXTnptMHB3cEVkZ01yOXc5bmROcHlUU1AyYmhwaDROVlNTVmhqS2w1VGJRS2hKVXBLdUoydllMY1JSY091UjhxMHA2RUNxYlZTdXdqYWU0a3dyK0lQTngrNS9tNlQiLCJtYWMiOiI1YWVlNjNjMDVjMWQyZjY3MDY4ZGI5ZDFlZjkyNzQ4ZWNjYTQwYjhjNzhjOTE0N2JlZThlOWJmZDAzNGI2YzFmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5108\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wos8b2h%2FLUCj5ZfWeisdtx4TiMvDSWN8vPP2hGQ4f8apgK7g1KdSqrYhRloh27%2FjRHWKoaZWRPJtS0l6I7JHZ0MjhFD3YCSS17%2Fadg%3D%3D\"}]}\r\nlast-modified: Fri, 03 Nov 2023 07:25:40 GMT\r\naccept-ranges: bytes\r\nage: 2618\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 994d7fc4e97435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5108,"size_decoded":0,"mime_type":"image/webp","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 298x251, components 3","md5":"6168c5839268e675ca72c974423a2d63","sha1":"9b3246f1029c0ebab2f22a34a7815300d061c6f7","sha256":"feaed8eb6f58570ed7059e9e544de51d9f48640487c6dbf23cc41b01c09552d6","sha512":"d53ee73cca32b000fb216e59ee2872bd7758eaad30a60107a520e0e6ed29bd0bd2671986805346c830ca6878ee7f60b0dcb0e15f761031b17571729f1e9fc9a7","ssdeep":"96:qbWZkn9AVvQO1BcSid0uTFv0qsWgUv+yHCH1LfIYUm3Dl7rdtGbjKLD5lLkEMj:kn9+oOdidPtspM+yiVjIYRlXDy2LD5lO","tlshash":"a0b18e6db13a1b69c4e961b2cab613cd5acbdb423705d56e01fac8a3843d1c8c34d172","first_seen":"2024-05-26T20:08:47Z","last_seen":"2026-01-11T21:19:31.167085Z","times_seen":16,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"shahid-4u.my","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/ad?type=18869649","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fdewsdc.sbs/embed/2426vbhxujg1","date":"2025-10-26T22:48:06.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fdewsdc.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 11:23:48 GMT","end":"Sat, 24 Jan 2026 12:22:31 GMT"},"fingerprint":{"sha1":"18:A9:5F:75:6F:5C:6A:DB:A5:C7:E9:9C:D9:5E:EF:55:8A:D4:84:4E","sha256":"83:01:F8:71:CB:8A:5A:24:1C:D7:9C:E8:35:44:50:3E:35:D4:A4:A8:33:0C:3A:4C:47:3A:27:0F:AE:68:6F:6F"}}},"request":{"raw":"GET /ad?type=18869649 HTTP/1.1\r\nHost: fdewsdc.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fdewsdc.sbs/embed/2426vbhxujg1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xR5E7gQXtBogFjKjMw8CE4PFCV0%2FwvsNfC8w4JAydNC7aH6VB7OUFo9ZtwaU682FV3U3W%2Bdq%2BCI9DW9BXoqafEe%2FUVkPfpXANy5U\"}]}\r\nlast-modified: Sat, 22 Feb 2025 04:47:09 GMT\r\netag: W/\"101f-62eb3ccbaf1b9\"\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 994d7fcefc320731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4127,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4127), with no line terminators","md5":"6374a71794fb1b28a620e89fb3453bae","sha1":"ff2b29384e980be738e9e1affd60c6f0e5606cca","sha256":"32f12bce51e57ec5c4f423f5f01b81e40c96c6449ec90abaff1430d82a3994bf","sha512":"4d8da9b65bd0b6bc5ef22f1e6722c65af615d3b2003ad34f55e0396a62bf69fed40bbae2922b8d36189dd5e000a24b246915e29392ff84144422e6485a0a3e41","ssdeep":"96:vmiVe9hBjHujaKvsUSgtZix6G9yhAWfnb4JG0681v8:vmMChBjHCsgtZixpohdfbwG0681v8","tlshash":"ce8110c466d168c00347a676373ab1eaf82b9dac39c47c59f5417c90f692c20e6e597c","first_seen":"2025-02-26T03:12:32.193263Z","last_seen":"2026-04-01T19:35:17.266136Z","times_seen":293,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/assets/jquery/ev1.js?type=main\u0026u=36\u0026v=2.0","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fdewsdc.sbs/embed/2426vbhxujg1","date":"2025-10-26T22:48:06.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fdewsdc.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 11:23:48 GMT","end":"Sat, 24 Jan 2026 12:22:31 GMT"},"fingerprint":{"sha1":"18:A9:5F:75:6F:5C:6A:DB:A5:C7:E9:9C:D9:5E:EF:55:8A:D4:84:4E","sha256":"83:01:F8:71:CB:8A:5A:24:1C:D7:9C:E8:35:44:50:3E:35:D4:A4:A8:33:0C:3A:4C:47:3A:27:0F:AE:68:6F:6F"}}},"request":{"raw":"GET /assets/jquery/ev1.js?type=main\u0026u=36\u0026v=2.0 HTTP/1.1\r\nHost: fdewsdc.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fdewsdc.sbs/embed/2426vbhxujg1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:06 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M4MfWjSIVb6b2tzjK7yn18l%2BKWkKem%2BuEGSzSTPemUb9p6X00pTUpDGX8pud8BliIdSEYqjoDjZZpwBLgPo7Ia8AhuXWw6fcYNab\"}]}\r\nset-cookie: lang=1; HttpOnly; Path=/; Domain=fdewsdc.sbs\r\nexpires: Sat, 25 Oct 2025 22:48:06 GMT\r\nx-frame-options: DENY\r\nvary: accept-encoding\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 994d7fcf0c330731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6841,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"01670c853835417bf26efbe9afc6f337","sha1":"00bc1f1a0b943c8aef0d096364218b300a9a317f","sha256":"b4ab1045a2d97e700e88c894ab02ceccf1ad3e61e0b9f00211e70abc49b0ac9b","sha512":"eeae005bb6956801ba4039cabf8795e96985612c646ae7b3394a7627b919c765c070e5d51639c6186bb7fd7e7db27eb6e096f060a64fd8a85812a3d6c0360c7f","ssdeep":"192:K71nI6C8/ZayQDCO/WayUFCh/VnayUDCc/MayQB8u+0CZh:KpnAspSe1VrMGh","tlshash":"e4e1ab9d5ef3006d9067b56abf2fa12470749027050aee1a7c4c62d85f84cba3976fbc","first_seen":"2025-09-19T10:51:40.885767Z","last_seen":"2025-11-15T19:23:31.230483Z","times_seen":12,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.17.138.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:06.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shahid-4u.my\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 22:48:06 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 45\r\ncf-ray: 994d7fcfbaad8be6-OSL\r\naccess-control-allow-origin: https://shahid-4u.my\r\ncache-control: private, max-age=10\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-max-age: 2592000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":13,"dns":4,"connect":1,"send":0,"wait":10,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emt1ptwzwg7a.s4.adsco.re/","fqdn":"emt1ptwzwg7a.s4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:06.353Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: emt1ptwzwg7a.s4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shahid-4u.my\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":448,"timings":{"blocked":0,"dns":193,"connect":253,"send":0,"wait":0,"receive":0,"ssl":-1},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.intelligenceadx.com/ANHcps/j/jxss.min.js","fqdn":"www.intelligenceadx.com","domain":"intelligenceadx.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:04.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1868349309.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Sep 2025 12:34:52 GMT","end":"Tue, 02 Dec 2025 12:34:51 GMT"},"fingerprint":{"sha1":"B8:E1:0E:75:91:D4:84:92:61:5D:99:08:1C:A5:DD:16:40:46:38:1A","sha256":"D3:DE:33:1A:48:7D:BF:5B:57:03:D4:CA:64:55:89:B3:0F:DD:AD:FD:3C:02:6D:91:61:DE:41:2C:6B:56:E6:18"}}},"request":{"raw":"GET /ANHcps/j/jxss.min.js HTTP/1.1\r\nHost: www.intelligenceadx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shahid-4u.my\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 22:48:04 GMT\r\ncontent-type: application/x-javascript\r\npopads-node: wb1\r\nexpires: Sat, 01 Nov 2025 19:21:37 GMT\r\naccess-control-allow-origin: https://shahid-4u.my\r\nlink: \u003chttps://intelligenceadx.com/\u003e;rel=preconnect\r\ncache-control: public, max-age=604800\r\nx-77-nzt: EwwBX63NDQH3CmwBAAwBuUwKEwH31xUAAAwBJRPCLgG3AgAAAA\r\nx-77-nzt-ray: 2a494a15731458a349a5fe6854f2b031\r\nx-77-cache: HIT\r\nx-77-age: 93194\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":41946,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1568)","md5":"004f148533aeb7c580163e2b36f9f345","sha1":"0c3e6833a697b8e5ff25b7423b9a4d794146b21a","sha256":"c32dbd81e7c830bee8470a8faedb76cb441db739de6006e05aa174e456117eb8","sha512":"27352c105df55ed7c1c3fad8c3821fa5a5448506a0867bef47f258e0c5ce699708ab4b22ab8f0d8aad6ecd4bc4c9a5fedd92a72db9aacdee6e2876d88358cfc8","ssdeep":"768:bt9rqAYKKeZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigCAJCntlqoDX:bbVZzFQ9JsTgZvfzmMzhYrTscpMZZ","tlshash":"40132aaab286282601e741ba513eb316b23305167812d458fcb9cdf96e3ddc6117b7fc","first_seen":"2025-10-25T22:35:10.908061Z","last_seen":"2025-10-26T22:48:42.281054Z","times_seen":3,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":69,"dns":34,"connect":6,"send":0,"wait":8,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"www.intelligenceadx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emt1ptwzwg7a.n4.adsco.re/","fqdn":"emt1ptwzwg7a.n4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:06.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.n4.adsco.re","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:14:20 GMT","end":"Sun, 14 Dec 2025 09:14:19 GMT"},"fingerprint":{"sha1":"E1:1C:75:CB:71:36:CE:62:CC:D3:97:20:A3:3E:A2:FA:DB:E6:BA:53","sha256":"71:DD:71:4E:B6:1B:9E:7A:90:D9:9D:D2:2D:76:D2:D4:30:96:42:27:B9:D5:71:B1:13:B4:4E:91:D6:27:1A:8F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: emt1ptwzwg7a.n4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shahid-4u.my\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":768,"timings":{"blocked":376,"dns":122,"connect":88,"send":0,"wait":0,"receive":0,"ssl":179},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/stream/WVftWa42qUmFeWvB-wQNQg/hjkrhuihghfvu/1761562085/19092947/index-f1-v1-a1.m3u8","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fdewsdc.sbs/embed/2426vbhxujg1","date":"2025-10-26T22:48:07.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fdewsdc.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 11:23:48 GMT","end":"Sat, 24 Jan 2026 12:22:31 GMT"},"fingerprint":{"sha1":"18:A9:5F:75:6F:5C:6A:DB:A5:C7:E9:9C:D9:5E:EF:55:8A:D4:84:4E","sha256":"83:01:F8:71:CB:8A:5A:24:1C:D7:9C:E8:35:44:50:3E:35:D4:A4:A8:33:0C:3A:4C:47:3A:27:0F:AE:68:6F:6F"}}},"request":{"raw":"GET /stream/WVftWa42qUmFeWvB-wQNQg/hjkrhuihghfvu/1761562085/19092947/index-f1-v1-a1.m3u8 HTTP/1.1\r\nHost: fdewsdc.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fdewsdc.sbs/embed/2426vbhxujg1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:07 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s1BjbZE1DH7U8B8nEKs6pH1QWHFHHl%2FwGk1j5INU4F9RQMFDlbOnIx8Vqah%2F%2BPBoxR6WsJbk4oxCn%2F6QUUyV84sFaAw%2BvbxgxnKW\"}]}\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncf-ray: 994d7fd7cd2d0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89218,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"2cb7d2385c36e8f58d41d6ddb6897122","sha1":"75cc44936720ed39585662f62753f382d45a3a24","sha256":"1c93cc824386d5ca5e34f23fb1be767b390c6ee486c47b0b31a1dcecdf9ca9bf","sha512":"de655b5c58f1cf7f8699f8fc6b41b53a135ca739574f3524665a67e1f9c9afb386af1e8da0cb7687d89155fa4e3a702a0d78c736a3da52fb884f46da38274551","ssdeep":"384:mOVBxg7Ahzrzc23tGIdhgpPolApu6g5UqdvdSi6/cQYYeZNflNHBH:mqBS7Ahzr7FdoPowJqZdSi6Ur9flj","tlshash":"af93a89bee42b29c29dc0c44b770b6a85561fbfefcf057cca590a1f92ca0d9b991041d","first_seen":"2025-10-26T22:48:42.282052Z","last_seen":"2025-10-26T22:48:42.282052Z","times_seen":1,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":98,"receive":185,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/photos/servers-images/1740455274.webp","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:04.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shahid-4u.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Oct 2025 17:43:52 GMT","end":"Fri, 23 Jan 2026 18:39:03 GMT"},"fingerprint":{"sha1":"72:00:52:7E:0E:E8:3C:1C:CB:F9:11:91:D6:47:93:A0:1F:DE:A4:88","sha256":"6B:0B:94:BF:97:85:78:77:C3:9E:34:62:8D:26:9E:5F:68:EE:21:D5:64:2A:2D:77:E5:3D:B7:67:4C:63:A9:22"}}},"request":{"raw":"GET /photos/servers-images/1740455274.webp HTTP/1.1\r\nHost: shahid-4u.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9\r\nCookie: XSRF-TOKEN=eyJpdiI6IktlMlBxOXlKM05mZVF3TTlRVkUyUnc9PSIsInZhbHVlIjoiZHZES0VITXVpRUx0YzVBcEx0RFVuQ1NnaFpuZzNnQXJnZWs5cEltcWRJNGhXY0w4STU0ejRIYkJGeGxCVXNKcytMMzVwd0VCY2x4WmFjVTRUejN1NXhOd2lqQXNGRkNVSnd2TThPNExtME05U0xiN3dMRXowT01LSVQ3QzFUNU4iLCJtYWMiOiI2MWJiMWU3NmI5MTAwYjc2NjU5YWE1NGE1MTBmOTkzMzZkOTU3OTBhMTQxNWQwZjc4MmI0MWY0ZjEyMmM5YWYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InV0SVVqZ1B3VFZDRWZaNnlHOUdLUkE9PSIsInZhbHVlIjoiT1hDaG9TRnVZZC9JMndLbXBqZDcvcEo5Nkxkb3BIQTNOTkZXTnptMHB3cEVkZ01yOXc5bmROcHlUU1AyYmhwaDROVlNTVmhqS2w1VGJRS2hKVXBLdUoydllMY1JSY091UjhxMHA2RUNxYlZTdXdqYWU0a3dyK0lQTngrNS9tNlQiLCJtYWMiOiI1YWVlNjNjMDVjMWQyZjY3MDY4ZGI5ZDFlZjkyNzQ4ZWNjYTQwYjhjNzhjOTE0N2JlZThlOWJmZDAzNGI2YzFmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7615\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mh%2Bavu5Ky0A5vXVCubOiyseG%2F7CDeZ9GJZNX1NwmVZJHv2iGrQsNznmp3B55LdOt30Pv7vjqRCunGB0yMiM5AQUNiyDLTaV3lwFWcA%3D%3D\"}]}\r\nlast-modified: Mon, 24 Feb 2025 17:47:54 GMT\r\naccept-ranges: bytes\r\nage: 1257\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 994d7fc4e96f35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7615,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"00cf59d655cde17bec8b6a050339fa1e","sha1":"b74992ed4498113eea868c332f64081a67e7a129","sha256":"ef8198df2664972fa356b22fd809fc30fd5d26732de6b4e25148946e1d8964e3","sha512":"42d7737c10f9131b79384cf4df81763024dc3c333a21249a7db65529c964374e5099fa8a5414aa4abc4c4af2cb205a97ce3f31de8ac0f8000d7b189e43bf334a","ssdeep":"192:Q13JcXS/0/77LnewR4LyJf9O/YLxbm5nio1:0aAlq4Yf9pxs7","tlshash":"9cf19fd6d3fd9080e0fb6a61837c2640fd98152c07101e3a787bac26722b9d99762f79","first_seen":"2025-04-11T23:00:29.351331Z","last_seen":"2026-03-10T07:50:05.166118Z","times_seen":11,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"shahid-4u.my","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-brands-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:05.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shahid-4u.my\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 26 Oct 2025 22:48:05 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 108020\r\ncf-ray: 994d7fc8bdfb712a-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"6421d693-1a5f4\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 411298\r\nexpires: Fri, 16 Oct 2026 22:48:05 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=u17lzvOB4erFzvRNr6g38rAoKc6maEXivA%2BsHN62NIajrAnXial8PkeeHwR%2B2cFiq8GjdWtkjocY3G9%2BYh1k6S3u5Oo7YoxWhhbcfHfxkS4sjUysXGKM%2FH5aEHoiQVFl64igyueI\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108020,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 108020, version 772.256","md5":"8b0ddedbb27cbc9971c8667caa8a0cc1","sha1":"4350f9ba93384634faf35f41c503c99c767f1069","sha256":"748332090c4b8e20f95d0ff59f0be20fa9c889359d3b36d4b886d73376054207","sha512":"d3b4791b988fcfd9911a2158163d0c44d6797650890b5d4ac769417e09d8fc2c67edc595be8e7927de0519a85eeb3577d0c7e385bdc99d762c7a6cfbad021b39","ssdeep":"3072:MUdDCdwgz0kLytDzAUhcJz8zfleLXsg4OEpUtbeONfQfG:1d+dNBBh8zflIWGP9Qe","tlshash":"8db312128031ef76fd4aa621de6b1807b03da30b67f249a9ded46a37c050997b471b4f","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-04-16T19:26:41.951553Z","times_seen":16413,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":15,"dns":1,"connect":0,"send":0,"wait":12,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/css/main.css","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fdewsdc.sbs/embed/2426vbhxujg1","date":"2025-10-26T22:48:06.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fdewsdc.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 11:23:48 GMT","end":"Sat, 24 Jan 2026 12:22:31 GMT"},"fingerprint":{"sha1":"18:A9:5F:75:6F:5C:6A:DB:A5:C7:E9:9C:D9:5E:EF:55:8A:D4:84:4E","sha256":"83:01:F8:71:CB:8A:5A:24:1C:D7:9C:E8:35:44:50:3E:35:D4:A4:A8:33:0C:3A:4C:47:3A:27:0F:AE:68:6F:6F"}}},"request":{"raw":"GET /css/main.css HTTP/1.1\r\nHost: fdewsdc.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fdewsdc.sbs/embed/2426vbhxujg1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 12 Nov 2022 12:05:52 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z7CS1kCvpTKd3zNJ2VjnhJdCFUrtNUklyiBCKUXibOh47DQWwNlXOkE2A9Q%2BK2RhuEuE2WqsyFvS5PAGDiRG579iM83rMHYQrG2O\"}]}\r\netag: W/\"636f8c20-c11b\"\r\nexpires: Sun, 02 Nov 2025 22:48:06 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 994d7fceec220731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49435,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text","md5":"51d559d2f974e61e564a5f8120a23a9a","sha1":"9eab84e6bf40cfca88aac7f6d849df54f27ac12d","sha256":"a01ef8569a9021b0315bf38d5d518a928d98efce576f56ac012c30f2b63e1cb6","sha512":"5a4a10a2083c3375306ea83736eb2f991cca894dd2f78582c18886609ba1ac725877abdee3ecbcb368d5bb3c57fe0b418e3d0a87bcca015d0fb8de5f51e8fdc8","ssdeep":"1536:AQV8FxnYgpery2vYsRwq9AOOGvC4DONaYi3Rz:AQVMxnYTy2v/AOOkdRz","tlshash":"c8239522a7812c0cf06bd1b67d6197d6233e4053d92b1f7c7ab93578c28e4e85173b9a","first_seen":"2023-04-09T22:09:53Z","last_seen":"2026-04-01T19:35:17.258141Z","times_seen":632,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Tajawal:wght@200;300;400;500;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:04.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:12 GMT","end":"Wed, 24 Dec 2025 14:34:11 GMT"},"fingerprint":{"sha1":"A8:1F:72:36:24:F2:F6:E0:7B:67:5F:39:3B:77:D6:8D:FC:AA:91:DF","sha256":"C0:8F:C7:95:96:3C:18:D4:60:5F:92:EC:FE:5D:AB:58:62:6D:05:D5:A1:3F:B1:EC:B0:88:5F:E3:9E:21:52:BF"}}},"request":{"raw":"GET /css2?family=Tajawal:wght@200;300;400;500;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 26 Oct 2025 22:48:04 GMT\r\ndate: Sun, 26 Oct 2025 22:48:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8952,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"a71338b7baa4a1dfbd8d8f9d87c0bf2d","sha1":"6b4c3988dcfcdabe0783d64225dd9c7e2abc3981","sha256":"9c439d61dd3f66e7b6a5c1536f8021a024783ad9c8e772f102c189b179bc5cad","sha512":"afda614b67b22dd5c3cc2c49a6ecb2df18983bd1f1b98bf556582e8bf17058566df81da74c3ea70924e15e24e299207cb3d705f5e0dd28788c2382988100541f","ssdeep":"192:2mClAqYCln97ClOqwClNc0dClrdsClCuLClxD:ylNl0lXl4lHlYl9","tlshash":"09029ee4881e02c5bb471d81638d6a27dd4ee1a920c4886cdafd578b9c9bd25766078c","first_seen":"2025-09-09T12:45:33.136646Z","last_seen":"2026-04-15T12:26:56.721177Z","times_seen":310,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":130,"dns":1,"connect":19,"send":0,"wait":35,"receive":0,"ssl":126},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/js/xupload.js","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fdewsdc.sbs/embed/2426vbhxujg1","date":"2025-10-26T22:48:06.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fdewsdc.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 11:23:48 GMT","end":"Sat, 24 Jan 2026 12:22:31 GMT"},"fingerprint":{"sha1":"18:A9:5F:75:6F:5C:6A:DB:A5:C7:E9:9C:D9:5E:EF:55:8A:D4:84:4E","sha256":"83:01:F8:71:CB:8A:5A:24:1C:D7:9C:E8:35:44:50:3E:35:D4:A4:A8:33:0C:3A:4C:47:3A:27:0F:AE:68:6F:6F"}}},"request":{"raw":"GET /js/xupload.js HTTP/1.1\r\nHost: fdewsdc.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fdewsdc.sbs/embed/2426vbhxujg1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 08 Oct 2021 14:16:42 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GzDmbJ3hAU5Ou29GW1Ruv8gB%2BknMYEaHbCniR6iAgXWo1KCYMgMaM%2FxzJg5CG0N%2BcAiDHywdEmiwAvV%2BLQkxcYwAAf2JZonYul0f\"}]}\r\netag: W/\"616052ca-29dc\"\r\nexpires: Sun, 02 Nov 2025 22:48:06 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 994d7fcefc2f0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10716,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"98f99724f09ee7524d3e2ad085f43332","sha1":"3a1b48d327c1bb5c1675b5d63d7806006b18b671","sha256":"90c38291318a91efee3b33b2ab5dcc4338fd5a85ff913afa631dfd26267a7eac","sha512":"057c3096700dd08e1d09e93402b60454c92a3567df1510c698e486fbf82df8e5f23aaf063376b6b5c139d27e8aa773f01a0e036260bed96bd4fb5c86a7b79ca9","ssdeep":"192:7IKE9YGs1axsrl6IsZWnrbll621w+4UWdRebMQ4WdReDyYQaQv7OsaaFg+BnqGQZ:EGy+tBlV9GRebVReDyYS7OsaaF10fq3u","tlshash":"e722774abaa339912a7730350bbf52043b398407114aca54bd5cd6c4af8452897ffbfd","first_seen":"2023-03-07T15:52:27Z","last_seen":"2026-04-01T19:35:17.30488Z","times_seen":605,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/assets/glide/css/glide.theme.min.css","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:04.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shahid-4u.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Oct 2025 17:43:52 GMT","end":"Fri, 23 Jan 2026 18:39:03 GMT"},"fingerprint":{"sha1":"72:00:52:7E:0E:E8:3C:1C:CB:F9:11:91:D6:47:93:A0:1F:DE:A4:88","sha256":"6B:0B:94:BF:97:85:78:77:C3:9E:34:62:8D:26:9E:5F:68:EE:21:D5:64:2A:2D:77:E5:3D:B7:67:4C:63:A9:22"}}},"request":{"raw":"GET /assets/glide/css/glide.theme.min.css HTTP/1.1\r\nHost: shahid-4u.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9\r\nCookie: XSRF-TOKEN=eyJpdiI6IktlMlBxOXlKM05mZVF3TTlRVkUyUnc9PSIsInZhbHVlIjoiZHZES0VITXVpRUx0YzVBcEx0RFVuQ1NnaFpuZzNnQXJnZWs5cEltcWRJNGhXY0w4STU0ejRIYkJGeGxCVXNKcytMMzVwd0VCY2x4WmFjVTRUejN1NXhOd2lqQXNGRkNVSnd2TThPNExtME05U0xiN3dMRXowT01LSVQ3QzFUNU4iLCJtYWMiOiI2MWJiMWU3NmI5MTAwYjc2NjU5YWE1NGE1MTBmOTkzMzZkOTU3OTBhMTQxNWQwZjc4MmI0MWY0ZjEyMmM5YWYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InV0SVVqZ1B3VFZDRWZaNnlHOUdLUkE9PSIsInZhbHVlIjoiT1hDaG9TRnVZZC9JMndLbXBqZDcvcEo5Nkxkb3BIQTNOTkZXTnptMHB3cEVkZ01yOXc5bmROcHlUU1AyYmhwaDROVlNTVmhqS2w1VGJRS2hKVXBLdUoydllMY1JSY091UjhxMHA2RUNxYlZTdXdqYWU0a3dyK0lQTngrNS9tNlQiLCJtYWMiOiI1YWVlNjNjMDVjMWQyZjY3MDY4ZGI5ZDFlZjkyNzQ4ZWNjYTQwYjhjNzhjOTE0N2JlZThlOWJmZDAzNGI2YzFmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:04 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nlast-modified: Wed, 12 Jul 2023 17:49:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 6608\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j3gQXcmBVLxd7iRdX4IU5WSa%2Fy2u%2BMpa3jenExK6PEtiXp3fWEmnmG5oDaK2%2FLM69m%2Fy23Jf13gDDJ2m8%2FSQH6U5zlOelMOMB8RY5w%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 994d7fc4d96b35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1321,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1320)","md5":"72269be697aa9e859d03e29cb696787a","sha1":"eb1c8d6ae2e51276dc8c7d2018aef42a01502d0c","sha256":"1a04c7d342fe039e4b9a1a3764ca7bc6119fe94624bfc23ff302f284b2c35e3a","sha512":"f2f0cea1217b919518927ec1890ba54424efa51a1e9e58e59100d984cebe22a0c98b98c70c7f501181fd35f30107c2e5aa261ceced7b606c5b1b1edd3b12aba7","ssdeep":"","tlshash":"4121e1369b42010ee013f60769c1c6cda0a5d1329622c5adfffb2064ce421feae391c6","first_seen":"2023-07-22T02:08:10Z","last_seen":"2026-04-16T17:39:15.013206Z","times_seen":730,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"shahid-4u.my","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/photos/servers-images/1758214653.webp","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:04.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shahid-4u.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Oct 2025 17:43:52 GMT","end":"Fri, 23 Jan 2026 18:39:03 GMT"},"fingerprint":{"sha1":"72:00:52:7E:0E:E8:3C:1C:CB:F9:11:91:D6:47:93:A0:1F:DE:A4:88","sha256":"6B:0B:94:BF:97:85:78:77:C3:9E:34:62:8D:26:9E:5F:68:EE:21:D5:64:2A:2D:77:E5:3D:B7:67:4C:63:A9:22"}}},"request":{"raw":"GET /photos/servers-images/1758214653.webp HTTP/1.1\r\nHost: shahid-4u.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9\r\nCookie: XSRF-TOKEN=eyJpdiI6IktlMlBxOXlKM05mZVF3TTlRVkUyUnc9PSIsInZhbHVlIjoiZHZES0VITXVpRUx0YzVBcEx0RFVuQ1NnaFpuZzNnQXJnZWs5cEltcWRJNGhXY0w4STU0ejRIYkJGeGxCVXNKcytMMzVwd0VCY2x4WmFjVTRUejN1NXhOd2lqQXNGRkNVSnd2TThPNExtME05U0xiN3dMRXowT01LSVQ3QzFUNU4iLCJtYWMiOiI2MWJiMWU3NmI5MTAwYjc2NjU5YWE1NGE1MTBmOTkzMzZkOTU3OTBhMTQxNWQwZjc4MmI0MWY0ZjEyMmM5YWYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InV0SVVqZ1B3VFZDRWZaNnlHOUdLUkE9PSIsInZhbHVlIjoiT1hDaG9TRnVZZC9JMndLbXBqZDcvcEo5Nkxkb3BIQTNOTkZXTnptMHB3cEVkZ01yOXc5bmROcHlUU1AyYmhwaDROVlNTVmhqS2w1VGJRS2hKVXBLdUoydllMY1JSY091UjhxMHA2RUNxYlZTdXdqYWU0a3dyK0lQTngrNS9tNlQiLCJtYWMiOiI1YWVlNjNjMDVjMWQyZjY3MDY4ZGI5ZDFlZjkyNzQ4ZWNjYTQwYjhjNzhjOTE0N2JlZThlOWJmZDAzNGI2YzFmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4988\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tFy8nhHf%2Fco1Vvg6zJhIl26GOITVGujaL6S1zI8zMlHjfkO%2BEdvWzhCvmtwIi2E6PBwSuk3%2BNF3vUATc5K8BzwZGimOedD0fTvusvg%3D%3D\"}]}\r\nlast-modified: Thu, 18 Sep 2025 16:57:33 GMT\r\naccept-ranges: bytes\r\nage: 2940\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 994d7fc4e96c35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4988,"size_decoded":0,"mime_type":"image/webp","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 198x190, components 3","md5":"8ae21e451b69887f70a1d4026e7ed3e7","sha1":"89d086ef6954df5113cd67a19dead0cfdd74c4f4","sha256":"471e0c97ba65055b12bb06ab0a2959963ae0158d61db2e2cf5a7e8b9b9fabd9a","sha512":"24249561121ca48ef2e1254942074c6af6195c9c0bad5f44a978c17be8b3acb7ce9d814d94182936f3972f5ac202d85b04b6761bb1f70793ac925248cd185847","ssdeep":"96:IhhvXU/dAzuEa/lYCn5jlZKcAO1+64HbOswyLyxPKYoPGd9tLn2768uZ4:IHNBujNlnJWbOsTLIUPah2huZ4","tlshash":"c0a15c09d27204dbcd39acb116d3a607d0a833e27690f22874cb20df6607fa99d2b509","first_seen":"2025-09-19T10:51:40.902028Z","last_seen":"2026-03-14T01:45:00.869869Z","times_seen":14,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"shahid-4u.my","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/cf-fonts/s/tajawal/5.0.11/latin/400/normal.woff2","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:04.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shahid-4u.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Oct 2025 17:43:52 GMT","end":"Fri, 23 Jan 2026 18:39:03 GMT"},"fingerprint":{"sha1":"72:00:52:7E:0E:E8:3C:1C:CB:F9:11:91:D6:47:93:A0:1F:DE:A4:88","sha256":"6B:0B:94:BF:97:85:78:77:C3:9E:34:62:8D:26:9E:5F:68:EE:21:D5:64:2A:2D:77:E5:3D:B7:67:4C:63:A9:22"}}},"request":{"raw":"GET /cf-fonts/s/tajawal/5.0.11/latin/400/normal.woff2 HTTP/1.1\r\nHost: shahid-4u.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9\r\nCookie: XSRF-TOKEN=eyJpdiI6IktlMlBxOXlKM05mZVF3TTlRVkUyUnc9PSIsInZhbHVlIjoiZHZES0VITXVpRUx0YzVBcEx0RFVuQ1NnaFpuZzNnQXJnZWs5cEltcWRJNGhXY0w4STU0ejRIYkJGeGxCVXNKcytMMzVwd0VCY2x4WmFjVTRUejN1NXhOd2lqQXNGRkNVSnd2TThPNExtME05U0xiN3dMRXowT01LSVQ3QzFUNU4iLCJtYWMiOiI2MWJiMWU3NmI5MTAwYjc2NjU5YWE1NGE1MTBmOTkzMzZkOTU3OTBhMTQxNWQwZjc4MmI0MWY0ZjEyMmM5YWYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InV0SVVqZ1B3VFZDRWZaNnlHOUdLUkE9PSIsInZhbHVlIjoiT1hDaG9TRnVZZC9JMndLbXBqZDcvcEo5Nkxkb3BIQTNOTkZXTnptMHB3cEVkZ01yOXc5bmROcHlUU1AyYmhwaDROVlNTVmhqS2w1VGJRS2hKVXBLdUoydllMY1JSY091UjhxMHA2RUNxYlZTdXdqYWU0a3dyK0lQTngrNS9tNlQiLCJtYWMiOiI1YWVlNjNjMDVjMWQyZjY3MDY4ZGI5ZDFlZjkyNzQ4ZWNjYTQwYjhjNzhjOTE0N2JlZThlOWJmZDAzNGI2YzFmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 26 Oct 2025 22:48:04 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 10256\r\npriority: u=4,i=?0\r\ncf-ray: 994d7fc5e9b235a6-OSL\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1phG%2Fd85pItc9OJ%2FYKgVBQL4Bv3MxPOBOyZdL0xmKTJcNCHmKvMrkZEhyfdoj6FTGNFV223E9%2FxGcqIiWXS%2F4b2hVlun0Tcurq3c7%2ByaeVmKV31IcMZIVbgXYtbKnYo%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1286\u0026min_rtt=544\u0026rtt_var=470\u0026sent=759\u0026recv=72\u0026lost=0\u0026retrans=0\u0026sent_bytes=849165\u0026recv_bytes=28920\u0026delivery_rate=35655991\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=54598\u0026ss_exit_bw=18591806\u0026ss_exit_reason=2\u0026cwnd=43673\u0026unsent_bytes=0\u0026cid=c7f24fd5e1020871\u0026ts=413\u0026inflight_dur=113\u0026x=54\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10256, version 1.0","md5":"f18eb7346bae415c6367ed0907125227","sha1":"a9e8e937c5afc2f9feb46bfcb8fa854728a494a8","sha256":"b081f7bf790678b56a2c0502651d6873cbabc09e78fe40655df15f918b1e369b","sha512":"87f620cfdfd5c1abddde9d19346cc0ab34fecfa359933fd31517ffd4bc6faad040c033bd89ace9d5ba00b7a51aaac2df73417d99e3535ba970c744312e415e7f","ssdeep":"192:f1Hlb/UvbtLTSjJACmwJCyE5+oa77IdgOpb9d8mKWyu1rPj13BFnFTlqy7:fLKLOnma1WXaypRjVXFJqG","tlshash":"dc22b012a0e8988cde26a1be4eec55ddc12b1f0ff1a70f518c7de58bce51722a05e4a1","first_seen":"2023-04-05T08:50:32Z","last_seen":"2026-04-16T20:32:20.768805Z","times_seen":3274,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"shahid-4u.my","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/embed/2426vbhxujg1","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:04.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fdewsdc.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 11:23:48 GMT","end":"Sat, 24 Jan 2026 12:22:31 GMT"},"fingerprint":{"sha1":"18:A9:5F:75:6F:5C:6A:DB:A5:C7:E9:9C:D9:5E:EF:55:8A:D4:84:4E","sha256":"83:01:F8:71:CB:8A:5A:24:1C:D7:9C:E8:35:44:50:3E:35:D4:A4:A8:33:0C:3A:4C:47:3A:27:0F:AE:68:6F:6F"}}},"request":{"raw":"GET /embed/2426vbhxujg1 HTTP/1.1\r\nHost: fdewsdc.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 22:48:06 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 25 Oct 2025 22:48:06 GMT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xwsmqSIgWbZklx%2BjFcjo10S13Wq56E4oVeAv4Xg8E6z5B983d1w67mwiSCFlX1c4S47bvWhQGL7P89pNs5QkJByTiSj1SWGzcBB0\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: lang=1; HttpOnly; Path=/; Domain=fdewsdc.sbs\r\ncf-ray: 994d7fc79caab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15566,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9163)","md5":"3869064b0689af689203b5ce7b7af056","sha1":"40823ae0ace494736d8bb084422c51251c99a31f","sha256":"60080155790016705a101d197e2b35efbc4eb9ab9d3fbf695b4fb21bd4975f97","sha512":"017079fd5f98a9b408f9ac87d9932c17cdc40332786bf0237e0ce4a04486dde0ae37e5f8a2aeb8ce9f86d5470728aac4545f10dc90e2de1bc723323c9d54be82","ssdeep":"192:4RyQf2+i89S1rKvcYrQq0sLW5ZX70lEhhfyaoOvgEiMrgGT4v6NOi8zurG5eiadX:s2+i2CsLchhfvo2iMRfq1knqsBPMnwZx","tlshash":"a5625a3a9d4a8035d6b2215db03ff20cf27a1831b922e524f5cdd446bba5fd488bb895","first_seen":"2025-10-26T22:48:42.288826Z","last_seen":"2025-10-26T22:48:42.288826Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1223,"timings":{"blocked":63,"dns":32,"connect":1,"send":0,"wait":1085,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p16-ad-sg.tiktokcdn.com/obj/ad-site-i18n-sg/202504255d0d6d325ff35a87492bacb7","fqdn":"p16-ad-sg.tiktokcdn.com","domain":"tiktokcdn.com","tld":"com"},"ip":{"addr":"23.36.77.99","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fdewsdc.sbs/embed/2426vbhxujg1","date":"2025-10-26T22:48:08.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tiktokcdn.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 07 Mar 2025 05:26:04 GMT","end":"Wed, 08 Apr 2026 05:26:03 GMT"},"fingerprint":{"sha1":"AB:A5:D2:DF:CE:6C:6D:AE:DD:36:C7:0F:CC:E1:32:1D:76:C7:35:C0","sha256":"75:76:14:5C:F5:BB:65:0D:C6:06:2B:2A:07:FA:50:AF:47:D8:3D:E9:63:80:10:B1:BA:42:B3:0B:51:AE:A7:9B"}}},"request":{"raw":"GET /obj/ad-site-i18n-sg/202504255d0d6d325ff35a87492bacb7 HTTP/1.1\r\nHost: p16-ad-sg.tiktokcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://fdewsdc.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fdewsdc.sbs/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 767486\r\nimagex-fmt: png2png\r\nlast-modified: Sun, 26 Oct 2025 06:19:27 GMT\r\nnw-session-id: 202510261419279B97ADFB21EBCEEAB688slxbb12tt\r\nnw-session-trace: 2025-10-26T06:19:27.33496653Z 73\r\nx-bdcdn-cache-status: TCP_HIT\r\nx-length: 767486\r\nx-powered-by: ImageX\r\nx-response-date: Sun, 26 Oct 2025 06:19:27 GMT\r\nx-tt-logid: 202510261419279B97ADFB21EBCEEAB688\r\nx-request-ip: fdbd:dc51:ff:1:1:245:43:154\r\nx-response-cinfo: fdbd:dc51:ff:1:1:245:43:154\r\nx-response-cache: edge_hit\r\nx-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf6022253aaddee42b64f5248aa8c1a416f27a03fa99cdeed1a65758aca28e22fd0ab22fe3fc1d32ff1ec4365cba690775eea58b390616f8c193a88ec314eb853e008e322ca605650425b5de9b5f1b9ef1935c38868542ba7cd5fcf29d641fa3bfd7\r\nx-tt-trace-id: 00-251027064808FE9CEB2DBFF1160F4629-701E8C4C4EEFC865-00\r\nserver: TLB\r\nx-origin-response-time: 76,23.193.181.30\r\ncache-control: max-age=31476679\r\ndate: Sun, 26 Oct 2025 22:48:08 GMT\r\nx-cache: TCP_MISS from a23-36-77-95.deploy.akamaitechnologies.com (AkamaiGHost/22.3.0-fcd174d50fb223c8364cec3c4b3f29c6) (-)\r\nx-cache-remote: TCP_MISS from a96-16-52-25.deploy.akamaitechnologies.com (AkamaiGHost/22.3.0-fcd174d50fb223c8364cec3c4b3f29c6) (-)\r\nx-tt-trace-tag: id=16;cdn-cache=miss;type=static\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=268, origin; dur=71, inner; dur=2\r\nx-parent-response-time: 307,96.16.52.25, 338,23.36.77.95\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":767486,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"0827f28464d2de09345cf69ac104e6b2","sha1":"5703ff0162612f28f0bfde11fc9ed33f513e183f","sha256":"e5ae732cad84c0c2f015cfdc4230b16eaa766ea8ba4bd87d0e1094ebc86999b8","sha512":"1b871b8de94ab2d3a162ea05a928abd64099fa51dc28479880deae6fdaa25ef3f99f7ea4ccb17c253ca4342cb70260ab41f744214b5c11f60d72f5a920ce18ec","ssdeep":"12288:+PVYpUc+hvUDVTn19oJ6zGN1nOIGMKO3kcTlqcZizcxGr78/H0Bh9kJyszJpRgqK:+K6c+Zay6K3OIGMv3kcTUqiwxGrgf0tF","tlshash":"f5f4126d7b0c7aaee157027357488bb27ba45c10a8846fa3365c7f25f8f9398ec70416","first_seen":"2025-10-26T22:48:42.289739Z","last_seen":"2025-10-26T22:48:42.289739Z","times_seen":1,"resource_available":false,"data":null}},"time_used":869,"timings":{"blocked":96,"dns":67,"connect":2,"send":0,"wait":341,"receive":336,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/assets/main_style.css?v=6","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:04.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shahid-4u.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Oct 2025 17:43:52 GMT","end":"Fri, 23 Jan 2026 18:39:03 GMT"},"fingerprint":{"sha1":"72:00:52:7E:0E:E8:3C:1C:CB:F9:11:91:D6:47:93:A0:1F:DE:A4:88","sha256":"6B:0B:94:BF:97:85:78:77:C3:9E:34:62:8D:26:9E:5F:68:EE:21:D5:64:2A:2D:77:E5:3D:B7:67:4C:63:A9:22"}}},"request":{"raw":"GET /assets/main_style.css?v=6 HTTP/1.1\r\nHost: shahid-4u.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9\r\nCookie: XSRF-TOKEN=eyJpdiI6IktlMlBxOXlKM05mZVF3TTlRVkUyUnc9PSIsInZhbHVlIjoiZHZES0VITXVpRUx0YzVBcEx0RFVuQ1NnaFpuZzNnQXJnZWs5cEltcWRJNGhXY0w4STU0ejRIYkJGeGxCVXNKcytMMzVwd0VCY2x4WmFjVTRUejN1NXhOd2lqQXNGRkNVSnd2TThPNExtME05U0xiN3dMRXowT01LSVQ3QzFUNU4iLCJtYWMiOiI2MWJiMWU3NmI5MTAwYjc2NjU5YWE1NGE1MTBmOTkzMzZkOTU3OTBhMTQxNWQwZjc4MmI0MWY0ZjEyMmM5YWYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InV0SVVqZ1B3VFZDRWZaNnlHOUdLUkE9PSIsInZhbHVlIjoiT1hDaG9TRnVZZC9JMndLbXBqZDcvcEo5Nkxkb3BIQTNOTkZXTnptMHB3cEVkZ01yOXc5bmROcHlUU1AyYmhwaDROVlNTVmhqS2w1VGJRS2hKVXBLdUoydllMY1JSY091UjhxMHA2RUNxYlZTdXdqYWU0a3dyK0lQTngrNS9tNlQiLCJtYWMiOiI1YWVlNjNjMDVjMWQyZjY3MDY4ZGI5ZDFlZjkyNzQ4ZWNjYTQwYjhjNzhjOTE0N2JlZThlOWJmZDAzNGI2YzFmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:04 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nlast-modified: Fri, 19 Sep 2025 12:34:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 6608\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=InSLh0KcliC4EMxayGUChFCsM%2BSEnH8RvzvkZpCr21rP%2FEWMLmBYFLsCfA%2FkMaxijW%2BA3sH9tH2WNcDkQtBHLU3HHVfdW8FzH2TOZQ%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 994d7fc4d96935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15659,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15659), with no line terminators","md5":"482aede86a5ab16c9da3b0ab83af1e06","sha1":"3f249839fa8a897b5ba71c7432ee0b2aa48515e6","sha256":"734886a7d78c3abfff5b851b6cbceb593d8c0f67288c513e5555be1d58473e0b","sha512":"3c24f3b208c77f3f890124b9abda9a701e1fa5274afa3a7af4cbc662020a830b2191bba173424d5ccd4b92b699275d128c5aa1339cd4ab9f168151d25b76a244","ssdeep":"192:HmD9RT2kJDyQc4brKOU7mTpUThSkRlDtwGZSG9gvl2UhWSGs4XnxV0rz3:H6RT2mDy1lhA2UhyXxcz","tlshash":"39625160f5d5203db46bd17976d0afad1138c582ea224bbdf65a713887c62d722b3b0c","first_seen":"2025-09-20T14:49:01.451555Z","last_seen":"2026-04-11T19:43:19.304787Z","times_seen":100,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"shahid-4u.my","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/photos/servers-images/1734806258.webp","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:04.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shahid-4u.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Oct 2025 17:43:52 GMT","end":"Fri, 23 Jan 2026 18:39:03 GMT"},"fingerprint":{"sha1":"72:00:52:7E:0E:E8:3C:1C:CB:F9:11:91:D6:47:93:A0:1F:DE:A4:88","sha256":"6B:0B:94:BF:97:85:78:77:C3:9E:34:62:8D:26:9E:5F:68:EE:21:D5:64:2A:2D:77:E5:3D:B7:67:4C:63:A9:22"}}},"request":{"raw":"GET /photos/servers-images/1734806258.webp HTTP/1.1\r\nHost: shahid-4u.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9\r\nCookie: XSRF-TOKEN=eyJpdiI6IktlMlBxOXlKM05mZVF3TTlRVkUyUnc9PSIsInZhbHVlIjoiZHZES0VITXVpRUx0YzVBcEx0RFVuQ1NnaFpuZzNnQXJnZWs5cEltcWRJNGhXY0w4STU0ejRIYkJGeGxCVXNKcytMMzVwd0VCY2x4WmFjVTRUejN1NXhOd2lqQXNGRkNVSnd2TThPNExtME05U0xiN3dMRXowT01LSVQ3QzFUNU4iLCJtYWMiOiI2MWJiMWU3NmI5MTAwYjc2NjU5YWE1NGE1MTBmOTkzMzZkOTU3OTBhMTQxNWQwZjc4MmI0MWY0ZjEyMmM5YWYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InV0SVVqZ1B3VFZDRWZaNnlHOUdLUkE9PSIsInZhbHVlIjoiT1hDaG9TRnVZZC9JMndLbXBqZDcvcEo5Nkxkb3BIQTNOTkZXTnptMHB3cEVkZ01yOXc5bmROcHlUU1AyYmhwaDROVlNTVmhqS2w1VGJRS2hKVXBLdUoydllMY1JSY091UjhxMHA2RUNxYlZTdXdqYWU0a3dyK0lQTngrNS9tNlQiLCJtYWMiOiI1YWVlNjNjMDVjMWQyZjY3MDY4ZGI5ZDFlZjkyNzQ4ZWNjYTQwYjhjNzhjOTE0N2JlZThlOWJmZDAzNGI2YzFmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9864\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ReQWdnQMfTnEXcJUdoP12Xx2rLdXENF%2FI3saVAzGy2q8TINob49Bz375p%2F1hetMt%2FTNkIp3Mdub4bgaw62B%2BrGxfzuPnfwtcpPiGPw%3D%3D\"}]}\r\nlast-modified: Sat, 21 Dec 2024 08:37:38 GMT\r\naccept-ranges: bytes\r\nage: 2940\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 994d7fc4e96d35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9864,"size_decoded":0,"mime_type":"image/webp","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x640, components 3","md5":"f56af53b4b813de7c06b1073021692f6","sha1":"9e1e9112c18ae81b964d44b0750e7503de6445f9","sha256":"d3c2463e3c5e7b955144d15a06310a88e6e8cdb665b9588816c2c7b315943580","sha512":"c9c65a9b9d8409c635e3a0c74ee91e2cef302cd1fed475ed7b843452ad63e925341bedf00b31c001b9d22653fde6d4f8d77227cb0125fad9d4e51dd0312c37f8","ssdeep":"192:OfW+youw8kjywnn4NGYWLJFt15HGAPfXlttQeZQQZ1NS:GW+dhywQWLNqClzOiw","tlshash":"bf128d7a2fc145c6d83221719f9dbb23f816ac35911c1f7b22a491d37ce226600591f9","first_seen":"2025-04-11T23:00:29.380809Z","last_seen":"2026-01-15T07:05:53.032596Z","times_seen":29,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"shahid-4u.my","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/photos/servers-images/1730067337.webp","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:04.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shahid-4u.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Oct 2025 17:43:52 GMT","end":"Fri, 23 Jan 2026 18:39:03 GMT"},"fingerprint":{"sha1":"72:00:52:7E:0E:E8:3C:1C:CB:F9:11:91:D6:47:93:A0:1F:DE:A4:88","sha256":"6B:0B:94:BF:97:85:78:77:C3:9E:34:62:8D:26:9E:5F:68:EE:21:D5:64:2A:2D:77:E5:3D:B7:67:4C:63:A9:22"}}},"request":{"raw":"GET /photos/servers-images/1730067337.webp HTTP/1.1\r\nHost: shahid-4u.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9\r\nCookie: XSRF-TOKEN=eyJpdiI6IktlMlBxOXlKM05mZVF3TTlRVkUyUnc9PSIsInZhbHVlIjoiZHZES0VITXVpRUx0YzVBcEx0RFVuQ1NnaFpuZzNnQXJnZWs5cEltcWRJNGhXY0w4STU0ejRIYkJGeGxCVXNKcytMMzVwd0VCY2x4WmFjVTRUejN1NXhOd2lqQXNGRkNVSnd2TThPNExtME05U0xiN3dMRXowT01LSVQ3QzFUNU4iLCJtYWMiOiI2MWJiMWU3NmI5MTAwYjc2NjU5YWE1NGE1MTBmOTkzMzZkOTU3OTBhMTQxNWQwZjc4MmI0MWY0ZjEyMmM5YWYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InV0SVVqZ1B3VFZDRWZaNnlHOUdLUkE9PSIsInZhbHVlIjoiT1hDaG9TRnVZZC9JMndLbXBqZDcvcEo5Nkxkb3BIQTNOTkZXTnptMHB3cEVkZ01yOXc5bmROcHlUU1AyYmhwaDROVlNTVmhqS2w1VGJRS2hKVXBLdUoydllMY1JSY091UjhxMHA2RUNxYlZTdXdqYWU0a3dyK0lQTngrNS9tNlQiLCJtYWMiOiI1YWVlNjNjMDVjMWQyZjY3MDY4ZGI5ZDFlZjkyNzQ4ZWNjYTQwYjhjNzhjOTE0N2JlZThlOWJmZDAzNGI2YzFmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4798\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8sXdmQW2%2FZjHo%2B%2B3bTQqEEetSS8KMgmdbPypAcPvE%2BRvB%2FRc7CqJfuEuk5g827VxL958gJv5C3OyRUzjQdKMCe0y5kigFBMulZy2Kg%3D%3D\"}]}\r\nlast-modified: Sun, 27 Oct 2024 12:15:36 GMT\r\naccept-ranges: bytes\r\nage: 2836\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 994d7fc4e97b35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4798,"size_decoded":0,"mime_type":"image/webp","magic":"JPEG image data, JFIF standard 1.00, resolution (DPI), density 120x120, segment length 16, comment: \"LEAD Technologies Inc. V1.01\", baseline, precision 8, 163x162, components 3","md5":"65b5893d0ef3b84eba15061aaa6e0837","sha1":"48889e9f9f4090175bd60b62f8b247f2b9f9eb28","sha256":"cc92e6ae556926359304d4b913a09541d8ea66439be68de288dde29f42ee6514","sha512":"947046f08fba85407dc0b88793a5d310726e87af005ca9321c985da943db20d8ca58111dbad1b3aa037fae9da07797a2dc61457a4612ee8a6860601ad63ba6e8","ssdeep":"96:4yzE8RrDFI9E0zqe3V1CdsXxS4Qj78JR4VdAfMQmqJOp6oNeMV:jFRHmGqqe7CCXoVji4IM/NIoNeMV","tlshash":"39a13bb2735ee3a60ba3852c937c3c769306b6ce5fc642b6381729019600bb5946b62c","first_seen":"2024-08-19T12:54:17.008703Z","last_seen":"2026-03-10T07:50:05.149755Z","times_seen":21,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"shahid-4u.my","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/cf-fonts/s/tajawal/5.0.11/latin/700/normal.woff2","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:04.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shahid-4u.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Oct 2025 17:43:52 GMT","end":"Fri, 23 Jan 2026 18:39:03 GMT"},"fingerprint":{"sha1":"72:00:52:7E:0E:E8:3C:1C:CB:F9:11:91:D6:47:93:A0:1F:DE:A4:88","sha256":"6B:0B:94:BF:97:85:78:77:C3:9E:34:62:8D:26:9E:5F:68:EE:21:D5:64:2A:2D:77:E5:3D:B7:67:4C:63:A9:22"}}},"request":{"raw":"GET /cf-fonts/s/tajawal/5.0.11/latin/700/normal.woff2 HTTP/1.1\r\nHost: shahid-4u.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9\r\nCookie: XSRF-TOKEN=eyJpdiI6IktlMlBxOXlKM05mZVF3TTlRVkUyUnc9PSIsInZhbHVlIjoiZHZES0VITXVpRUx0YzVBcEx0RFVuQ1NnaFpuZzNnQXJnZWs5cEltcWRJNGhXY0w4STU0ejRIYkJGeGxCVXNKcytMMzVwd0VCY2x4WmFjVTRUejN1NXhOd2lqQXNGRkNVSnd2TThPNExtME05U0xiN3dMRXowT01LSVQ3QzFUNU4iLCJtYWMiOiI2MWJiMWU3NmI5MTAwYjc2NjU5YWE1NGE1MTBmOTkzMzZkOTU3OTBhMTQxNWQwZjc4MmI0MWY0ZjEyMmM5YWYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InV0SVVqZ1B3VFZDRWZaNnlHOUdLUkE9PSIsInZhbHVlIjoiT1hDaG9TRnVZZC9JMndLbXBqZDcvcEo5Nkxkb3BIQTNOTkZXTnptMHB3cEVkZ01yOXc5bmROcHlUU1AyYmhwaDROVlNTVmhqS2w1VGJRS2hKVXBLdUoydllMY1JSY091UjhxMHA2RUNxYlZTdXdqYWU0a3dyK0lQTngrNS9tNlQiLCJtYWMiOiI1YWVlNjNjMDVjMWQyZjY3MDY4ZGI5ZDFlZjkyNzQ4ZWNjYTQwYjhjNzhjOTE0N2JlZThlOWJmZDAzNGI2YzFmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 26 Oct 2025 22:48:04 GMT\r\ncontent-length: 9996\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eqZ4f6z9qNwYstoA743VldvQqEzC2cWJ1yXJyiwPv9Zf10RzDqkY5qjWbKyfRo3b3ogA82PLaRBEC3yB6S9rknLT3XWANDSx51CIFg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 994d7fc5f9b835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9996,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9996, version 1.0","md5":"e9c38c1110be8eac901fbe1fa4dff374","sha1":"aba40d14b54e93d55124da50975b075c28969a41","sha256":"de8f431c146ab1feb612cb7ced0842ae5c4e2f12067d13db0badeca73977200b","sha512":"63d09f9af1dc5527a7a83742816db935c4f9a68dd6e0aa0cb8123c9800445cf98d9ccb4540ac72f22169acbb4fdf74d4efe294594c7fee86f340bf4e5314b493","ssdeep":"192:RroSo3j4T8CjdN21Sqp4LRD0BR3UeVyEwisPtNLMlhjP9hMyCoI7:Rrhoz4bBqqlDy5UTdisPPMrjPDCL7","tlshash":"6922cfe37d2c35a4c36f0a39c9c00f3e85d41e826ea4375aae744f35e4917a7a64163b","first_seen":"2023-04-05T13:22:44Z","last_seen":"2026-04-16T20:32:20.745989Z","times_seen":2899,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"shahid-4u.my","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/#0.6406190631777612","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.17.138.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:06.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: c.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 26 Oct 2025 22:48:06 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\ncache-control: public, max-age=2678400\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR\r\npermissions-policy: ch-ua=(self \"https://adsco.re\"),ch-ua-mobile=(self \"https://adsco.re\"),ch-ua-full-version=(self \"https://adsco.re\"),ch-ua-platform=(self \"https://adsco.re\"),ch-ua-platform-version=(self \"https://adsco.re\"),ch-ua-arch=(self \"https://adsco.re\"),ch-ua-model=(self \"https://adsco.re\"),ch-device-memory=(self \"https://adsco.re\"),ch-downlink=(self \"https://adsco.re\"),ch-ect=(self \"https://adsco.re\"),ch-rtt=(self \"https://adsco.re\"),ch-width=(self \"https://adsco.re\"),ch-viewport-width=(self \"https://adsco.re\"),ch-dpr=(self \"https://adsco.re\")\r\nlink: \u003c//adsco.re/\u003e; crossorigin; rel=preconnect, \u003chttps://6.adsco.re/\u003e; rel=prefetch; crossorigin; as=fetch, \u003chttps://4.adsco.re/\u003e; rel=prefetch; crossorigin; as=fetch, \u003chttps://6.adsco.re:2087/\u003e; rel=prefetch; crossorigin; as=fetch, \u003chttps://4.adsco.re:2087/\u003e; rel=prefetch; crossorigin; as=fetch\r\nexpires: Wed, 26 Nov 2025 22:48:06 GMT\r\netag: W/\"DSJfZXQzQDcKqYUstUK/qg==\"\r\nvary: accept-encoding\r\nage: 82531\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 994d7fd1fc84a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78912,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (713)","md5":"0d225f65743340370aa9852cb542bfaa","sha1":"75b869b7fe9e5bf9c70356841fb979b1b6c368b1","sha256":"d4d57cd30e17b462717663ce996c9c9503a93404aeaa31754792e77df15a93c1","sha512":"099072317bda8d335f173b79c2600f68d50bf84c1288ae72248d901929b11d219d2a3bfd0d4b207fa1491f51fc0419b98e59ccb93415dfd5ff2e2511c4b045b1","ssdeep":"768:dsmoTKUwrAjMo3m4MSHIMRBy5kgxYbFQzd9elw3mbuk92lLkt6WZjyQCT/8G2N2B:pov3m4bHIeEk+zd9elw3mb2VwQyAY3s3","tlshash":"40734ba97162702a43b238e9567f5311f1ba0aa02c0690d0d37dc9643c74edf927fb9e","first_seen":"2025-10-17T16:36:26.763699Z","last_seen":"2025-10-30T20:42:39.517924Z","times_seen":609,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/js/jquery.min.js","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fdewsdc.sbs/embed/2426vbhxujg1","date":"2025-10-26T22:48:06.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fdewsdc.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 11:23:48 GMT","end":"Sat, 24 Jan 2026 12:22:31 GMT"},"fingerprint":{"sha1":"18:A9:5F:75:6F:5C:6A:DB:A5:C7:E9:9C:D9:5E:EF:55:8A:D4:84:4E","sha256":"83:01:F8:71:CB:8A:5A:24:1C:D7:9C:E8:35:44:50:3E:35:D4:A4:A8:33:0C:3A:4C:47:3A:27:0F:AE:68:6F:6F"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: fdewsdc.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fdewsdc.sbs/embed/2426vbhxujg1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 02 Mar 2021 21:27:20 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=geWobWHGCbKZPJz4fPi6sRf2aj3RIT41zItV3ko3IbAlBztP2oV6gvdHgZQZ5pd%2FUF9HBUZ4BzpFGOMM0TSSJ0RXkOwRUh6DA%2BmI\"}]}\r\netag: W/\"603eadb8-15d9d\"\r\nexpires: Sun, 02 Nov 2025 22:48:06 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 994d7fcedc200731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-16T21:05:18.139708Z","times_seen":450774,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-48ZJD1VPGZ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fdewsdc.sbs/embed/2426vbhxujg1","date":"2025-10-26T22:48:06.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:04 GMT","end":"Wed, 24 Dec 2025 14:32:03 GMT"},"fingerprint":{"sha1":"D7:8C:7A:D0:97:B6:11:02:45:69:BD:62:90:53:49:F8:8D:01:20:26","sha256":"F3:B2:48:55:BA:37:4F:37:37:83:8F:61:8F:04:B7:1F:E7:6F:4D:1A:D6:71:F7:BA:2C:E5:C4:45:B8:D7:B7:7E"}}},"request":{"raw":"GET /gtag/js?id=G-48ZJD1VPGZ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fdewsdc.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 26 Oct 2025 22:48:06 GMT\r\nexpires: Sun, 26 Oct 2025 22:48:06 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 142373\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":429463,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"b00ac8090f29531e234d1a486f0d07b2","sha1":"4ec80a6f9e8523f0811e5cd05f974d1c6073336b","sha256":"5d2c6b49c562d3a3749023f13688bd9ba2dffe83a72ac40209ef95ff6cc2b24c","sha512":"f4c98dda86bb2303b828a94aa6dfff624c01dd330c9ac18e1ca80b5ba9c65edc001d1932360d8f59d711311e5c3a4b1d30b29e2f0b561286455dfe2e98bd06bf","ssdeep":"6144:KBFyJBX178429Z8nP57wr/s0s/+Kxxc20hYllAk6KlhDjMc:E8JBl929Z8nP58DG/mYl5X","tlshash":"289419ce73d670269396f078503f018ba57b29a2b45cc896f189cce42d74a9a4277f7c","first_seen":"2025-10-26T22:48:42.294437Z","last_seen":"2025-10-26T22:51:31.522794Z","times_seen":2,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/player/jw8/provider.hlsjs.js?v=42","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fdewsdc.sbs/embed/2426vbhxujg1","date":"2025-10-26T22:48:06.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fdewsdc.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 11:23:48 GMT","end":"Sat, 24 Jan 2026 12:22:31 GMT"},"fingerprint":{"sha1":"18:A9:5F:75:6F:5C:6A:DB:A5:C7:E9:9C:D9:5E:EF:55:8A:D4:84:4E","sha256":"83:01:F8:71:CB:8A:5A:24:1C:D7:9C:E8:35:44:50:3E:35:D4:A4:A8:33:0C:3A:4C:47:3A:27:0F:AE:68:6F:6F"}}},"request":{"raw":"GET /player/jw8/provider.hlsjs.js?v=42 HTTP/1.1\r\nHost: fdewsdc.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fdewsdc.sbs/embed/2426vbhxujg1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:07 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yaJ7EzCufXEk8b%2BP%2BsQ2BW4NPj%2BDNNiNVb%2FesVN2r8sZ%2BaN9f%2Fo2cuAMj0hA3fmkPZewlBRu3oDWQU5lC5cQW7W7GWjsBioEPgB8\"}]}\r\nlast-modified: Fri, 28 Mar 2025 05:48:27 GMT\r\netag: W/\"70ac0-631609e8e20c0\"\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 994d7fd38ca50731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":461504,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65501)","md5":"b88ce761b9ebc2a7859a2e03b33ce1ed","sha1":"70d94f3c48460af13fc14eea9e5969f8f28d1a3a","sha256":"0b009d01bf513b1059d8ee15e1a8b57faeb5f8066c0f47d2cf8e1dd2454e5b28","sha512":"0bf83a6b3d8d20918df3ecfd29f7016549a8d8c8cc4aa439018295d55ebf7e136397e0fca72ae0e4bc9eebcd3384261c9a4a492b6e4d43e1fc1acd3ce872c24a","ssdeep":"6144:Fy9gZtOSTvzXBukG/xu08Q9Eu961Q3/nqJxgEMLew9rrqwZk6:MyvvG/xu0pU1cqJxgEIZF","tlshash":"aca43bdd77a5a42642c2a1a5903f4607633b7d0a340dc1acfa2be9d75db8849b03bf74","first_seen":"2025-04-01T21:32:19.721472Z","last_seen":"2026-04-02T13:28:52.612627Z","times_seen":602,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":208,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p16-ad-sg.tiktokcdn.com/obj/ad-site-i18n-sg/202504255d0dc8f65904135540d6a5f7","fqdn":"p16-ad-sg.tiktokcdn.com","domain":"tiktokcdn.com","tld":"com"},"ip":{"addr":"23.36.77.99","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fdewsdc.sbs/embed/2426vbhxujg1","date":"2025-10-26T22:48:09.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tiktokcdn.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 07 Mar 2025 05:26:04 GMT","end":"Wed, 08 Apr 2026 05:26:03 GMT"},"fingerprint":{"sha1":"AB:A5:D2:DF:CE:6C:6D:AE:DD:36:C7:0F:CC:E1:32:1D:76:C7:35:C0","sha256":"75:76:14:5C:F5:BB:65:0D:C6:06:2B:2A:07:FA:50:AF:47:D8:3D:E9:63:80:10:B1:BA:42:B3:0B:51:AE:A7:9B"}}},"request":{"raw":"GET /obj/ad-site-i18n-sg/202504255d0dc8f65904135540d6a5f7 HTTP/1.1\r\nHost: p16-ad-sg.tiktokcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://fdewsdc.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fdewsdc.sbs/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 932926\r\nimagex-fmt: png2png\r\nlast-modified: Sun, 26 Oct 2025 22:48:09 GMT\r\nnw-session-id: 202510270648094066BEBA49AFD6FE64959gwr412tt\r\nnw-session-trace: 2025-10-26T22:48:09.924991758Z 84\r\nx-bdcdn-cache-status: TCP_MISS\r\nx-length: 932926\r\nx-powered-by: ImageX\r\nx-response-date: Sun, 26 Oct 2025 22:48:09 GMT\r\nx-tt-logid: 202510270648094066BEBA49AFD6FE6495\r\nx-request-ip: fdbd:dc53:21:a46::30\r\nx-response-cinfo: fdbd:dc53:21:a46::30\r\nx-response-cache: miss\r\nx-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf601502e50c5dd04d756ac440d272eed12f3caa3776c68e41f7b14fc1d6d6522d56f0a70b77354dd387db10ec4778b0d136076156d9a7d29874fa4c79fda25ab4b6b819dec861aa125449e73c497fe0951e0fdaaf80208ccb1de20217582f39400ba04ebd79850ae6c99fe16d597abbe6e2\r\nx-tt-trace-id: 00-2510270648094066BEBA49AFD6FE6495-1694D5947E8854AF-00\r\nserver: TLB\r\nx-origin-response-time: 175,23.48.148.180\r\ncache-control: max-age=31536000\r\ndate: Sun, 26 Oct 2025 22:48:10 GMT\r\nx-cache: TCP_MISS from a23-36-77-95.deploy.akamaitechnologies.com (AkamaiGHost/22.3.0-fcd174d50fb223c8364cec3c4b3f29c6) (-)\r\nx-cache-remote: TCP_MISS from a2-17-210-186.deploy.akamaitechnologies.com (AkamaiGHost/22.3.0-fcd174d50fb223c8364cec3c4b3f29c6) (-)\r\nx-tt-trace-tag: id=16;cdn-cache=miss;type=static\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=727, origin; dur=170, inner; dur=92\r\nx-parent-response-time: 886,2.17.210.186, 897,23.36.77.95\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":932926,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"de1a6cd35c3b5bff62bd4a47c8254267","sha1":"d82f6d8d8f755beada6bc587dcef6d641ba671e4","sha256":"f4ea27e62fbc3cc9473a987d727d074fbe185ee8ab3019d3814bfac804864d28","sha512":"073fc2cafb3d46e4bae72eaaa8886a62826679addbc47fc19e811e5b02a7c3ba85961f4589a72e6141970a98ae111edda2afd1d547044fa47e2eb3da88936db2","ssdeep":"24576:BbxwusyuT55CUHuwWD+HWBaokeaM7WCOKVAn:9hswUHujjcoNo4w","tlshash":"7d15231877882c8fe54b42b2a21442f2b7518cb5a449af67296dbd1decfc3d9de2443c","first_seen":"2025-10-26T22:48:42.296133Z","last_seen":"2025-10-26T22:48:42.296133Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2620,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":900,"receive":1720,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-26T22:48:04.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shahid-4u.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Oct 2025 17:43:52 GMT","end":"Fri, 23 Jan 2026 18:39:03 GMT"},"fingerprint":{"sha1":"72:00:52:7E:0E:E8:3C:1C:CB:F9:11:91:D6:47:93:A0:1F:DE:A4:88","sha256":"6B:0B:94:BF:97:85:78:77:C3:9E:34:62:8D:26:9E:5F:68:EE:21:D5:64:2A:2D:77:E5:3D:B7:67:4C:63:A9:22"}}},"request":{"raw":"GET /watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9 HTTP/1.1\r\nHost: shahid-4u.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 22:48:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9hslfSB4yqt6oMqNY4qxsqkSLJ2Oe%2BSb7%2F55Kk%2Bn44r5TYwXY6GNEk7rQhU2a1Yr8V6VEyJkSGOkiuojuf0LRsqbhQvPQDva3MA%3D\"}]}\r\ncontent-encoding: br\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IktlMlBxOXlKM05mZVF3TTlRVkUyUnc9PSIsInZhbHVlIjoiZHZES0VITXVpRUx0YzVBcEx0RFVuQ1NnaFpuZzNnQXJnZWs5cEltcWRJNGhXY0w4STU0ejRIYkJGeGxCVXNKcytMMzVwd0VCY2x4WmFjVTRUejN1NXhOd2lqQXNGRkNVSnd2TThPNExtME05U0xiN3dMRXowT01LSVQ3QzFUNU4iLCJtYWMiOiI2MWJiMWU3NmI5MTAwYjc2NjU5YWE1NGE1MTBmOTkzMzZkOTU3OTBhMTQxNWQwZjc4MmI0MWY0ZjEyMmM5YWYwIiwidGFnIjoiIn0%3D; SameSite=Lax; Secure; Path=/; Max-Age=7200; Expires=Mon, 27 Oct 2025 00:48:04 GMT\nlaravel_session=eyJpdiI6InV0SVVqZ1B3VFZDRWZaNnlHOUdLUkE9PSIsInZhbHVlIjoiT1hDaG9TRnVZZC9JMndLbXBqZDcvcEo5Nkxkb3BIQTNOTkZXTnptMHB3cEVkZ01yOXc5bmROcHlUU1AyYmhwaDROVlNTVmhqS2w1VGJRS2hKVXBLdUoydllMY1JSY091UjhxMHA2RUNxYlZTdXdqYWU0a3dyK0lQTngrNS9tNlQiLCJtYWMiOiI1YWVlNjNjMDVjMWQyZjY3MDY4ZGI5ZDFlZjkyNzQ4ZWNjYTQwYjhjNzhjOTE0N2JlZThlOWJmZDAzNGI2YzFmIiwidGFnIjoiIn0%3D; HttpOnly; SameSite=Lax; Path=/; Max-Age=7200; Expires=Mon, 27 Oct 2025 00:48:04 GMT\r\ncf-ray: 994d7fc1999cb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61561,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4309), with CRLF, LF line terminators","md5":"3ed2c5fa0add13006df86ec2f7b79489","sha1":"f6d5ca4fb927018f7a389114710380a5b17b0752","sha256":"c38735eb604c2734057009d332c916188be33e20d2ffac13506ec7abd22e4b14","sha512":"0e34dbb787013b8281635e93dafbc0b31afea8c88fe38989562315a773187734ae1dbde938ab7095151a3ba7323b24179ec46625fad8935696b6db4ed188f75a","ssdeep":"1536:XxYqa+PD4flb//OkodZBtNR59dYd7n3jrPvTS9v5/VPJ/fuMIPsRZvK:XxYqn44uMIPsRZvK","tlshash":"4b53c7a224b624ab02b78cd6a7b63315e591e003ce4fb95438dfc9741fc7d924693b78","first_seen":"2025-10-26T22:48:42.296848Z","last_seen":"2025-10-26T22:48:42.296848Z","times_seen":1,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":22,"dns":1,"connect":1,"send":0,"wait":333,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"shahid-4u.my","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-BM642X4VSX","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:04.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:04 GMT","end":"Wed, 24 Dec 2025 14:32:03 GMT"},"fingerprint":{"sha1":"D7:8C:7A:D0:97:B6:11:02:45:69:BD:62:90:53:49:F8:8D:01:20:26","sha256":"F3:B2:48:55:BA:37:4F:37:37:83:8F:61:8F:04:B7:1F:E7:6F:4D:1A:D6:71:F7:BA:2C:E5:C4:45:B8:D7:B7:7E"}}},"request":{"raw":"GET /gtag/js?id=G-BM642X4VSX HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 26 Oct 2025 22:48:04 GMT\r\nexpires: Sun, 26 Oct 2025 22:48:04 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 141994\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":427145,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"6b3946cd68919662b6e62d36132a4f22","sha1":"4f4fbd6d01d1d94ec662f9dd5ac960c1133eaf14","sha256":"b8a24f1fd5c228ce034cf8d73bd7266e30698967abbe939a93d17dec787d69c1","sha512":"21a35ea6280e91f559db0ae17a4fac32d521dd32cb0917824d4e8a56e76202329ca000e9ba21ef98339e2b82116211a12d163136fc01cb9b2bd7c779da2ee088","ssdeep":"6144:rBjyJBX178429Z8nP57wr/s0s/+Kxxc20hYllAk6KlhDjMc:tWJBl929Z8nP58DG/mYl5X","tlshash":"3e9419ce73d670269396f078503f018ba57b29a2b45cc896f189cce42d74a9a4277f7c","first_seen":"2025-10-26T22:48:42.29774Z","last_seen":"2025-10-26T22:48:42.29774Z","times_seen":1,"resource_available":true,"data":null}},"time_used":404,"timings":{"blocked":138,"dns":1,"connect":24,"send":0,"wait":45,"receive":59,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/photos/servers-images/1735040650.webp","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:04.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shahid-4u.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Oct 2025 17:43:52 GMT","end":"Fri, 23 Jan 2026 18:39:03 GMT"},"fingerprint":{"sha1":"72:00:52:7E:0E:E8:3C:1C:CB:F9:11:91:D6:47:93:A0:1F:DE:A4:88","sha256":"6B:0B:94:BF:97:85:78:77:C3:9E:34:62:8D:26:9E:5F:68:EE:21:D5:64:2A:2D:77:E5:3D:B7:67:4C:63:A9:22"}}},"request":{"raw":"GET /photos/servers-images/1735040650.webp HTTP/1.1\r\nHost: shahid-4u.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9\r\nCookie: XSRF-TOKEN=eyJpdiI6IktlMlBxOXlKM05mZVF3TTlRVkUyUnc9PSIsInZhbHVlIjoiZHZES0VITXVpRUx0YzVBcEx0RFVuQ1NnaFpuZzNnQXJnZWs5cEltcWRJNGhXY0w4STU0ejRIYkJGeGxCVXNKcytMMzVwd0VCY2x4WmFjVTRUejN1NXhOd2lqQXNGRkNVSnd2TThPNExtME05U0xiN3dMRXowT01LSVQ3QzFUNU4iLCJtYWMiOiI2MWJiMWU3NmI5MTAwYjc2NjU5YWE1NGE1MTBmOTkzMzZkOTU3OTBhMTQxNWQwZjc4MmI0MWY0ZjEyMmM5YWYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InV0SVVqZ1B3VFZDRWZaNnlHOUdLUkE9PSIsInZhbHVlIjoiT1hDaG9TRnVZZC9JMndLbXBqZDcvcEo5Nkxkb3BIQTNOTkZXTnptMHB3cEVkZ01yOXc5bmROcHlUU1AyYmhwaDROVlNTVmhqS2w1VGJRS2hKVXBLdUoydllMY1JSY091UjhxMHA2RUNxYlZTdXdqYWU0a3dyK0lQTngrNS9tNlQiLCJtYWMiOiI1YWVlNjNjMDVjMWQyZjY3MDY4ZGI5ZDFlZjkyNzQ4ZWNjYTQwYjhjNzhjOTE0N2JlZThlOWJmZDAzNGI2YzFmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4008\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LGhha%2Fhws4pE2KA%2Fsiws1ORhKkbTe6QieaTLWQgh%2BilB9WIVUun%2FdNJr%2F74VF94ho95eSadoMdKFI%2BgXQ1Cb0h39JDrvndgBKFV%2Fpw%3D%3D\"}]}\r\nlast-modified: Tue, 24 Dec 2024 01:44:10 GMT\r\naccept-ranges: bytes\r\nage: 1257\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 994d7fc4e97035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4008,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"52c6e4c8bbd86ac05783fa58331fb9ad","sha1":"7564df6f8f35d2a335b642f2cef38dac6a24163e","sha256":"dcb0fa45a48b10ddd2ce8c15b4c5f26d8d1269dbf8ee3987cb1f6a02fd9b1652","sha512":"e6bbd837dd15d9cc05e112bd6e486a18ed039d7f5e952902ff14a1d5cd5e2e58d002a35502c55ade80d62c421e5142e22f394e596bbf979d9c27208b24fb3807","ssdeep":"","tlshash":"23815a939c482ef3e4d320bb9e080b83ee3bd162b8425304b4d3557216e5e11d12a7e8","first_seen":"2025-04-11T23:00:29.357418Z","last_seen":"2026-03-10T07:50:05.172285Z","times_seen":12,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"shahid-4u.my","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/photos/servers-images/1698322487.webp","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:04.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shahid-4u.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Oct 2025 17:43:52 GMT","end":"Fri, 23 Jan 2026 18:39:03 GMT"},"fingerprint":{"sha1":"72:00:52:7E:0E:E8:3C:1C:CB:F9:11:91:D6:47:93:A0:1F:DE:A4:88","sha256":"6B:0B:94:BF:97:85:78:77:C3:9E:34:62:8D:26:9E:5F:68:EE:21:D5:64:2A:2D:77:E5:3D:B7:67:4C:63:A9:22"}}},"request":{"raw":"GET /photos/servers-images/1698322487.webp HTTP/1.1\r\nHost: shahid-4u.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9\r\nCookie: XSRF-TOKEN=eyJpdiI6IktlMlBxOXlKM05mZVF3TTlRVkUyUnc9PSIsInZhbHVlIjoiZHZES0VITXVpRUx0YzVBcEx0RFVuQ1NnaFpuZzNnQXJnZWs5cEltcWRJNGhXY0w4STU0ejRIYkJGeGxCVXNKcytMMzVwd0VCY2x4WmFjVTRUejN1NXhOd2lqQXNGRkNVSnd2TThPNExtME05U0xiN3dMRXowT01LSVQ3QzFUNU4iLCJtYWMiOiI2MWJiMWU3NmI5MTAwYjc2NjU5YWE1NGE1MTBmOTkzMzZkOTU3OTBhMTQxNWQwZjc4MmI0MWY0ZjEyMmM5YWYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InV0SVVqZ1B3VFZDRWZaNnlHOUdLUkE9PSIsInZhbHVlIjoiT1hDaG9TRnVZZC9JMndLbXBqZDcvcEo5Nkxkb3BIQTNOTkZXTnptMHB3cEVkZ01yOXc5bmROcHlUU1AyYmhwaDROVlNTVmhqS2w1VGJRS2hKVXBLdUoydllMY1JSY091UjhxMHA2RUNxYlZTdXdqYWU0a3dyK0lQTngrNS9tNlQiLCJtYWMiOiI1YWVlNjNjMDVjMWQyZjY3MDY4ZGI5ZDFlZjkyNzQ4ZWNjYTQwYjhjNzhjOTE0N2JlZThlOWJmZDAzNGI2YzFmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17205\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=npWoOzECrGkZ5SlSFw61KA4sOhXyHhL8Uvu%2F6w26kX8ZHhnDxQh7yNyrZ%2FBeckBdH96AJeJiPvxfp7TEb%2B6POrfGDFBRUI9x14ULsA%3D%3D\"}]}\r\nlast-modified: Thu, 26 Oct 2023 02:14:46 GMT\r\naccept-ranges: bytes\r\nage: 1257\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 994d7fc4e97335a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17205,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"473527b4d26af401bc3a7be88c0902f6","sha1":"adef38689c29ea9282b011bfa1e563e9f1f4f2ef","sha256":"8b63fd6be7be8214ab52b872393f3979843d3fbe16063f28141bc803f85b8707","sha512":"d4d0f3d718c6f974d21cbd0115a4d8cd682592cf07c526128c75c3a356d8150db7adfeb1b26144247a594b1ccf6d954fb645060d929dec806827c8fda3c0204a","ssdeep":"384:Dnx6j6ZkGSBdifAUwkhsmZjAG+lTJRTdIQOcgCkHnf4ZJ+:bx6j6ZkGmifbKuATlrT6/c8nf4D+","tlshash":"6172d0a71ef82c656a57272f290354712ef4700dbd4f001761a4a69909e55acfe0fd1b","first_seen":"2025-04-11T23:00:29.341048Z","last_seen":"2026-04-16T14:36:34.094685Z","times_seen":14,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"shahid-4u.my","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/photos/servers-images/1733264461.webp","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:04.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shahid-4u.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Oct 2025 17:43:52 GMT","end":"Fri, 23 Jan 2026 18:39:03 GMT"},"fingerprint":{"sha1":"72:00:52:7E:0E:E8:3C:1C:CB:F9:11:91:D6:47:93:A0:1F:DE:A4:88","sha256":"6B:0B:94:BF:97:85:78:77:C3:9E:34:62:8D:26:9E:5F:68:EE:21:D5:64:2A:2D:77:E5:3D:B7:67:4C:63:A9:22"}}},"request":{"raw":"GET /photos/servers-images/1733264461.webp HTTP/1.1\r\nHost: shahid-4u.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9\r\nCookie: XSRF-TOKEN=eyJpdiI6IktlMlBxOXlKM05mZVF3TTlRVkUyUnc9PSIsInZhbHVlIjoiZHZES0VITXVpRUx0YzVBcEx0RFVuQ1NnaFpuZzNnQXJnZWs5cEltcWRJNGhXY0w4STU0ejRIYkJGeGxCVXNKcytMMzVwd0VCY2x4WmFjVTRUejN1NXhOd2lqQXNGRkNVSnd2TThPNExtME05U0xiN3dMRXowT01LSVQ3QzFUNU4iLCJtYWMiOiI2MWJiMWU3NmI5MTAwYjc2NjU5YWE1NGE1MTBmOTkzMzZkOTU3OTBhMTQxNWQwZjc4MmI0MWY0ZjEyMmM5YWYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InV0SVVqZ1B3VFZDRWZaNnlHOUdLUkE9PSIsInZhbHVlIjoiT1hDaG9TRnVZZC9JMndLbXBqZDcvcEo5Nkxkb3BIQTNOTkZXTnptMHB3cEVkZ01yOXc5bmROcHlUU1AyYmhwaDROVlNTVmhqS2w1VGJRS2hKVXBLdUoydllMY1JSY091UjhxMHA2RUNxYlZTdXdqYWU0a3dyK0lQTngrNS9tNlQiLCJtYWMiOiI1YWVlNjNjMDVjMWQyZjY3MDY4ZGI5ZDFlZjkyNzQ4ZWNjYTQwYjhjNzhjOTE0N2JlZThlOWJmZDAzNGI2YzFmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5212\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZEv8j09Rq%2Bd1qOv6jI0tK5N8xvmquB3mLXVO7bKDXNYKq4kUtACtCBPbGZhftK7lzCPfdOJ16%2BmJN%2BF5%2FGKQkAV4idzQY7TLZ8LDmw%3D%3D\"}]}\r\nlast-modified: Tue, 03 Dec 2024 12:21:00 GMT\r\naccept-ranges: bytes\r\nage: 2940\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 994d7fc4f97e35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5212,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 314 x 298, 8-bit colormap, non-interlaced","md5":"a3ccc95b54f615bc25552d07f568ce4d","sha1":"6bd7ff0a96fdcc7938990d75c9e5f33c680ffee5","sha256":"1cd08be1ca4bb959ca97cfd660cc23b545eb735b75442ae9d273a3d594f06b0a","sha512":"123d5908385b6bff1fbe39623c2401088fb104de5a1de2287cafd358044eef7dbd44d05b34f3f636238bb4e437c7841524467ea44b4331a192215dc09e5500d4","ssdeep":"96:lJG/riFPSEahN3rUunc4uMNXtXJ8GxAP7qsKvZms8c/y7In:lJGjiNgtrZcVMN9J8GxqqP+y","tlshash":"a4b18cbfeac5c403e342e8e627e12a213b601ad76973990d55ebb87f22c04380929086","first_seen":"2025-04-11T23:00:29.346459Z","last_seen":"2026-03-10T07:50:05.14072Z","times_seen":29,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"shahid-4u.my","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bvtpk.com/tag.min.js","fqdn":"bvtpk.com","domain":"bvtpk.com","tld":"com"},"ip":{"addr":"172.67.154.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fdewsdc.sbs/embed/2426vbhxujg1","date":"2025-10-26T22:48:06.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bvtpk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 16:15:33 GMT","end":"Mon, 08 Dec 2025 17:13:51 GMT"},"fingerprint":{"sha1":"57:53:1B:12:8D:B5:A7:B6:96:E2:B4:FE:90:A1:D8:FA:24:94:9A:B9","sha256":"4E:2A:10:4F:06:F6:4E:34:B3:5A:E6:9B:A2:C7:FC:B2:A4:7D:55:44:3D:06:2B:38:35:A7:52:1D:F2:4E:80:5E"}}},"request":{"raw":"GET /tag.min.js HTTP/1.1\r\nHost: bvtpk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fdewsdc.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 22:48:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-trace-id: 16cb897c3d3be7e4f36e0a2682f91c3d\r\ncache-control: public, max-age=600, s-maxage=1800\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 828\r\ncf-cache-status: HIT\r\nlast-modified: Sun, 26 Oct 2025 22:34:18 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QkJd4CI%2BVJNWFj6tGRAoOkbS%2BYmY2CDhtUnQ%2F3TCBCgbKkWvT29nkux5vVxUUDhhd6CkffKzSHjTNonCQe%2FsjbCMIC33i7s%3D\"}]}\r\ncf-ray: 994d7fd3bf8e5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109979,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"eeaae1cd96fced67aafdbb7b198ddc18","sha1":"27d2fdbaeef79401288886bd276079809bb9f039","sha256":"8f0af4ab5e06c6170903b6168d1dc3d63d750f4e063263a431583d1fa5e71cc0","sha512":"571e4e189fbfc71dbe4709cc50571e14a31c059bc428253abc48f0fb7239fd528fb43ca868b0509e1b2f3a3acd524acab5db4e14e1dec132080f10f4c57fa6da","ssdeep":"1536:IMukxpFON+nJivD2eJXWBTN7aZeCm68L3b7Az0SAF9Q4+DIVVIBUCn:3uCFOqJQDBBWxqeCm68W0SI9z34UCn","tlshash":"29b33bda2266241612bf8034445bdd0db5aecd8104cdcdb8e0e6b8662d78b16d3fbfd9","first_seen":"2025-10-23T13:04:31.962589Z","last_seen":"2025-10-26T22:51:31.539862Z","times_seen":61,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":11,"dns":1,"connect":1,"send":0,"wait":6,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/js/jquery.cookie.js","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fdewsdc.sbs/embed/2426vbhxujg1","date":"2025-10-26T22:48:06.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fdewsdc.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 11:23:48 GMT","end":"Sat, 24 Jan 2026 12:22:31 GMT"},"fingerprint":{"sha1":"18:A9:5F:75:6F:5C:6A:DB:A5:C7:E9:9C:D9:5E:EF:55:8A:D4:84:4E","sha256":"83:01:F8:71:CB:8A:5A:24:1C:D7:9C:E8:35:44:50:3E:35:D4:A4:A8:33:0C:3A:4C:47:3A:27:0F:AE:68:6F:6F"}}},"request":{"raw":"GET /js/jquery.cookie.js HTTP/1.1\r\nHost: fdewsdc.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fdewsdc.sbs/embed/2426vbhxujg1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 31 May 2011 09:53:56 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rTb7q%2FI0X55R63Wg4Sd3t92KBlA9V5JQKqcH3JZKvu%2FAXTtKJEqqcTm6kS6edwc%2FECn2mZri23X2CBqYPruXCyyLnd971IpRkNQv\"}]}\r\netag: W/\"4de4bab4-10eb\"\r\nexpires: Sun, 02 Nov 2025 22:48:06 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 994d7fceec2e0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4331,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"ae0c2c5d8f01f7d35bb698bb618a62f7","sha1":"63556a22ddea1c5f23a5cf7d0b6d35c7aab54e20","sha256":"75aef2e95ea7f3a70999396fba0c2ab866f4ff06313cf1b07780d800a5fc1ebc","sha512":"eac94ca9d884692af8bdf12aa6e902a3be4eed0772ad8f2932ac1c3328b83a7351cdf743a409bbc0a3cd385956c08d3203d51c572bb1680489e37330fe27a2bb","ssdeep":"96:L4BZxb64Ng7V8cNwpGylRCsKZcj1JXulL6M/aGByLskPSP4lBCClf1wgCyC:LQnb6eg7DgCsk8fgZJkPSPa+gCyC","tlshash":"2e91fd293a0d231d149353f57aee10c8a930d632216ad46c744cb6b06f00c63ddfbbea","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-04-16T09:18:21.618052Z","times_seen":4385,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/player/jw8/jwplayer.js?v=6","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fdewsdc.sbs/embed/2426vbhxujg1","date":"2025-10-26T22:48:06.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fdewsdc.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 11:23:48 GMT","end":"Sat, 24 Jan 2026 12:22:31 GMT"},"fingerprint":{"sha1":"18:A9:5F:75:6F:5C:6A:DB:A5:C7:E9:9C:D9:5E:EF:55:8A:D4:84:4E","sha256":"83:01:F8:71:CB:8A:5A:24:1C:D7:9C:E8:35:44:50:3E:35:D4:A4:A8:33:0C:3A:4C:47:3A:27:0F:AE:68:6F:6F"}}},"request":{"raw":"GET /player/jw8/jwplayer.js?v=6 HTTP/1.1\r\nHost: fdewsdc.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fdewsdc.sbs/embed/2426vbhxujg1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m8oefNZDd522huK0YcrNmESZ6oZxfw04usmUJAHs%2BM1aNUi9F62ss4OX96%2FhbUcJ3Bb4xOCSTi2UqHXH02W0MD57XZi%2FXPcSdYld\"}]}\r\nlast-modified: Fri, 28 Mar 2025 05:48:51 GMT\r\netag: W/\"24254-631609ffc56c0\"\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 994d7fcefc300731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148052,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65503)","md5":"581ff912c413cd78a30f5c212f42271a","sha1":"79af689432d0f20cd1d951eb9436711da07decd4","sha256":"c708d26c24b48c3343e8cc7879d07e8ca6f23d1cc1e5df165a9f8e24a7c5830e","sha512":"c6185ea9db6db8786aa1636537595a5f061745caf287602beafc2dca984b1eceafeb3651109cad8cf45be3dba2a76a201758c6aaa7d7fb1adc8e07e95a39f41b","ssdeep":"1536:ELyl/ByW1iqxGJaGB2lAqU6ePRtwoIWz0Bk+5cm3wUn+yUi3LAalYqlkcRPUeJaQ:L4pknUi3LAbdhHwSm","tlshash":"99e339a631c2f4a613e264c7e47a4005f1790988744de8a4faacecd67956907b1b3ffc","first_seen":"2025-04-01T21:32:19.723959Z","last_seen":"2026-04-02T13:28:52.626488Z","times_seen":603,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:06.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shahid-4u.my\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 26 Oct 2025 22:48:06 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nAccess-Control-Allow-Origin: https://shahid-4u.my\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: private, max-age=5\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":664,"timings":{"blocked":274,"dns":0,"connect":93,"send":0,"wait":103,"receive":1,"ssl":189},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/player/jw8/vast.js?v=32","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fdewsdc.sbs/embed/2426vbhxujg1","date":"2025-10-26T22:48:06.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fdewsdc.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 11:23:48 GMT","end":"Sat, 24 Jan 2026 12:22:31 GMT"},"fingerprint":{"sha1":"18:A9:5F:75:6F:5C:6A:DB:A5:C7:E9:9C:D9:5E:EF:55:8A:D4:84:4E","sha256":"83:01:F8:71:CB:8A:5A:24:1C:D7:9C:E8:35:44:50:3E:35:D4:A4:A8:33:0C:3A:4C:47:3A:27:0F:AE:68:6F:6F"}}},"request":{"raw":"GET /player/jw8/vast.js?v=32 HTTP/1.1\r\nHost: fdewsdc.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fdewsdc.sbs/embed/2426vbhxujg1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:07 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hdF6oaObhG%2BB4SQxab%2FG%2BDJJ%2BdgEXyEyQjZeBb4PCWhAAeqY6wkhMEo4T0vT7ovMm%2FcWdI%2BXySfjTmCSVlglRamx4DKOnPRUBet8\"}]}\r\nlast-modified: Tue, 10 Dec 2024 07:24:43 GMT\r\netag: W/\"1b653-628e55ff864c0\"\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 994d7fd32c9b0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112211,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1b3eb53abc624a51f5e226d08758ddf3","sha1":"6cca061ec7c41313ec2027eaaca76fa9dfad750b","sha256":"73788e3233d5113578082f78869724925d3e4dd2c9d02fdc0bf84d6aed3a768e","sha512":"c6c7bbc31213d98134d98087ad912f1244b2dc7c7914247baac80d534663ab75135c004bf5473044db9e082302477b9d812b0a0db4c5f21b3e27508c26c265c5","ssdeep":"1536:twVnle2Qmbe005pkZ/gbxRYpYItN6X6ud7srzIjpitB39BsLIYOONMQHMkBxLNwO:tEnPRIN1D2zXkIYdN7Hnf","tlshash":"acb308872399d52247e484e960344212b335060f780a83acf67dfdef1d5ea4b76bab74","first_seen":"2025-04-01T21:32:19.700252Z","last_seen":"2026-04-02T13:28:52.634565Z","times_seen":561,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":102,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adsco.re/p","fqdn":"adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:07.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"POST /p HTTP/1.1\r\nHost: adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Length: 2481\r\nOrigin: https://shahid-4u.my\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 26 Oct 2025 22:48:07 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAS-P-1: OK nyc123\r\nAS-P-2: OK\r\nAS-P-3: OK\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: no-transform\r\nAccept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR\r\nAccess-Control-Allow-Origin: https://shahid-4u.my\r\nAccess-Control-Allow-Credentials: true\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1234,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (1234), with no line terminators","md5":"284df49da16a3aa5f012e56839d767ef","sha1":"f28289c41d0c205563ec08149b469960d4498bdf","sha256":"51fef609d36f5c3f55a11cf8824768457d4f410a82d8aed881eb2b55084b950a","sha512":"7bae3412b4d2b7749aa8647e49d48c1b3833d2aadb3569d56042d5f06d3ea7384b336a4667ecbd5159d95ae68a5555f90959f6879605119c3f87caa1cb12b417","ssdeep":"","tlshash":"2121b7a466621661d8a3dce020ce184d19a10eb74fd5977abdc802a053591e4163da1d","first_seen":"2025-10-26T22:48:42.303683Z","last_seen":"2025-10-26T22:48:42.303683Z","times_seen":1,"resource_available":false,"data":null}},"time_used":705,"timings":{"blocked":288,"dns":2,"connect":92,"send":0,"wait":127,"receive":2,"ssl":189},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fdewsdc.sbs/embed/2426vbhxujg1","date":"2025-10-26T22:48:07.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 15:37:01 GMT","end":"Sat, 24 Jan 2026 16:36:49 GMT"},"fingerprint":{"sha1":"84:49:FF:DC:BD:D8:BA:3D:2F:25:0B:EF:CA:E4:6D:73:79:8C:F9:7D","sha256":"AF:21:94:4D:14:07:CF:FC:E5:3C:3C:F4:AC:47:9E:83:98:6A:62:87:FB:8C:27:43:25:FB:97:CC:47:15:99:4A"}}},"request":{"raw":"GET /gid.js HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://fdewsdc.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fdewsdc.sbs/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 22:48:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://fdewsdc.sbs\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=08026e7b7afb4ad7f3d146a612e738bd; expires=Mon, 26 Oct 2026 22:48:07 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 994d7fd5adb7c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6c31135657b08ba15fd167e5406423c1","sha1":"90d3df25114f9ea25070c974cd7e5c3d405b4812","sha256":"5b9efd7979ae888b93af77f1e00cb5f2c0a5d0c20501fd20d46432c16883a7cb","sha512":"e5e3fe4515d4db3009b1ae5ce00da6abf045de9895a4d15025ad0be0bcaa616b7ce10003badd6e1daa0b9b1c9d5c7591a1188d1f9c6377f7ef9bf0bd92d1b56a","ssdeep":"","tlshash":"e7a022800a0c0b800a80223808838b00030002c0ea82b30cc2c0c080228b28ca28a300","first_seen":"2025-10-26T22:48:42.304481Z","last_seen":"2025-10-26T22:48:42.304481Z","times_seen":1,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":23,"dns":2,"connect":1,"send":0,"wait":35,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/photos/servers-images/1750181486.webp","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:04.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shahid-4u.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Oct 2025 17:43:52 GMT","end":"Fri, 23 Jan 2026 18:39:03 GMT"},"fingerprint":{"sha1":"72:00:52:7E:0E:E8:3C:1C:CB:F9:11:91:D6:47:93:A0:1F:DE:A4:88","sha256":"6B:0B:94:BF:97:85:78:77:C3:9E:34:62:8D:26:9E:5F:68:EE:21:D5:64:2A:2D:77:E5:3D:B7:67:4C:63:A9:22"}}},"request":{"raw":"GET /photos/servers-images/1750181486.webp HTTP/1.1\r\nHost: shahid-4u.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9\r\nCookie: XSRF-TOKEN=eyJpdiI6IktlMlBxOXlKM05mZVF3TTlRVkUyUnc9PSIsInZhbHVlIjoiZHZES0VITXVpRUx0YzVBcEx0RFVuQ1NnaFpuZzNnQXJnZWs5cEltcWRJNGhXY0w4STU0ejRIYkJGeGxCVXNKcytMMzVwd0VCY2x4WmFjVTRUejN1NXhOd2lqQXNGRkNVSnd2TThPNExtME05U0xiN3dMRXowT01LSVQ3QzFUNU4iLCJtYWMiOiI2MWJiMWU3NmI5MTAwYjc2NjU5YWE1NGE1MTBmOTkzMzZkOTU3OTBhMTQxNWQwZjc4MmI0MWY0ZjEyMmM5YWYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InV0SVVqZ1B3VFZDRWZaNnlHOUdLUkE9PSIsInZhbHVlIjoiT1hDaG9TRnVZZC9JMndLbXBqZDcvcEo5Nkxkb3BIQTNOTkZXTnptMHB3cEVkZ01yOXc5bmROcHlUU1AyYmhwaDROVlNTVmhqS2w1VGJRS2hKVXBLdUoydllMY1JSY091UjhxMHA2RUNxYlZTdXdqYWU0a3dyK0lQTngrNS9tNlQiLCJtYWMiOiI1YWVlNjNjMDVjMWQyZjY3MDY4ZGI5ZDFlZjkyNzQ4ZWNjYTQwYjhjNzhjOTE0N2JlZThlOWJmZDAzNGI2YzFmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30684\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EZaxS4G3VE9QUGwByAd6VZ3txW5uk9S0yKMvPiypJEd%2ByXIDZilBv1lQDCIZmT8TdNLxgLYKh3EpbCccf0KXHjeF6ATDk5YSq4O4%2Fg%3D%3D\"}]}\r\nlast-modified: Tue, 17 Jun 2025 17:31:26 GMT\r\naccept-ranges: bytes\r\nage: 5939\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 994d7fc4e97735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30684,"size_decoded":0,"mime_type":"image/webp","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 640x640, components 3","md5":"c06993f4a7065ec85d17cc04f0bac460","sha1":"7da1cb6bf753c8155ed048e55dad7fc2e3f6dd6f","sha256":"5bd05e370db3383f4c6adf4d6b685f85ad49c346e90153855252079d25aba92a","sha512":"14056d2965480a520e0561c928790e57cb889281404f89009368ee1e1ac76902f37dcc1ffbb125566a74307633c56f4d04147b976403bb7e8ea3d0cfa4a064c0","ssdeep":"768:K0bOb1VuzKaIaUbuGD8iC8DXEtn5+1nmi:K0sHmnI8p8DUymi","tlshash":"40d2e0c7ce796803e1952731c6d32670fba97fba139d8a5657ea6309b0296d2c743302","first_seen":"2023-10-30T00:28:26Z","last_seen":"2026-03-10T07:50:05.170236Z","times_seen":14,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"shahid-4u.my","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/cf-fonts/s/tajawal/5.0.11/latin/500/normal.woff2","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:04.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shahid-4u.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Oct 2025 17:43:52 GMT","end":"Fri, 23 Jan 2026 18:39:03 GMT"},"fingerprint":{"sha1":"72:00:52:7E:0E:E8:3C:1C:CB:F9:11:91:D6:47:93:A0:1F:DE:A4:88","sha256":"6B:0B:94:BF:97:85:78:77:C3:9E:34:62:8D:26:9E:5F:68:EE:21:D5:64:2A:2D:77:E5:3D:B7:67:4C:63:A9:22"}}},"request":{"raw":"GET /cf-fonts/s/tajawal/5.0.11/latin/500/normal.woff2 HTTP/1.1\r\nHost: shahid-4u.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9\r\nCookie: XSRF-TOKEN=eyJpdiI6IktlMlBxOXlKM05mZVF3TTlRVkUyUnc9PSIsInZhbHVlIjoiZHZES0VITXVpRUx0YzVBcEx0RFVuQ1NnaFpuZzNnQXJnZWs5cEltcWRJNGhXY0w4STU0ejRIYkJGeGxCVXNKcytMMzVwd0VCY2x4WmFjVTRUejN1NXhOd2lqQXNGRkNVSnd2TThPNExtME05U0xiN3dMRXowT01LSVQ3QzFUNU4iLCJtYWMiOiI2MWJiMWU3NmI5MTAwYjc2NjU5YWE1NGE1MTBmOTkzMzZkOTU3OTBhMTQxNWQwZjc4MmI0MWY0ZjEyMmM5YWYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InV0SVVqZ1B3VFZDRWZaNnlHOUdLUkE9PSIsInZhbHVlIjoiT1hDaG9TRnVZZC9JMndLbXBqZDcvcEo5Nkxkb3BIQTNOTkZXTnptMHB3cEVkZ01yOXc5bmROcHlUU1AyYmhwaDROVlNTVmhqS2w1VGJRS2hKVXBLdUoydllMY1JSY091UjhxMHA2RUNxYlZTdXdqYWU0a3dyK0lQTngrNS9tNlQiLCJtYWMiOiI1YWVlNjNjMDVjMWQyZjY3MDY4ZGI5ZDFlZjkyNzQ4ZWNjYTQwYjhjNzhjOTE0N2JlZThlOWJmZDAzNGI2YzFmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 26 Oct 2025 22:48:04 GMT\r\ncontent-length: 9900\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DDMGzeoWKXXN8MZ86SW35StSJs2Bmfjo0yY4AO6z4HCKB%2F51TbCef3WzD36zIOcvkSZNGg%2FT8AvxUtqC0MR%2Ftrp%2B%2FXF%2FaENe24R9GA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 994d7fc609ba35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9900,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9900, version 1.0","md5":"7256be46335261573e1ab1dc7f6539f0","sha1":"abeac1b7890a903ac951c522bc9b3039ec6fa1f8","sha256":"9986de5db80ec050300f1cea25d651a5779ae62b91a39b5667ac23d0c7668cbb","sha512":"16a93177eb4340d61c62e2d9605c8249b0558aa42d6490210e94939fb155379f0694c72225b55e471979134cc111104867676cebc5901af21aa4818821e3591b","ssdeep":"192:QC2S9zsmVUjqM+Xtixu2qtVhsLlYcPOYnOpTg++DaN8K0EUiBbxm4:RVXXtrRhsLp2yug+hCqBbp","tlshash":"ef12b01858048c6ef2f29c522a4d2ab2c403a27fd9d3e6a65f452221df816be717dc0e","first_seen":"2023-04-30T20:16:01Z","last_seen":"2026-04-16T18:32:06.482102Z","times_seen":1209,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"shahid-4u.my","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/js/localstorage-slim.js","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fdewsdc.sbs/embed/2426vbhxujg1","date":"2025-10-26T22:48:06.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fdewsdc.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 11:23:48 GMT","end":"Sat, 24 Jan 2026 12:22:31 GMT"},"fingerprint":{"sha1":"18:A9:5F:75:6F:5C:6A:DB:A5:C7:E9:9C:D9:5E:EF:55:8A:D4:84:4E","sha256":"83:01:F8:71:CB:8A:5A:24:1C:D7:9C:E8:35:44:50:3E:35:D4:A4:A8:33:0C:3A:4C:47:3A:27:0F:AE:68:6F:6F"}}},"request":{"raw":"GET /js/localstorage-slim.js HTTP/1.1\r\nHost: fdewsdc.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fdewsdc.sbs/embed/2426vbhxujg1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 16 Nov 2021 10:32:06 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eCsE8HQ%2BP%2FkEAHA0F4Go62LVZOIszU357Om24l8Cyhd2eUC9oZhiB%2Bgu1SirMr4lxdeWfrDeKFF44F3b1KhU7L1ko0dFsE%2Fk8Tn4\"}]}\r\netag: W/\"619388a6-810\"\r\nexpires: Sun, 02 Nov 2025 22:48:06 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 994d7fcefc310731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2064,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2063)","md5":"ba6facacb00551830393d637195804cf","sha1":"77d2d2802ee44767b33a2d679945cc3efa3619cc","sha256":"41bb37c8133d8e5c128820cfbe03bcbf63ce256bcbd60a1a76143472d8668e38","sha512":"90aa07250eb414ec22765ab6922f593ed3186faecc02008f0331c3e3807cace76861e01028142015308341e955f151b609d08b7d354ff2d27e0ff04ebfde81f9","ssdeep":"","tlshash":"ea41118275e1d9904be004e728b0c002e638992e705d62d0f7b7dd827c9909bcfb57fa","first_seen":"2023-03-07T15:52:27Z","last_seen":"2026-04-16T09:18:21.624022Z","times_seen":1490,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re:2087/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":2087,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:06.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://shahid-4u.my\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 26 Oct 2025 22:48:06 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nAccess-Control-Allow-Origin: https://shahid-4u.my\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: private, max-age=5\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":681,"timings":{"blocked":282,"dns":0,"connect":97,"send":0,"wait":104,"receive":0,"ssl":190},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/dl?op=get_slides\u0026length=8822\u0026url=https://pixibay.cc/2426vbhxujg10000.jpg","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fdewsdc.sbs/embed/2426vbhxujg1","date":"2025-10-26T22:48:07.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fdewsdc.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 11:23:48 GMT","end":"Sat, 24 Jan 2026 12:22:31 GMT"},"fingerprint":{"sha1":"18:A9:5F:75:6F:5C:6A:DB:A5:C7:E9:9C:D9:5E:EF:55:8A:D4:84:4E","sha256":"83:01:F8:71:CB:8A:5A:24:1C:D7:9C:E8:35:44:50:3E:35:D4:A4:A8:33:0C:3A:4C:47:3A:27:0F:AE:68:6F:6F"}}},"request":{"raw":"GET /dl?op=get_slides\u0026length=8822\u0026url=https://pixibay.cc/2426vbhxujg10000.jpg HTTP/1.1\r\nHost: fdewsdc.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fdewsdc.sbs/embed/2426vbhxujg1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:07 GMT\r\ncontent-type: text/vtt\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tt2vhrn%2FYKXxGfym9BxIpJyaQZs7qRgSf6kkPxaRSYbNwIrfzQoe3wih26RQYkFFjbNXkcZ2HS3QidjpgkvNV%2FxsL9oUdhnxG0id\"}]}\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncf-ray: 994d7fd6dd190731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9228,"size_decoded":0,"mime_type":"text/vtt","magic":"WebVTT subtitles, ASCII text","md5":"a177562ba14cc338f329f0f13b81d1b8","sha1":"fb6f6dd7feb1ad8838d885c933c0df6b257bcd1a","sha256":"589dfb5e1c94d678be50f242b99572e9edd4972db7654fb5feb8cd5c813f57a8","sha512":"c45dd7df4b4df7300d1bf1048556f8afe1772d229bcf256d6a7ad0079eabaaccc92a524af1d0c2b4d5f88d6031cea4f21c7587ea80443baca543082a4219992c","ssdeep":"48:LdScXcCOcErumbFUFchMrdDuczC0FFamv3IRJqxXwI8LF0ounMBqtVRPIp/oaIFY:LbibNBdQfTv2C6pqaDBcpW93","tlshash":"2912e4ea47d14876e5e34bf6e3e47e5cd213368feddd8212f9b024665ecaa348c90094","first_seen":"2025-10-26T22:48:42.307431Z","last_seen":"2025-10-26T22:48:42.307431Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x3os.com/5/9636562/?oo=1\u0026js_build=iclick-v1.1602.0\u0026userId=08026e7b7afb4ad7f3d146a612e738bd\u0026dmn=bvtpk.com\u0026tt=2\u0026ix=1","fqdn":"x3os.com","domain":"x3os.com","tld":"com"},"ip":{"addr":"139.45.196.64","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fdewsdc.sbs/embed/2426vbhxujg1","date":"2025-10-26T22:48:08.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"x3os.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Sep 2025 05:23:11 GMT","end":"Sun, 28 Dec 2025 05:23:10 GMT"},"fingerprint":{"sha1":"4C:6E:3B:CA:38:7D:B2:00:EF:B4:4F:88:9B:3E:29:55:91:FE:AF:0E","sha256":"D2:5C:87:BC:0F:B8:02:33:A0:8D:AD:46:BB:C5:BC:CF:EF:1B:AA:A6:7C:F2:DE:D3:6F:DC:A2:89:AC:97:C0:87"}}},"request":{"raw":"POST /5/9636562/?oo=1\u0026js_build=iclick-v1.1602.0\u0026userId=08026e7b7afb4ad7f3d146a612e738bd\u0026dmn=bvtpk.com\u0026tt=2\u0026ix=1 HTTP/1.1\r\nHost: x3os.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2647\r\nOrigin: https://fdewsdc.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fdewsdc.sbs/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 22:48:08 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://fdewsdc.sbs\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":351,"timings":{"blocked":160,"dns":70,"connect":28,"send":0,"wait":30,"receive":1,"ssl":58},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"x3os.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/photos/servers-images/1736257853.webp","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:04.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shahid-4u.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Oct 2025 17:43:52 GMT","end":"Fri, 23 Jan 2026 18:39:03 GMT"},"fingerprint":{"sha1":"72:00:52:7E:0E:E8:3C:1C:CB:F9:11:91:D6:47:93:A0:1F:DE:A4:88","sha256":"6B:0B:94:BF:97:85:78:77:C3:9E:34:62:8D:26:9E:5F:68:EE:21:D5:64:2A:2D:77:E5:3D:B7:67:4C:63:A9:22"}}},"request":{"raw":"GET /photos/servers-images/1736257853.webp HTTP/1.1\r\nHost: shahid-4u.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9\r\nCookie: XSRF-TOKEN=eyJpdiI6IktlMlBxOXlKM05mZVF3TTlRVkUyUnc9PSIsInZhbHVlIjoiZHZES0VITXVpRUx0YzVBcEx0RFVuQ1NnaFpuZzNnQXJnZWs5cEltcWRJNGhXY0w4STU0ejRIYkJGeGxCVXNKcytMMzVwd0VCY2x4WmFjVTRUejN1NXhOd2lqQXNGRkNVSnd2TThPNExtME05U0xiN3dMRXowT01LSVQ3QzFUNU4iLCJtYWMiOiI2MWJiMWU3NmI5MTAwYjc2NjU5YWE1NGE1MTBmOTkzMzZkOTU3OTBhMTQxNWQwZjc4MmI0MWY0ZjEyMmM5YWYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InV0SVVqZ1B3VFZDRWZaNnlHOUdLUkE9PSIsInZhbHVlIjoiT1hDaG9TRnVZZC9JMndLbXBqZDcvcEo5Nkxkb3BIQTNOTkZXTnptMHB3cEVkZ01yOXc5bmROcHlUU1AyYmhwaDROVlNTVmhqS2w1VGJRS2hKVXBLdUoydllMY1JSY091UjhxMHA2RUNxYlZTdXdqYWU0a3dyK0lQTngrNS9tNlQiLCJtYWMiOiI1YWVlNjNjMDVjMWQyZjY3MDY4ZGI5ZDFlZjkyNzQ4ZWNjYTQwYjhjNzhjOTE0N2JlZThlOWJmZDAzNGI2YzFmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1614\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E%2FUF5bZj5aHufgv2v9i4SMh56Q0VcV6SGAt9gGZJ9KF4xT1Q%2BWP%2FZSsMyxnVLGlOBKF%2Fj6cFUE6JGTUAhxV2NXVY0X2%2F02J9g1bvLw%3D%3D\"}]}\r\nlast-modified: Tue, 07 Jan 2025 03:50:52 GMT\r\naccept-ranges: bytes\r\nage: 5939\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 994d7fc4e97135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1614,"size_decoded":0,"mime_type":"image/webp","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 64x64, components 3","md5":"62ab75785ea096f7da9a27a6f31abd20","sha1":"64160d2d109f155d3ca1bdcd124775787c1e4067","sha256":"fb43505888974ad26477e6287c4937dc30969cdd13543f3e5e305a9be19a4153","sha512":"25289406d75d8eb0f4b47b337f3ca73c1fc3563d4cc948db0d28fe7f24bdba1d95d499409dca356f58425aa4c3b222ccd527f1a0c33f7781dcea8ad250bc334e","ssdeep":"","tlshash":"9631c9777769ed13f9e240360afccba45204fa15b06b4ba630a43c19b5934dd5aa09cd","first_seen":"2025-04-11T23:00:29.350319Z","last_seen":"2026-03-14T01:45:00.899087Z","times_seen":17,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"shahid-4u.my","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/stream/WVftWa42qUmFeWvB-wQNQg/hjkrhuihghfvu/1761562085/19092947/master.m3u8","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fdewsdc.sbs/embed/2426vbhxujg1","date":"2025-10-26T22:48:07.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fdewsdc.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 11:23:48 GMT","end":"Sat, 24 Jan 2026 12:22:31 GMT"},"fingerprint":{"sha1":"18:A9:5F:75:6F:5C:6A:DB:A5:C7:E9:9C:D9:5E:EF:55:8A:D4:84:4E","sha256":"83:01:F8:71:CB:8A:5A:24:1C:D7:9C:E8:35:44:50:3E:35:D4:A4:A8:33:0C:3A:4C:47:3A:27:0F:AE:68:6F:6F"}}},"request":{"raw":"GET /stream/WVftWa42qUmFeWvB-wQNQg/hjkrhuihghfvu/1761562085/19092947/master.m3u8 HTTP/1.1\r\nHost: fdewsdc.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fdewsdc.sbs/embed/2426vbhxujg1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:07 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FUnyGwFQ%2B7TlJNikWPctVNqj3nCT851nqVS53nwFvkpu30ZiTIyjfSuNrQG0LlTpbbtEaKg0oUStwdsah8z3w5njfxN82FDWqB2f\"}]}\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncf-ray: 994d7fd73d240731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":470,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"1e35590bcf00c6d0be707183af723646","sha1":"78a48ad9db75cde566588646739362408f97e6a1","sha256":"790a0dc5a3f24c99a58548c24433d87c177c34db7e11953b531f3083b2db7bf2","sha512":"51d98c9dc1708ec14b4fc928d47f5745274f4e9e7010597817e62a8d2326765a6555e084ff65d633b7445a670ddc5d513bfadebda262cf7ef3f193ce53426bcb","ssdeep":"","tlshash":"b1f0e9a9bd3dd51a3c28d1cc49cc7626384a29fc048cda78e28505c54ad6c743bba165","first_seen":"2025-10-26T22:48:42.309037Z","last_seen":"2025-10-26T22:48:42.309037Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/photos/servers-images/1714237934.webp","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:04.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shahid-4u.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Oct 2025 17:43:52 GMT","end":"Fri, 23 Jan 2026 18:39:03 GMT"},"fingerprint":{"sha1":"72:00:52:7E:0E:E8:3C:1C:CB:F9:11:91:D6:47:93:A0:1F:DE:A4:88","sha256":"6B:0B:94:BF:97:85:78:77:C3:9E:34:62:8D:26:9E:5F:68:EE:21:D5:64:2A:2D:77:E5:3D:B7:67:4C:63:A9:22"}}},"request":{"raw":"GET /photos/servers-images/1714237934.webp HTTP/1.1\r\nHost: shahid-4u.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9\r\nCookie: XSRF-TOKEN=eyJpdiI6IktlMlBxOXlKM05mZVF3TTlRVkUyUnc9PSIsInZhbHVlIjoiZHZES0VITXVpRUx0YzVBcEx0RFVuQ1NnaFpuZzNnQXJnZWs5cEltcWRJNGhXY0w4STU0ejRIYkJGeGxCVXNKcytMMzVwd0VCY2x4WmFjVTRUejN1NXhOd2lqQXNGRkNVSnd2TThPNExtME05U0xiN3dMRXowT01LSVQ3QzFUNU4iLCJtYWMiOiI2MWJiMWU3NmI5MTAwYjc2NjU5YWE1NGE1MTBmOTkzMzZkOTU3OTBhMTQxNWQwZjc4MmI0MWY0ZjEyMmM5YWYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InV0SVVqZ1B3VFZDRWZaNnlHOUdLUkE9PSIsInZhbHVlIjoiT1hDaG9TRnVZZC9JMndLbXBqZDcvcEo5Nkxkb3BIQTNOTkZXTnptMHB3cEVkZ01yOXc5bmROcHlUU1AyYmhwaDROVlNTVmhqS2w1VGJRS2hKVXBLdUoydllMY1JSY091UjhxMHA2RUNxYlZTdXdqYWU0a3dyK0lQTngrNS9tNlQiLCJtYWMiOiI1YWVlNjNjMDVjMWQyZjY3MDY4ZGI5ZDFlZjkyNzQ4ZWNjYTQwYjhjNzhjOTE0N2JlZThlOWJmZDAzNGI2YzFmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4798\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lqs%2BVB1HPPJV1QUSikEmcQKbsAIQk3oG2NFdRTQnrXuLaPabFbcAvMOQNXXddkQjykaZY%2FeIRQc3aRWPvkfiJVl9LHxndaQcWNmtQA%3D%3D\"}]}\r\nlast-modified: Sat, 27 Apr 2024 07:12:14 GMT\r\naccept-ranges: bytes\r\nage: 7066\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 994d7fc4e96e35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4798,"size_decoded":0,"mime_type":"image/webp","magic":"JPEG image data, JFIF standard 1.00, resolution (DPI), density 120x120, segment length 16, comment: \"LEAD Technologies Inc. V1.01\", baseline, precision 8, 163x162, components 3","md5":"65b5893d0ef3b84eba15061aaa6e0837","sha1":"48889e9f9f4090175bd60b62f8b247f2b9f9eb28","sha256":"cc92e6ae556926359304d4b913a09541d8ea66439be68de288dde29f42ee6514","sha512":"947046f08fba85407dc0b88793a5d310726e87af005ca9321c985da943db20d8ca58111dbad1b3aa037fae9da07797a2dc61457a4612ee8a6860601ad63ba6e8","ssdeep":"96:4yzE8RrDFI9E0zqe3V1CdsXxS4Qj78JR4VdAfMQmqJOp6oNeMV:jFRHmGqqe7CCXoVji4IM/NIoNeMV","tlshash":"39a13bb2735ee3a60ba3852c937c3c769306b6ce5fc642b6381729019600bb5946b62c","first_seen":"2024-08-19T12:54:17.008703Z","last_seen":"2026-03-10T07:50:05.149755Z","times_seen":21,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"shahid-4u.my","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/assets/jquery.js","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:04.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shahid-4u.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Oct 2025 17:43:52 GMT","end":"Fri, 23 Jan 2026 18:39:03 GMT"},"fingerprint":{"sha1":"72:00:52:7E:0E:E8:3C:1C:CB:F9:11:91:D6:47:93:A0:1F:DE:A4:88","sha256":"6B:0B:94:BF:97:85:78:77:C3:9E:34:62:8D:26:9E:5F:68:EE:21:D5:64:2A:2D:77:E5:3D:B7:67:4C:63:A9:22"}}},"request":{"raw":"GET /assets/jquery.js HTTP/1.1\r\nHost: shahid-4u.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9\r\nCookie: XSRF-TOKEN=eyJpdiI6IktlMlBxOXlKM05mZVF3TTlRVkUyUnc9PSIsInZhbHVlIjoiZHZES0VITXVpRUx0YzVBcEx0RFVuQ1NnaFpuZzNnQXJnZWs5cEltcWRJNGhXY0w4STU0ejRIYkJGeGxCVXNKcytMMzVwd0VCY2x4WmFjVTRUejN1NXhOd2lqQXNGRkNVSnd2TThPNExtME05U0xiN3dMRXowT01LSVQ3QzFUNU4iLCJtYWMiOiI2MWJiMWU3NmI5MTAwYjc2NjU5YWE1NGE1MTBmOTkzMzZkOTU3OTBhMTQxNWQwZjc4MmI0MWY0ZjEyMmM5YWYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InV0SVVqZ1B3VFZDRWZaNnlHOUdLUkE9PSIsInZhbHVlIjoiT1hDaG9TRnVZZC9JMndLbXBqZDcvcEo5Nkxkb3BIQTNOTkZXTnptMHB3cEVkZ01yOXc5bmROcHlUU1AyYmhwaDROVlNTVmhqS2w1VGJRS2hKVXBLdUoydllMY1JSY091UjhxMHA2RUNxYlZTdXdqYWU0a3dyK0lQTngrNS9tNlQiLCJtYWMiOiI1YWVlNjNjMDVjMWQyZjY3MDY4ZGI5ZDFlZjkyNzQ4ZWNjYTQwYjhjNzhjOTE0N2JlZThlOWJmZDAzNGI2YzFmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:04 GMT\r\ncontent-type: text/javascript\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nlast-modified: Wed, 12 Jul 2023 08:45:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2940\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nh5XL%2B5lak9C5kjYG2qWntebmhG40YfjspoTe4zKuNi3A5kFtk982ljOJ2rsXIaaf3SxzbdoDLB7tIC6scK87BSD%2FS4ekvfiqXBLgQ%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 994d7fc4f98035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87462,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"4fcf018b5c604c47ae980185cf0167c2","sha1":"fa4ab55b154a5a4c4ef55cfad51a2a2d4407af61","sha256":"32b42f9bc813dd6bad1b45129eade1df8dd1463908f79505209fbfa1aa71018a","sha512":"3ea648f880dcc7bd96685650b232213a6d1056dea2c698c1a3a09f14df04ac4c13e06ad5966341a597280d432aa94aff0c51a39a77ff3602e7754bcd65fc9464","ssdeep":"1536:6KRUXRa8Dgwxcy2jpBNwch96SLk8Ek2BSrBGS1ia/eEk4aV2EXi8SMpQ47GKF:6u1zNwcv9qBy1HOg8SMpQ47GKF","tlshash":"7283f8df77ca706247ab30b9006f550bf276199d684d4400f159d8e9bc78a4a823bf7e","first_seen":"2023-06-05T16:56:04Z","last_seen":"2026-04-16T15:12:53.221883Z","times_seen":1301,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"shahid-4u.my","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/cf-fonts/s/tajawal/5.0.11/arabic/400/normal.woff2","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:04.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shahid-4u.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Oct 2025 17:43:52 GMT","end":"Fri, 23 Jan 2026 18:39:03 GMT"},"fingerprint":{"sha1":"72:00:52:7E:0E:E8:3C:1C:CB:F9:11:91:D6:47:93:A0:1F:DE:A4:88","sha256":"6B:0B:94:BF:97:85:78:77:C3:9E:34:62:8D:26:9E:5F:68:EE:21:D5:64:2A:2D:77:E5:3D:B7:67:4C:63:A9:22"}}},"request":{"raw":"GET /cf-fonts/s/tajawal/5.0.11/arabic/400/normal.woff2 HTTP/1.1\r\nHost: shahid-4u.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9\r\nCookie: XSRF-TOKEN=eyJpdiI6IktlMlBxOXlKM05mZVF3TTlRVkUyUnc9PSIsInZhbHVlIjoiZHZES0VITXVpRUx0YzVBcEx0RFVuQ1NnaFpuZzNnQXJnZWs5cEltcWRJNGhXY0w4STU0ejRIYkJGeGxCVXNKcytMMzVwd0VCY2x4WmFjVTRUejN1NXhOd2lqQXNGRkNVSnd2TThPNExtME05U0xiN3dMRXowT01LSVQ3QzFUNU4iLCJtYWMiOiI2MWJiMWU3NmI5MTAwYjc2NjU5YWE1NGE1MTBmOTkzMzZkOTU3OTBhMTQxNWQwZjc4MmI0MWY0ZjEyMmM5YWYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InV0SVVqZ1B3VFZDRWZaNnlHOUdLUkE9PSIsInZhbHVlIjoiT1hDaG9TRnVZZC9JMndLbXBqZDcvcEo5Nkxkb3BIQTNOTkZXTnptMHB3cEVkZ01yOXc5bmROcHlUU1AyYmhwaDROVlNTVmhqS2w1VGJRS2hKVXBLdUoydllMY1JSY091UjhxMHA2RUNxYlZTdXdqYWU0a3dyK0lQTngrNS9tNlQiLCJtYWMiOiI1YWVlNjNjMDVjMWQyZjY3MDY4ZGI5ZDFlZjkyNzQ4ZWNjYTQwYjhjNzhjOTE0N2JlZThlOWJmZDAzNGI2YzFmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 26 Oct 2025 22:48:04 GMT\r\ncontent-length: 8932\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sp%2FkcU8XJELMzmkIh46CHTuZn7JfWlu31TMycGXTRe8k%2B2t5%2F%2B%2BZ%2BplRstkxpiWX%2BTijBCDvOUfbLX3tW0xY0nwHBTSCehq52CyQCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 994d7fc609bb35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8932,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8932, version 1.0","md5":"d595af28c13f0b004eb0a9694d397e61","sha1":"86dcc0150b2d71bb8c17ec11682cd0babe8256be","sha256":"6c9081fd00db08800850fa7d214593aa94992be5159e97557aa60197252cb95a","sha512":"5d0bafd869e5f466fef09a129e16487dd4d9a9c21d467b68593c3c11ede20d2a0d5162e475a7bbbe28b02aace228afd421fcf58823244ce9edc2a1f967462bea","ssdeep":"192:9Ty/JTr6kaUufAoHUywnSBHrO5msif/nOAQthEck:Q/5ONHl/rt/N","tlshash":"da02bfd97089ea14d057603e1014c1d6db1ea4bd1cae4c8f280bd7ad3eede13be24524","first_seen":"2025-09-09T12:45:33.076239Z","last_seen":"2026-04-16T20:32:20.723051Z","times_seen":953,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"shahid-4u.my","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/faveicon.ico?v=32","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:05.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shahid-4u.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Oct 2025 17:43:52 GMT","end":"Fri, 23 Jan 2026 18:39:03 GMT"},"fingerprint":{"sha1":"72:00:52:7E:0E:E8:3C:1C:CB:F9:11:91:D6:47:93:A0:1F:DE:A4:88","sha256":"6B:0B:94:BF:97:85:78:77:C3:9E:34:62:8D:26:9E:5F:68:EE:21:D5:64:2A:2D:77:E5:3D:B7:67:4C:63:A9:22"}}},"request":{"raw":"GET /faveicon.ico?v=32 HTTP/1.1\r\nHost: shahid-4u.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9\r\nCookie: XSRF-TOKEN=eyJpdiI6IktlMlBxOXlKM05mZVF3TTlRVkUyUnc9PSIsInZhbHVlIjoiZHZES0VITXVpRUx0YzVBcEx0RFVuQ1NnaFpuZzNnQXJnZWs5cEltcWRJNGhXY0w4STU0ejRIYkJGeGxCVXNKcytMMzVwd0VCY2x4WmFjVTRUejN1NXhOd2lqQXNGRkNVSnd2TThPNExtME05U0xiN3dMRXowT01LSVQ3QzFUNU4iLCJtYWMiOiI2MWJiMWU3NmI5MTAwYjc2NjU5YWE1NGE1MTBmOTkzMzZkOTU3OTBhMTQxNWQwZjc4MmI0MWY0ZjEyMmM5YWYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InV0SVVqZ1B3VFZDRWZaNnlHOUdLUkE9PSIsInZhbHVlIjoiT1hDaG9TRnVZZC9JMndLbXBqZDcvcEo5Nkxkb3BIQTNOTkZXTnptMHB3cEVkZ01yOXc5bmROcHlUU1AyYmhwaDROVlNTVmhqS2w1VGJRS2hKVXBLdUoydllMY1JSY091UjhxMHA2RUNxYlZTdXdqYWU0a3dyK0lQTngrNS9tNlQiLCJtYWMiOiI1YWVlNjNjMDVjMWQyZjY3MDY4ZGI5ZDFlZjkyNzQ4ZWNjYTQwYjhjNzhjOTE0N2JlZThlOWJmZDAzNGI2YzFmIiwidGFnIjoiIn0%3D; _ga_BM642X4VSX=GS2.1.s1761518885$o1$g0$t1761518885$j60$l0$h0; _ga=GA1.1.1079226137.1761518885\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:05 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nlast-modified: Wed, 01 Oct 2025 21:30:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 3817\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wuKmR7xDspIgrKekX%2FuaeWr3Op1%2BQ%2B%2FJyYYTA13Un%2BHDmYwpm3yxXRSUIe%2Fu%2BMiJUW4VZHF2b6H8oV29hBRc84dtOTgXgC7SOtXWdw%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 994d7fc96a6735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12155,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 170 x 170, 8-bit colormap, non-interlaced","md5":"bb2e0fcbf11ab7c40e3ab4dfdc22ee14","sha1":"9bdfcd206e08ba565bf72a6de45bbb6aaf24239a","sha256":"315e30bd5f83c761ab888e9590e62d0f4652e87628e8abc11e841ce0e558fb87","sha512":"6d53a1897f930206e6847ccf5d72fff98062041b2307fa40de61e73f51543494f9632c6567ece9688ee6f0757af9db60e129a124e4709fed81b176fe21199137","ssdeep":"192:oorSyV+eGAOJ8xSsHSeEyWS5EsfLdtoFzEJPrmLddJn9ioWe2eVuENouPyggWD:HFGNGxfsdEZrSzio5VuENogj","tlshash":"9842bf09cb97a3459e3028d5e0f39fd89f8ca9fe93566c1184725ba1858cf34d11b9bc","first_seen":"2023-09-30T16:39:32Z","last_seen":"2026-04-11T19:43:19.315644Z","times_seen":213,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"shahid-4u.my","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/js/jquery.cookie.js","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fdewsdc.sbs/embed/2426vbhxujg1","date":"2025-10-26T22:48:06.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fdewsdc.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 11:23:48 GMT","end":"Sat, 24 Jan 2026 12:22:31 GMT"},"fingerprint":{"sha1":"18:A9:5F:75:6F:5C:6A:DB:A5:C7:E9:9C:D9:5E:EF:55:8A:D4:84:4E","sha256":"83:01:F8:71:CB:8A:5A:24:1C:D7:9C:E8:35:44:50:3E:35:D4:A4:A8:33:0C:3A:4C:47:3A:27:0F:AE:68:6F:6F"}}},"request":{"raw":"GET /js/jquery.cookie.js HTTP/1.1\r\nHost: fdewsdc.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fdewsdc.sbs/embed/2426vbhxujg1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 31 May 2011 09:53:56 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LteKytFkG9pCFKVFbuWrUj2c4oMYIFHdouTgD9BIdtaU1adMluvaax5pXsTfWx%2BybNS0H%2BTXwqZzwuSs2jeSht42Kp3x2xGt1cnu\"}]}\r\netag: W/\"4de4bab4-10eb\"\r\nexpires: Sun, 02 Nov 2025 22:48:06 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 994d7fd23c8c0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4331,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"ae0c2c5d8f01f7d35bb698bb618a62f7","sha1":"63556a22ddea1c5f23a5cf7d0b6d35c7aab54e20","sha256":"75aef2e95ea7f3a70999396fba0c2ab866f4ff06313cf1b07780d800a5fc1ebc","sha512":"eac94ca9d884692af8bdf12aa6e902a3be4eed0772ad8f2932ac1c3328b83a7351cdf743a409bbc0a3cd385956c08d3203d51c572bb1680489e37330fe27a2bb","ssdeep":"96:L4BZxb64Ng7V8cNwpGylRCsKZcj1JXulL6M/aGByLskPSP4lBCClf1wgCyC:LQnb6eg7DgCsk8fgZJkPSPa+gCyC","tlshash":"2e91fd293a0d231d149353f57aee10c8a930d632216ad46c744cb6b06f00c63ddfbbea","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-04-16T09:18:21.618052Z","times_seen":4385,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdewsdc.sbs/player/jw8/jwplayer.core.controls.js?v=42","fqdn":"fdewsdc.sbs","domain":"fdewsdc.sbs","tld":"sbs"},"ip":{"addr":"172.67.168.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fdewsdc.sbs/embed/2426vbhxujg1","date":"2025-10-26T22:48:06.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fdewsdc.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 11:23:48 GMT","end":"Sat, 24 Jan 2026 12:22:31 GMT"},"fingerprint":{"sha1":"18:A9:5F:75:6F:5C:6A:DB:A5:C7:E9:9C:D9:5E:EF:55:8A:D4:84:4E","sha256":"83:01:F8:71:CB:8A:5A:24:1C:D7:9C:E8:35:44:50:3E:35:D4:A4:A8:33:0C:3A:4C:47:3A:27:0F:AE:68:6F:6F"}}},"request":{"raw":"GET /player/jw8/jwplayer.core.controls.js?v=42 HTTP/1.1\r\nHost: fdewsdc.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fdewsdc.sbs/embed/2426vbhxujg1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 22:48:07 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KIxid3XU58v9PFUcUmdKa%2B5%2B8uF6hAohvcJQfrlAfrhEvbY5o%2Fzo3MDJlecoxyJFAgU1jvI4tnFQw9JcLscVjB%2BSSfuuKtvCWs1n\"}]}\r\nlast-modified: Thu, 24 Oct 2024 08:24:46 GMT\r\netag: W/\"50d6c-62534bc2f2f80\"\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 994d7fd38ca60731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":331116,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"bc91b5efc8f4bb2482c2d7d5d8d9b691","sha1":"5db922c4c6caf3a7d22f57a21670281d5c31994b","sha256":"f061c139ad68d7ed1360ab6a2c8842466d2913582468c48eb2d1ee2a651fb495","sha512":"f1e175f4658e4cb1c603875c81f3b96caaab74346c78d9b320e564f0a09a8518b11123509351bfa5229ac9d867d56c6afc1118ce7c368ff1ce729de877c7d694","ssdeep":"3072:+jY7nFuuslX/Na3u6NxIeLSJhy1yiSS64pOknRBb9Wsr9BbrC3YLrmYRJ:2Yx5U/Na3JpLSJhyJOaRBRtBHzLrmYRJ","tlshash":"e9640932214252359aea82da66514604b3398085f516cfacff2ceddd4c6e9c731fabb4","first_seen":"2024-12-01T14:07:01.698179Z","last_seen":"2026-04-02T13:28:52.627773Z","times_seen":668,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixibay.cc/2426vbhxujg10000.jpg","fqdn":"pixibay.cc","domain":"pixibay.cc","tld":"cc"},"ip":{"addr":"172.67.207.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fdewsdc.sbs/embed/2426vbhxujg1","date":"2025-10-26T22:48:07.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixibay.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 21:35:53 GMT","end":"Wed, 10 Dec 2025 22:34:09 GMT"},"fingerprint":{"sha1":"E6:A3:9E:B3:AF:60:C0:2D:99:51:CA:AC:FD:48:96:12:C7:E6:68:9B","sha256":"26:FF:91:61:26:88:B9:80:39:5F:76:A7:35:B8:89:8A:DD:69:DA:9B:B8:C3:22:70:70:7E:E7:3E:EE:C3:A7:06"}}},"request":{"raw":"GET /2426vbhxujg10000.jpg HTTP/1.1\r\nHost: pixibay.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fdewsdc.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 22:48:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 746727\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 21 Oct 2025 00:24:04 GMT\r\netag: \"68f6d2a4-b64e7\"\r\nexpires: Sun, 02 Nov 2025 22:48:08 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5bD42i%2BUn6iskFoOlNYnV0JgIlm1mbVXiimBDUKHDkk9fxfPHu5HZBOafP0%2Bgir0mIXii7rWaKGCLNpPkWphjuPEo2z8HO%2F6\"}]}\r\ncf-ray: 994d7fd77e1156b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":746727,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2000x1120, components 3","md5":"2b44a10292ea4caee1681bf52adc7027","sha1":"50c53c98f36b3ea0410b110638071e4e29d54a95","sha256":"f97359121ee9a8c0c48a2fb145f291d2a4ce2929938121c410da89446d7f56ed","sha512":"7e1fdcd507aea353e086def912b5326d3aac69116eeba226d870d7a32d35dd733a0ec876ba0b1c6ffd3237f59c213a2d5a1037eb9cedf16a821346cec3b78b37","ssdeep":"12288:gjEjgLlDQhPGzzPlr6/p0tYKW7TFAbgDc9WoWy8BGSZwMXG4R:yES8Czg0tiTibsc9WoWnJBWY","tlshash":"01f423bb093137efd4399e4804486b4f7e5b4d85fd0b2b66d206c2c0a9686bebcc81d5","first_seen":"2025-10-26T22:48:42.312775Z","last_seen":"2025-10-26T22:48:42.312775Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1905,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1132,"receive":773,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shahid-4u.my/cf-fonts/s/tajawal/5.0.11/arabic/700/normal.woff2","fqdn":"shahid-4u.my","domain":"shahid-4u.my","tld":"my"},"ip":{"addr":"172.67.181.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:04.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shahid-4u.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Oct 2025 17:43:52 GMT","end":"Fri, 23 Jan 2026 18:39:03 GMT"},"fingerprint":{"sha1":"72:00:52:7E:0E:E8:3C:1C:CB:F9:11:91:D6:47:93:A0:1F:DE:A4:88","sha256":"6B:0B:94:BF:97:85:78:77:C3:9E:34:62:8D:26:9E:5F:68:EE:21:D5:64:2A:2D:77:E5:3D:B7:67:4C:63:A9:22"}}},"request":{"raw":"GET /cf-fonts/s/tajawal/5.0.11/arabic/700/normal.woff2 HTTP/1.1\r\nHost: shahid-4u.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9\r\nCookie: XSRF-TOKEN=eyJpdiI6IktlMlBxOXlKM05mZVF3TTlRVkUyUnc9PSIsInZhbHVlIjoiZHZES0VITXVpRUx0YzVBcEx0RFVuQ1NnaFpuZzNnQXJnZWs5cEltcWRJNGhXY0w4STU0ejRIYkJGeGxCVXNKcytMMzVwd0VCY2x4WmFjVTRUejN1NXhOd2lqQXNGRkNVSnd2TThPNExtME05U0xiN3dMRXowT01LSVQ3QzFUNU4iLCJtYWMiOiI2MWJiMWU3NmI5MTAwYjc2NjU5YWE1NGE1MTBmOTkzMzZkOTU3OTBhMTQxNWQwZjc4MmI0MWY0ZjEyMmM5YWYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InV0SVVqZ1B3VFZDRWZaNnlHOUdLUkE9PSIsInZhbHVlIjoiT1hDaG9TRnVZZC9JMndLbXBqZDcvcEo5Nkxkb3BIQTNOTkZXTnptMHB3cEVkZ01yOXc5bmROcHlUU1AyYmhwaDROVlNTVmhqS2w1VGJRS2hKVXBLdUoydllMY1JSY091UjhxMHA2RUNxYlZTdXdqYWU0a3dyK0lQTngrNS9tNlQiLCJtYWMiOiI1YWVlNjNjMDVjMWQyZjY3MDY4ZGI5ZDFlZjkyNzQ4ZWNjYTQwYjhjNzhjOTE0N2JlZThlOWJmZDAzNGI2YzFmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 26 Oct 2025 22:48:04 GMT\r\ncontent-length: 9024\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jWP2AyM0981aKi6kZDgmB4K8LyQq%2B1gcR8Mc%2FDc1ouhHkiZHxYqSZK6DReJkawbKJI9P4cNtpk8f90OX7h5zwhERJlXrqo4nnI7bXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 994d7fc5f9b935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9024,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9024, version 1.0","md5":"10367de774c951da6562045f10109cb5","sha1":"18fca0c18f6e08f89b4f05cfc086382deece9d88","sha256":"fa5e72326681abee3a4952be582e1c2c2abb27932ef262610c078ce89541f919","sha512":"ea32eaf0b69c085dbdbe38d99153c6a7e4bce339391a7640db6ee415532387fdd168b4aae21a91cc8a2826d964f1b26ce5bdad42c85747808689f7ba9d0e2165","ssdeep":"192:zRHNs0HoBStpjkOacpBtQd7D7RW2qbd/45yWIs:lt3HuwpjkWRI37RWhlwqs","tlshash":"6b12bfe26e7e490ac4ffc2710ad8a0167af14ee8d6ba34f9d04612d5926f7dc0e48d4d","first_seen":"2025-09-09T12:45:33.159376Z","last_seen":"2026-04-16T20:32:20.795235Z","times_seen":758,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"shahid-4u.my","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:05.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 03:22:08 GMT","end":"Thu, 04 Dec 2025 04:21:53 GMT"},"fingerprint":{"sha1":"E6:3E:4F:B3:FC:53:DD:27:D8:25:AA:72:59:23:FF:63:FD:4F:1C:73","sha256":"B4:1F:47:61:EC:D3:B5:F8:B4:5E:F2:BF:CD:E8:CA:5A:7F:1E:80:E0:D8:8E:F2:70:3C:14:BB:81:DE:13:23:9A"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://shahid-4u.my/\r\nOrigin: https://shahid-4u.my\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 22:48:05 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 994d7fc77bd4712b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-16T21:11:27.901698Z","times_seen":84874,"resource_available":true,"data":null}},"time_used":320,"timings":{"blocked":19,"dns":3,"connect":1,"send":0,"wait":266,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-regular-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shahid-4u.my/watch/%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D9%85%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D9%81%D8%A7%D8%AA%D8%AD-%D8%B3%D9%84%D8%B7%D8%A7%D9%86-%D8%A7%D9%84%D9%81%D8%AA%D9%88%D8%AD%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D8%A7%D9%84%D8%AD%D9%84%D9%82%D8%A9-19-%D9%85%D8%AA%D8%B1%D8%AC%D9%85%D8%A9","date":"2025-10-26T22:48:05.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shahid-4u.my\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 26 Oct 2025 22:48:05 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 24948\r\ncf-ray: 994d7fc8bdfe712a-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"6421d693-6174\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 154795\r\nexpires: Fri, 16 Oct 2026 22:48:05 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=V00utfwdDAVy9iCegsGq%2FVnFA6s93YCQh%2FqPlJDPLXdyXaOGgLCaxgQNtXhTvrwhtid6DqRiHW5b5LJ%2BykBKBgLqcpw7ase2xv2sGHcGvljIwCYyuzI0HDkaRqX8eWnLcEXfoQUj\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24948,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 24948, version 772.256","md5":"61f30b79daf5b31f0d254a31fba66158","sha1":"fb363d27cfdfe71a243fa2ac3dab2815232b9b7e","sha256":"8e7e5ea1b15f62ab14dbd41768e8fbcd21cc859a4ea5da812457ee714299fb35","sha512":"db6f82dbbfd0c77d1b34074ed2eeaa8659924ab1a4320fdeee93eec36ab98516fd92836765ced03f0acb70d153ac14c4b50b7dfcc8f105a995fc4e65bffbdcd1","ssdeep":"768:E5ZyQM6ylMx2k3xyF7RwyXb3QoqKGENDWteN:E5ZtSMx2VhR/bACGEv","tlshash":"6fb2f12c52f0ffb7d4c74a2ad8b84f2218e2b030e5f19111b44ce8b5da4bac8945a327","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-04-16T19:06:21.585637Z","times_seen":8429,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}